Keeper Security has introduced a Freshservice Workflow integration that allows IT and security teams to manage vault access requests and privileged access approvals directly within Freshservice tickets.

The integration connects Keeper vault access and approval requests to the ticketing systems IT and security teams already use. Agents can fulfill requests and manage approvals for Keeper vault access, including Endpoint Privilege Manager and Cloud SSO device approvals, without leaving a Freshservice ticket to access a separate system.

The Keeper Security Freshservice Workflow App allows agents to search Keeper content, configure permissions and approve or deny requests through a Keeper Vault tab within a ticket. The workflow is intended to reduce delays associated with switching between systems and prevent access decisions from moving through unaudited channels such as email or chat.

According to Keeper, the integration processes every action through a customer-hosted Keeper Commander ServiceMode endpoint, preserving the platform's zero-knowledge encryption and access controls. Credentials are not stored within Freshservice's IT Service Management (ITSM) and Enterprise Service Management (ESM) platform.

"The cryptographic boundary cannot move outside Keeper,” said Craig Lurey, CTO and Co-founder of Keeper Security. “This integration processes every approval through Commander ServiceMode on infrastructure owned and controlled by the customer, so the attack surface doesn’t expand when you wire Freshservice into your approval workflow. Freshservice is the interface for the request, never the place where secrets are stored."

The integration also aims to maintain audit trails by keeping access approval decisions within a governed workflow. Darren Guccione, CEO and Co-founder of Keeper Security, said the integration helps organizations maintain zero standing privilege and audit control as access requests increase across human and machine identities.

"Every access request is an identity decision, and the further those decisions drift from a governed system, the weaker the audit trail becomes,” Guccione said. “Integrating Keeper into Freshservice keeps approval decisions inside a ticketing system that security teams already trust, which means zero standing privilege and full audit control stay intact. This becomes increasingly important in the agentic era, as access requests multiply across both human and machine identities."

When paired with Keeper's ITSM for Freshservice app, the integration also supports Endpoint Privilege Manager and Cloud SSO device approvals. This enables security administrators to use a single ticketing interface for both incident-driven access requests and routine approval workflows.

The Keeper Security Freshservice Workflow App is available now through the Freshworks Marketplace for organizations with an active Keeper Commander deployment.