Your privileged password platform was retired. Here is the upgrade.
You ran privileged password management before most of the market had a name for it. You changed thousands of administrator passwords on a schedule and pushed every new value to the services and tasks that used it. You proved it to your auditors. Then the platform reached end of support.
AIC Enterprise Privilege Suite™ from Analog Informatics Corporation (AIC) is your upgrade path. It was built from a clean sheet by the founder widely credited with creating Privileged Identity Management (PIM), and by the team that worked with him for up to 20 years. See Leadership.
This is not a port of an old design. It is a new generation of privilege management. It does everything you depended on. It includes the tools you had to buy from other vendors. And it adds an integrated governance, risk, and compliance (GRC) system that did not exist in privilege management before.
Request your 30-day free trial | Plan your upgrade
Previously separate
- Privileged password platform
- Session recording
- Elevation
- Multifactor sign-in
- Compliance reporting
AIC Enterprise Privilege Suite
- Privileged password management
- Session recording
- Elevation
- Multifactor sign-in
- Compliance reporting
- Governance, risk, and compliance
Everything you ran before
The work you built your program on is all here.
| What you relied on | In AIC Enterprise Privilege Suite™ | Availability |
|---|---|---|
| Discovery of systems, accounts, and privileged group membership | Discover Windows, macOS, Linux and Unix, Active Directory and LDAP, databases, cloud accounts, network and hardware devices, and applications | Available now |
| Mass password change on a schedule | Change administrator, service, and application credentials on thousands of systems at once | Available now |
| Propagation to everything that uses a credential | Push each new value to services, scheduled tasks, application pools, COM+ and DCOM applications, connection strings, and configuration files | Available now |
| Web password recovery and checkout | Vault, check out, and check in credentials with approval and audit | Available now |
| Shared credentials and delegation | Shared credential lists and per-object delegation to named people and groups | Available now |
| Custom platforms | SSH and Telnet scripts, browser automation, and the REST API (OpenAPI) | Available now |
| Compliance reports | Pre-built reports and export | Available now |
What you used to buy separately
The tools that sat next to your password platform are now in the same console, on the same data, with one audit trail.
| What you bought separately | In AIC Enterprise Privilege Suite™ | Availability |
|---|---|---|
| Session recording | Recorded SSH, RDP, and VNC sessions with replay | Available now |
| Privileged session broker | Live SSH, RDP, and VNC sessions in the browser through Jump, with approvals and command restriction that blocks dangerous commands as they are typed | Available now |
| Endpoint privilege elevation | Privileged User Management (PUM): elevation, delegation, least privilege, application and command control, and just-in-time elevation. Windows is the most complete today. Apple Mac and Unix/Linux are expanding | Available now, wider scope planned |
| Multifactor sign-in | Active Directory and LDAP sign-in, Microsoft Entra ID, Okta, Ping Identity, and other OpenID Connect and SAML 2.0 providers, with another step beyond a password. RADIUS and Duo supported | Available now |
| Event forwarding to your SIEM | Windows Event Log and syslog in RFC 5424, CEF, or LEEF, routed per event type to Splunk, Microsoft Sentinel, and other destinations | Available now |
| Hardware key custody | Keys in software, a PKCS#11 hardware security module (HSM), or a customer-owned cloud key service | Available now |
| Certificate renewal | Renewal of TLS certificates from public and private ACME certificate authorities and the built-in certificate authority, with an automatic renewal schedule and deployment to Windows and Linux systems. Certificate discovery and more certificate authorities are planned | Available now, wider scope planned |
What you could only wish for before
These capabilities were not part of privilege management when your old platform was designed.
| New capability | What it does | Availability |
|---|---|---|
| Integrated governance, risk, and compliance | The Assessment Binder, a living evidence package; Current State Compliance, a ledger of control findings with rescan; a risk register; and Plan of Action and Milestones (POA&M) tracking. All built from the same records the suite already keeps | Available now |
| Training and attestation | Assign documents to named people and collect a signed attestation | Available now |
| Configuration compliance | Check workstations and servers against baselines, repair known settings, and flag what needs IT | Available now, wider scope planned |
| Threat intelligence and conditional access | Deny sign-in from addresses on threat feeds, step up or deny by country and network, and report attempts mapped to MITRE ATT&CK | Available now |
| Blast radius | See how many hosts and services each shared credential reaches, and reduce it with a preview first | Available now |
| Air-gapped rotation | The Agent rotates passwords on schedule with no server connection, updates Windows services, scheduled tasks, IIS, COM+, and ASP.NET, and runs signed customer scripts before and after the change | Available now |
| Data classification | US government, NATO, and national markings with clearances and audited release | Available now |
| Identity Governance and Administration (IGA) | Account lifecycle and periodic access review for suite accounts. Governance across other applications is planned | Available now, wider scope planned |
The upgrade path
- Talk to us. Tell us what you ran and how you used it. Plan your upgrade.
- Bring your data across. Our migration tooling reads your existing database and brings your systems, accounts, account stores, shared credential lists, and delegation into the suite.
- Keep your scripts running. A compatibility interface accepts the REST calls your existing automation already makes, so your integrations keep working on day one.
- Run side by side, then cut over. Prove rotation and propagation on your own systems before you switch.
- Use the partner you trust. We work with the reseller, Managed Service Provider (MSP), or service provider you already use. See Migration program.
Try it on your own systems
Every product is free for 30 days. Run it in your environment, air-gapped or connected, on Windows, Linux, or Apple Mac, in the cloud or on premises.
Related pages
- Capabilities
- Privileged Identity Management
- Privileged User Management
- Migration program
- Service providers
- Air-gapped systems
- Pricing
For more information about Analog Informatics Corporation, please go to analoginfo.com.