Essential Compliance

Passwordstate assists enterprises in achieving compliance with global standards such as NIST, PCI DSS, HIPAA, NERC/CIP, and SOX. Comprehensive auditing and Features such as compliance reporting help your organization demonstrate adherence to regulatory requirements. Request our comprehensive Compliance Checklist here Request Compliance Checklist


Granular Role-Based Access Control

Achieve secure and precise segregation of access with our role-based access controls (RBAC). Permissions can be assigned at the individual user, group, or password level. Security Administrators benefit from 45 unique roles, allowing for granular control over system access and operations.


Compliance reporting

With over 120 auditable events, Passwordstate offers extensive insight into user activities, system changes, and access events. Reports can be generated on-demand or scheduled to assist in meeting your compliance needs. Access a detailed list of our available reports and audit events on this page.


Near Real-time Email Notifications

Passwordstate includes 56 near real time email notifications, ensuring business and IT stakeholders remain informed about key activities and access. These notifications enhance operational awareness and are instrumental in ensuring compliance oversight. You can see a complete list of Email Notifications here - Email Notifications.


Password Strength and Complexity Enforcement

Passwordstate enforces policy-driven password complexity, with real-time strength assessments for every password created or modified by users. This feature enhances your security posture by ensuring adherence to your defined password policies.


Automated Password Resets and Recommendations

Enable automatic password rotation with configurable expiration settings. When users access to passwords is removed Administrators receive notification providing recommendations to ensure seamless security and maintain compliance.


SIEM Integration

Integrate Passwordstate's extensive audit capabilities with your organization's SIEM solutions to consolidate security event correlation.


Pre-Defined and Customizable Reporting

Passwordstate offers 49 pre-defined reports covering users, permissions, activities, and more. Reports are accessible on-demand, scheduled, or via API, and available in HTML or CSV formats. Tailor reporting to meet your enterprise's unique auditing needs. Below is a detailed list of our available reports:


User Reports
What passwords can a user see?
What passwords does a user still know?
What has a user been doing lately?
What Failed login attempts have there been?
Who hasn't logged in recently?
Who has one or more Security Administrator roles?
What Remote Sessions has a user been doing lately?
What user accounts are currently disabled?
What user accounts are set to expire?
Which users have logged in using the Emergency Access account?
What user account impersonation has been occurring?
What authentication option is applied for each user?

 
Password Reports
What passwords have failed Heartbeat?
What passwords have failed Reset?
What passwords require checkout?
What passwords are currently checked out?
What passwords require a Reason to be specified for access?
What passwords are expiring soon?
What passwords have recently been reset?
What password values have been reused?
What passwords have not been used lately?
What Passwords are not being synced?
Show Passwords configured for resets and their dependencies
Passwords Strength Compliance Status
Have I Been Pwned Compromises


Permission Reports
What permissions exist (all users and security groups)?
What permissions exist for a user?
What Permissions exist for a Security Group?
What permissions have changed recently?
What permissions exist for all shared password records (enumerated permissions report)?
What permissions exist for all Host Folders?
Who has been approved access to passwords recently?
Who has been denied access to passwords recently?
How many Administrators are there for each Shared Password List?
How many Administrators are there for each Password Folder?

 
Activity Reports
Remote Session Launcher Activity
Browser Extension Activity
Mobile Client Actviity
API Activity
Self Destruct Activity
Passive High Availability Module Activity

Miscellaneous Reports
Where are Privileged Account Credentials currently being used?
What security groups exist, and who are their members?
What Host records exist in Passwordstate, and what are each of their configuration items?

 
Document Reports
What documents have been uploaded into Password Folders?
What documents have been uploaded into Password Lists?
What documents have been uploaded into Password records?
What documents have been uploaded into Host Folders?
What documents have been uploaded into Host records?

Near Real Time and Scheduled Auditing

Monitor over 120 audit events in near real time or configure automated schedules for reporting. Event categories range from access approvals to account deletions, providing comprehensive visibility into password access and usage. Below is a list of the different categories:

Elevate your organization's password management practices with Passwordstate. Discover how our advanced reporting and security features can assist in aligning your operations with enterprise-grade standards.