Sectona Privileged Access Management

Sectona Technologies is an Indian identity security vendor that builds the Sectona Security Platform for privileged access management (PAM), endpoint privilege management and cloud access management. It serves banks, telecom operators, government bodies and manufacturers across India, the Middle East, Africa and Southeast Asia, with customers such as Airtel Business, Kotak Securities, Guaranty Trust Bank, Qatar Financial Centre and PT Aisin Indonesia Automotive.

Sectona PAM centrally stores, manages and rotates passwords, SSH keys, API tokens and service account secrets in an encrypted vault with optional HSM and a break-glass satellite vault. Privileged users connect through RDP, SSH, SQL or web sessions that are recorded with video, command and keystroke logs and can be terminated on anomalies. Just-in-time elevation, multi-level approvals, behaviour-based threat analytics and adaptive MFA reduce standing privileges. It runs as SaaS, self-managed on-premises, in private cloud or as PAM as a Service through MSPs.

• Credential vault: Stores passwords, SSH keys, API tokens and service account secrets with AES-256 encryption and optional HSM.
• Session management: Records RDP, SSH, SQL and web sessions with video, command and keystroke logs.
• Just-in-time access: Grants time-bound elevation and task-level delegation toward zero standing privileges.
• Approval workflows: Supports multi-level approvals with automated ticket linking to ServiceNow.
• Threat analytics: Scores risk and highlights anomalous privileged behaviour on dashboards.
• DevOps secrets: Automates secrets for Jenkins, Ansible, Terraform, Kubernetes and GitHub via APIs and PAM-as-Code.

A Vietnamese bank can vault core banking administrator accounts and record all vendor maintenance sessions for State Bank inspections. A securities company can rotate database credentials automatically and require approvals for production access. A manufacturer can control and record remote access by equipment suppliers to factory servers.

Centralized vaulting and automatic rotation remove shared and hard-coded administrator passwords. Tamper-proof session recordings and command logs provide audit evidence for regulators such as central banks and PCI DSS assessors. Just-in-time elevation moves organizations toward zero standing privileges, limiting damage from compromised accounts. Flexible delivery, including on-premises for data sovereignty and PAM as a Service, fits both large banks and mid-sized firms.

Privileged credentials remain a leading cause of breaches, and financial regulators increasingly mandate session recording, password rotation and least privilege for administrators and third-party vendors. In Vietnam, banks, securities firms and critical information systems face similar requirements under information security regulations, creating demand for PAM that can be deployed on-premises.

Legal entity Sectona Technologies Private Limited (India). Named a Challenger in the KuppingerCole Leadership Compass for PAM (2021-2024) and a Customers' Choice in the 2024 Gartner Peer Insights Voice of the Customer for PAM. Customers span India, Indonesia, Thailand (Dusit Thani), Oman, Qatar, Saudi Arabia, Nigeria and Uganda. Partner Elcore covers Turkey.