About Endpoint Privilege Manager (EPM)

Prev Next

What is EPM?

Endpoint Privilege Manager (EPM) is a comprehensive security solution designed to protect organizations from insider threats, compromised identities, and malicious attacks by providing advanced endpoint security and privilege management.

Why is EPM important?

In our modern digital world, keeping computer systems and devices safe is very important. EPM helps protect an organization's computers by:

  • Reducing the risk of unauthorized access.
  • Preventing privilege abuse.
  • Protecting sensitive organizational data.
  • Ensuring compliance with security regulations.

Key benefits

Enhanced security

  • Remove unnecessary admin privileges.
  • Grant just-in-time or on-demand endpoint privileges.
  • Detect and prevent atypical behavioral patterns.

Comprehensive compliance

  • Automate privileged access controls.
  • Meet regulatory requirements (PCI, ISO, SOX, GDPR, NIST).
  • Provide comprehensive audit trails.

Advanced access control

  • Enforce least privilege principles.
  • Control application and software installation.
  • Implement strong segregation of duties.

Components of EPM

Operating system support

  • Windows.
  • Linux.
  • macOS.

Core features

  • Privilege management.
  • Application control.
  • Single sign-on.
  • Behavioral analytics.
  • Audit logging.
  • Centralized authentication.

Key features

  • Controlled administrative access.
  • Privileged credential management.
  • Session monitoring.
  • Risk mitigation.
  • Automatic privilege provisioning and revocation.

Technical capabilities

Windows version

  • Controlled access to Windows Control Panel.
  • Privileged local user access management.
  • Active Directory integration.

Linux version

  • Advanced security layer over existing tools.
  • Sudo action recording.
  • Centralized Linux credential authentication.

macOS version

  • Execution policy control for permission or restriction, as well as privilege elevation based on segregation (general, users).
  • Application execution recording, as configured for auditing.
  • Configuration of actions for executions not specified in policies (Minimum Security Requirements).