Keeper Security Surpasses Key Milestone Toward DoD IL5 Authorization, Hardening Identity Security for National Defense

Independent assessment advances the award-winning, FedRAMP High Certified PAM platform toward authorization for the Department of War's most sensitive unclassified workloads

CHICAGO, Nov. 10, 2026 — Keeper Security, the leading zero-trust and zero-knowledge identity security platform, today announces that Keeper ICAM & Identity Security Platform for Government has completed its assessment by a third-party assessment organization (3PAO), bringing the organization a key step closer to Department of War (DoW) Impact Level 5 (IL-5) Provisional Authorization (PA).

An IL-5 PA, once granted by the DISA Authorizing Official, will enable Keeper ICAM to host and manage highly sensitive, unclassified DoW information. It will extend the FedRAMP® High Certification Keeper earned in 2025 into the Department's most demanding unclassified environments, and further strengthen Keeper's position as a trusted cybersecurity partner for the federal government.

"Securing our nation's warfighters requires identity security solutions built for the most demanding threat environments, without the friction of legacy systems," said Darren Guccione, CEO and Co-founder of Keeper Security. "The DoW is modernizing rapidly, and protecting its systems requires governing, not just human users, but the explosion of machine identities and AI agents as well. Keeper is excited to achieve this key step toward ensuring DoW has access to the cutting-edge security they need to meet the mission."

The Defense Information Systems Agency defines IL-5 as the level for unclassified National Security Systems (NSS) and National Security Information, including Controlled Unclassified Information (CUI) that requires protection beyond IL-4. An IL-5 PA is assessed against the FedRAMP High baseline plus DoW-specific and NSS controls. It also requires strong environment isolation and limits privileged access to U.S. citizens.

Federal agencies including the National Aeronautics and Space Administration, the Department of Justice and the Department of Energy already rely on Keeper to protect critical infrastructure and data. Building on its 2025 FedRAMP High certification, Keeper is pursuing DoW IL-5 Provisional Authorization to extend that momentum across the DoW and defense contractors.

Keeper provides both on-premises and cloud-native deployment options to meet the needs of government, defense, Operational Technology (OT) and air-gapped environments. Self-Managed Keeper (SMK) is a self-hosted, container-based deployment that provides credential management, secrets management and privileged access management within an organization's owned and operated infrastructure, including on-premises data centers, private clouds and fully air-gapped networks. The platform operates without connectivity to Keeper's cloud service, allowing organizations to maintain their own data boundary and continue accessing credentials and privileged sessions during internet or cloud outages.

Engineered for rapid deployment and seamless administration, Keeper's original cloud-native platform provides the same unified identity security solutions built on a zero-trust, zero-knowledge security foundation accessible from any location or device. This unified approach enables federal agencies to secure every user, device and machine identity across their environment, reducing the risk of data breaches, ransomware and credential-based attacks.

With FedRAMP High in hand and DoW IL-5 Provisional Authorization in pursuit, Keeper continues to give federal agencies a seamless, highly secure way to manage privileged access at scale. Keeper ICAM & Identity Security Platform for Government is available on the FedRAMP Marketplace. Learn more about Keeper's public-sector solutions at KeeperSecurity.com/federal-government.

Media Contact
Katherine Benfield
ICR for Keeper Security
[email protected]

SOURCE Keeper Security