Keeper Security

Use Keeper Security data with Cortex XSIAM.

Important

This connector is only available for tenants that onboarded after July 26, 2026. For tenants that onboarded before this date, use Marketplace to access the standalone integration. For more information, see Marketplace.

This connector is available with any active Cortex XSIAM license.

Access the Keeper Security Admin Console to track and manage multiple Keeper Security products. Fetches audit logs from the Keeper Security Admin Console as events, with XDM mapping for key event types.

This connector includes the following sub-capabilities (Marketplace integrations link to PAN DEV for more information):

• KeeperSecurity: Use this integration to fetch audit logs from Keeper Security Admin Console as XSIAM events.

To configure this connector, follow the steps outlined in the configuration wizard.