D ATA S H E E T

CYBERARK APPLICATION ACCESS MANAGER™

The Challenge
Enterprises typically rely on both commercial and internally developed applications to run their Key Benefits
businesses, and today enterprises are increasingly leveraging automated IT infrastructure and
DevOps methodologies to increase business efficiency and accelerate innovation. Application For Security Teams
and IT environments can vary significantly within the same organization. For example, some IT ƒƒ Eliminate embedded application
environments are largely static, while others, such as containerized environments, are highly credentials and consistently
dynamic. Regardless, each application, script, automation tool, and other non-human identity manage and audit privileged
relies on some form of privileged credential to access other tools, applications, and data. access for applications across
on-premises, hybrid and multi-
Privileged credentials pose a variety of challenges for IT security, operations, and compliance teams: cloud environments. Support
• Non-human credentials are widespread – they include embedded hard-coded credentials in an enterprise-wide centralized
business-critical applications including both internally developed and commercial off-the- privileged access solution for human
shelf solutions (COTS), security software such as vulnerability scanners, application servers and non-human identities.
and IT management software, Robotic Process Automation (RPA) platforms, and the CI/ For Operations
CD (Continuous Integration/Continuous Deployment) tool chain. ƒƒ Improve IT operational efficiency by
• Non-human credentials need to be managed – in addition to eliminating hard-coded automating the management and
credentials in code and scripts, many of the same approaches and techniques used to rotation of application credentials for
applications running at scale.
protect privileged access by people can also be used. Examples of common approaches
include strong authentication, least privilege, role-based access controls, credential For Developers
rotation, management, and audit. ƒƒ Simplify securing applications
without impacting velocity. Use
• Automated processes are incredibly powerful – they can access protected data, open source solutions to simplify and
scale at unparalleled rates, leverage cloud resources, and execute business processes
accelerate usage.
instantaneously to drive tremendous value. However, as well-publicized security breaches
demonstrate, automated processes are susceptible to sophisticated cyberattacks, which can For Compliance and Audit
occur suddenly and spread rapidly. Businesses must protect privileged credentials assigned ƒƒ Enforce internal and regulatory
to non-human identities, to defend against attacks and mitigate risks. requirements for managing and
monitoring application credentials.
Additionally, privileged access security credentials for non-human identities are typically Generate detailed audit trails.
assigned and managed by people such as IT and DevOps administrators. Consequently it
is critical that their access privileges are also managed and secured consistently across the
extended enterprise.

The Solution
CyberArk Application Access Manager is designed to provide comprehensive privileged access, credential, and secrets management for widely
used application types and non-human identities. For example, Application Access Manager secures credentials for commercial off-the-shelf
applications, traditional internally developed applications, scripts, as well as containerized applications built using DevOps methodologies.
• For securing commercial off-the-shelf solutions – Application Access Manager can be used to provide and manage the credentials that
third-party tools and solutions such as security tools, RPA, automation tools, IT management, etc. need to complete their jobs. For
example, a commercial vulnerability scanner typically needs very high levels of privileged access across the enterprise’s infrastructure to
scan systems and make an assessment. Application Access Manager enables organizations to avoid the need to store privilege credentials,
passwords, keys, etc., within COTS solutions, and instead easily and securely use the required credentials from the CyberArk Vault. To make
third party integrations easier CyberArk offers the widest eco-system of validated COTS integrations for securing privileged access.

www.cyberark.com Page 1 of 2
 C Y B E R A R K D ATA S H E E T

• For internally-developed traditional applications – Application Access Manager can

be used to protect business-system data and simplify operations by eliminating hard-
coded credentials from internally developed applications and scripts. The solution helps Overview
protect against unauthorized privileged account access and mitigate risks, providing a
comprehensive set of features for managing application passwords and SSH keys. The COTS Application Integrations
solution supports a broad range of application environments and platforms, including ƒƒ Security Software: Vulnerability
application servers, Java, .Net, scripting running on a variety of platforms and operating Management, Discovery Solutions, etc.
systems including Unix/Linux, Windows and zOS. ƒƒ IT Management Software

