ENDPOINT PAM
GO Endpoint Manager for Windows and Linux endpoint and workstation privilege management.
Endpoint security or endpoint protection is an approach to protecting computer networks that are remotely connected to client devices.
Connecting endpoint devices such as laptops, tablets, mobile phones, IoT devices and other wireless devices to corporate networks expands the attack surface that can be used by malicious actors to perform their activities.
Endpoint security attempts to ensure that such devices adhere to a defined level of compliance with standards.
Endpoint and Workstations Privilege Management
GO Endpoint Manager allows you to perform functions such as Windows UAC, Run As on local workstations, and thus run applications that require privileges, including recording sessions in Windows and Linux. A local agent is able to launch applications by entering credentials automatically.
Thus, applications authorized to use this type of privilege elevation are previously listed in the solution through allowlist and their use is restricted to authorized users.
It is also possible to configure denylist to include unauthorized applications in the environment and map network drives on workstations. senhasegura also allows the user to provide a token-generated value to authenticate to the device.
Some of the benefits of implementing GO Endpoint Manager are:
GO Endpoint Manager allows segregation for access to sensitive information, isolating critical environments and correlating environments with and without correlation. Taking this into account, it is important to avoid data breaches, the biggest challenge in the management of privileged users.
All requests to use administrative credentials are logged in session logs, bringing greater traceability of actions and making it easy to audit privileged activities and actions.
Control of authorized, notified, and blocked action lists for each user, reducing risks related to the installation of malicious software and abuse of privilege, which can compromise the whole environment.
Overcome the challenges of implementing regulations such as PCI, ISO, SOX, GDPR, and NIST, with automation of privileged access controls to achieve maturity in the audited processes.
Clients
An endpoint privilege management solution makes all the difference for exponentially growing companies that increasingly want more security and agility in operations.
PRIVILEGE MANAGEMENT FOR WINDOWS AND LINUX
Authorized applications to use privilege elevation are previously listed in the solution, and their use restricted to authorized users only.
What are the main features for Linux?
Restrict user privileges on Linux workstations by allowing Run As to run on local workstations to run applications that require privileges.
Integration of Linux login information into group policies. In this case, it is possible to validate each authentication performed by time, calls, authorizations, and additional group policies.
Additional security layer over tools like ACL, PAM, SELinux and sudo, with no need to recompile the kernel, acting directly like LSM (Linux Security Machines).
It is possible to invoke administrative privileges to execute applications, considering control by lists of actions authorized for execution.
Recording of sudo actions to meet audit requirements.
Execution and automated access to applications through automation macros with actions predefined by the environment administrator.
It is possible to centrally perform authentication of Linux environment credentials by loading Active Directory profiles.
What are the main features for Windows?
Restrict user privileges on Windows workstations by allowing Run As to run on local workstations to run applications that require privileges.
GO Endpoint Manager allows invoking administrator privileges to run applications, taking into account lists of authorized actions to execute.
Access to Windows Control Panel with administrative privileges, including features like date and time change functions.
Invoke administrator privileges to access sensitive data shared on the network. Security for files and directories against threats.
Provisioning and revoking privileged local user access on Windows, Linux, Unix, Databases and Active Directory platforms, without the need to install any agent on the target device.
Execution and automated access to applications through automation macros with predefined actions by the administrator.
A local agent is able to launch applications by entering credentials automatically.
Who is it recommended for?
senhasegura is a leading global solution in privileged access management with a mission to eliminate the abuse of privileges in organizations around the world.
The solution is recommended for companies in the following scenarios:
Companies with more than 10 users.
Companies that received points of attention in auditing.
Companies that need to reduce operating costs.
Companies that must comply with cybersecurity rules and regulations.
Companies that want to implement the best security practices.
Companies that have suffered a security incident.
Differentials
No Additional Costs
We offer a full-stack and plug and play platform with the shortest setup time.
Customer Recognition
Scored 4.9 out of 5.0 for a PAM supplier and received the 2021 Customer’s Choice seal.
Intuitive User Interface
This results in less training and support time and cost.
Connectors
It even allows the connection of legacy devices, which can be developed by the customer.
Rapid Deployment
In just 7 minutes, we can configure and deliver software and hardware architecture in High Availability.
Support Experience
In 2020, 97% of our services were rated as Excellent.
senhasegura is a sophisticated Privileged Access Management solution, schedule a demo.
Datasheet
Endpoint Protection
World Recognition
In 2021, senhasegura was recognized as a Challenger in the Gartner Magic Quadrant report. In the same year, Gartner also named us among the top three PAM technologies in the world in its PAM Critical Capabilities report.
In addition, senhasegura was listed in Forrester’s Wave report for Privileged Identity Management 2018, which considered our access granularity among the best in the market. In addition, senhasegura was named a Leader by KuppingerCole in its Leadership Compass 2021 report.
Customer Testimonials
"The product implementation was supposed to be complex in a major customer. The tool worked very well proved to be easy to work on, the deploy was fantastic and easy to roll-out. Another achievement was the support that was great and expected."
Security and Risk Management
"senhasegura offers High Availability capabilities and integration to multiple systems and platforms. Its intuitive interface to configure devices, credentials and access groups makes configuration fast and easy. For users and administrators senhasegura offers great User Experience with its simple and practical interface, which reduces operational costs and impacts to daily routines."
SR Information Security Analyst
"senhasegura offers a complete set of PAM capabilities that fully meets our business requirements. We currently use senhasegura to perform accesses in multiple network devices and servers. Besides that, we also use senhasegura.go, their PEDM solution to manage local admin users in workstations, which helped implementing the Principle of Least Privilege and reduce cybersecurity risks."
Network Administrator
Case
An great e-commerce platform for purchasing miles, reservations and travel.
Situation
With an extensive and diversified network of commercial and financial partners, such as airlines, banks, credit card administrators, large retail chains, hotels, car rental companies, gas stations, among others things, they had to manage hundreds of in-house applications. Indiscriminate privileged access to those applications with no traceability.
Problem
A complex environment with a legacy infrastructure to be manage.
Solution
Deployment of elevation of privilege agents for development teams, inhibiting the abuse of privileges.
Results
-
- Customer eliminated more than 93% of unauthorized access.
- Automation of the synchronized password change process at different points of dependency for critical applications.
- + Efficiency in implementing security controls for internal applications.
- + Maturity in regulatory audit processes.