Foxpass Privileged Access Management

Overview

Foxpass is a privileged access management platform designed to automate and secure access to servers and networks to help protect them against cyberattacks, while reducing the strain on IT teams to manually manage privileged credentials. Foxpass is compatible with Windows, Linux/Unix and macOS servers, and offers integrations with cloud mail clients and a range of third-party identity and access management solutions for ease of deployment and a smooth, SSO-enabled login experience across all corporate systems, making it user-friendly for end users as well as administrators.

Features

SSH Key And Password Management

Foxpass offers self-service SSH key and password management for servers, Wi-Fi networks, VPNs and machine. Admins can configure and enforce password requirements, encouraging the use of stronger passwords across all privileged accounts, as well as enable SSH key and password rotation to mitigate the risk of standing credentials; this means that, if a threat actor manages to steal a password, they’ll only be able to use it to sign in once before the credential is rotated—greatly limiting the impact of a breach. Admins can also enable multi-factor authentication (MFA) across privileged accounts.

Full-Featured API

Admins can use Foxpass’ full-featured API to configure access policies for users and user groups and automate server access control according to these policies. This gives them greater control over which users can access which assets, as well as enabling them to assign privileges “just-in-time”. Admins can also manage and edit user information and orchestrate host access. Finally, admins can use the API to pull LDAP and RADIUS logs to automate their threat detection and response processes.

Cloud-Hosted LDAP And RADIUS

With cloud-hosted LDAP and RADIUS, Foxpass can offer full single sign-on (SSO) and MFA support across all machines, Wi-Fi networks and VPNs. Admins can securely log LDAP and RADIUS requests for greater visibility—both historically and in real-time—of access use across their most critical systems.

Ease Of Use

Foxpass Privileged Access Management’s integrations with Microsoft 365 and Google Workspace, as well as third-party identity and access management (IAM) solutions, make it easy to deploy the solution both on-prem and in the cloud. Customers highly praise Foxpass’ 24/7 support offering—from initial deployment calls to ongoing maintenance support—and particularly their live video calls with tech support engineers. Some users report that the user interface could be a little more intuitive, but that it’s simple enough that this doesn’t cause any real issues beyond aesthetics.

Pricing

Foxpass is available via three plans: Standard, OS Logins, and Engineering.

Standard For $3/user/month, Standard offers robe-based access controls, cloud-hosted LDAP and RADIUS for SSO, LDAP and RADIUS logging for automated threat detection and response, pager duty integration, basic support and integrations with Microsoft 365, Google Workspace, Okta and OneLogin.

OS Logins For $5/user/month, OS Logins offers the Standard features plus Linux/Unix, macOS and Windows authentication.

Engineering For $7/user/month, Engineering offers the OS Logins features plus SSH key authentication and management.

Foxpass also offers optional add-ons, including session recording, LDAP write capabilities, SSO and premium support.

Final Verdict

Foxpass’ main strength lies in the high level of security it provides against unauthorized account access, via its granular API access controls and its SSH key and password management functionality. While it doesn’t offer the level of reporting and auditing functionality required to meet a compliance use case, we highly recommend Foxpass as a strong solution for organizations looking to implement PAM to increase the security of their privileged accounts.

The flexible deployment options and packages make Foxpass suitable for organizations of any size, and the dedicated customer support enables small businesses to leverage the enterprise-grade security offered with relatively little difficulty.