• For cloud-native applications built using DevOps methodologies – Application Access ƒƒ Robot Process Automation and other
Automation Solutions
Manager provides a secrets management solution tailored specifically to the unique
requirements of native-cloud and DevOps environments. The solution manages secrets Application Servers:
and credentials used by non-human identities including DevOps and PaaS tools, and ƒƒ IBM WebSphere Application Server,
containers. The solution integrates with a wide range of DevOps tools such as Ansible, WebSphere Liberty
Jenkins, Puppet; PaaS/Container orchestration platforms such as Red Hat OpenShift, ƒƒ JBoss
Pivotal Cloud Foundry, and Kubernetes, whether running on-premises, hybrid or on ƒƒ Oracle WebLogic Server
multiple cloud platforms. The solution also integrates with CyberArk’s Enterprise Password ƒƒ Tomcat
Vault to provide a single enterprise-wide platform for securing privileged access. ƒƒ Wildfly

To better meet the needs of the developer community an open source version of Application Cloud native and DevOps Integrations:
Access Manager is available as Conjur Open Source at www.conjur.org. ƒƒ Tools/Toolchains: Ansible, Jenkins,
Application Access Manager provides robust enterprise-grade capabilities designed to meet the Puppet, Terraform
enterprise’s stringent performance and availability requirements. It also integrates with existing ƒƒ PaaS/Container Orchestration:

Active Directory, LDAP, and SIEM systems, helping organizations protect and extend previous Kubernetes, Red Hat OpenShift,
Pivotal Cloud Foundry
investments, and preserve established security models and practices.
ƒƒ DevOps Security: Aqua, Twistlock
Capabilities Enterprise grade:
Application Access Manager is designed to provide a strong security solution that enables organizations ƒƒ Active Directory and LDAP
to control, manage, and audit all non-human privileged access for applications, across on- ƒƒ Hardware Security Module (HSM)
premises, hybrid, containerized and multi cloud environments. The solution helps organizations: integration
• Establish strong authentication – by leveraging the native attributes of applications, ƒƒ Security Information and Event

containers, and other non-human identities to eliminate the “secret zero bootstrapping” Management (SIEM) Tools
challenge and potential vulnerability. ƒƒ AES-256, RSA-2048

• Simplify integrations – by supporting validated integrations with a wide range of SDK and Development Libraries:
commercial software platforms, applications and tools, such as business applications, ƒƒ DevOps: Go, Java, Ruby, Python
security tools, RPA platforms, CI/CD toolsets, and container platforms. ƒƒ Application SDK: C/C++, CLI, Java,
• Accelerate deployment and usage – by providing developers with an easy-to-use solution .NET, Web Service/REST
to secure secrets in application and DevOps environments – allowing them to focus on
developing software. Additionally, the open source solutions make it easy for developers
and DevOps admins to evaluate, deploy, and secure their DevOps environments.
• Ensure a comprehensive audit on any access – by tracking all access and providing tamper-resistant audit.
• Consistently apply access policies – by applying role-based access controls on non-human identities, leveraging integrations with other
CyberArk and partner solutions to centralize policy management across the enterprise, and other policy-based controls.
• Ensure business continuity and other enterprise requirements – including scalability, availability, redundancy and resiliency, alerting,
policy-based rotation, and other enterprise requirements.

CyberArk Privileged Access Security Solution

CyberArk Application Access Manager is part of the CyberArk Privileged Access Security Solution, a comprehensive solution to protect,
monitor, detect, alert, and manage privileged accounts and other credentials for both human and non-human users and identities. Elements in
the solution can be deployed independently, or combined to form a cohesive, end-to-end privileged access solution that delivers enterprise-
class privileged access security across on-premises, hybrid, multi-cloud, PaaS, and DevOps environments. The comprehensive solution helps
businesses significantly reduce attack surfaces by applying consistent privileged access security policies to human and non-human users and
identities across the extended enterprise.

©Cyber-Ark Software Ltd. All rights reserved. No portion of this publication may be reproduced in any form or by any means without the express written consent of CyberArk Software.
CyberArk ®, the CyberArk logo and other trade or service names appearing above are registered trademarks (or trademarks) of CyberArk Software in the U.S. and other jurisdictions.
Any other trade and service names are the property of their respective owners. U.S., 02.19. Doc. 321929743
CyberArk believes the information in this document is accurate as of its publication date. The information is provided without any express, statutory, or implied warranties and is subject
to change without notice.
www.cyberark.com Page 2 of 2