Keeper
The compliance-heavy US option with a UK price list: Business Starter at £2.00 a user, ISO 27001, SOC 2 Type 2 and FIPS 140-3, passkeys that unlock the vault, a TOTP authenticator, a Commander CLI, Terraform providers and a vendor-built MCP server, 24/7 phone support and an EU data region. The catches: SSO and SCIM are Enterprise-only at £5.00, reporting and secrets are paid add-ons at every tier, there is no free plan and no monthly billing, and the company once sued a journalist over a vulnerability report.
How we testKeeper Security, Inc. (Chicago, private) sells the widest compliance stack in this comparison: ISO 27001, 27017 and 27018, SOC 2 Type 2, FIPS 140-3 validated cryptography, PCI DSS, and a FedRAMP High authorisation that applies to its separate GovCloud product rather than the commercial plans a UK firm would buy. The vault uses AES-256-GCM with record-level keys and stretches the master password with a million rounds of PBKDF2; Keeper says NCC Group and CyberTest test it quarterly but publishes no report, and runs its bug bounty on Bugcrowd. The record has one episode a buyer should know: in December 2017 Google's Tavis Ormandy found a flaw in the browser extension that let a malicious site read passwords, Ars Technica reported it, and Keeper sued the publication and its reporter for defamation; the suit was dropped by March 2018. Keeper stood up its disclosure programme afterwards. Data can sit in a US, EU (Ireland and Frankfurt), Australian, Canadian or Japanese region; there is no UK region and no CLOUD Act statement.
Prices in pounds from Keeper's UK site on 8 September 2026, all billed annually with no monthly option; the page shows leftover "excl. VAT" and "includes GST" template text next to every figure, so the VAT basis is genuinely unclear. Personal is £3.07 a month and Family £7.36 for five. Business Starter, sized for five to ten users, is £2.00 a user a month with the vault, admin console and basic activity reporting; Business at £3.50 adds shared team folders and delegated administration; Enterprise at £5.00 is where SSO Connect (SAML with Entra ID, Okta, Google and any SAML provider), SCIM, AD and LDAP provisioning and role-based access live. Advanced Reporting and Alerts, compliance reports, BreachWatch dark-web monitoring and the Secrets Manager are paid add-ons on every tier, Enterprise included; Connection Manager is custom-priced. There is no free plan, trials are offered without a stated length, and no money-back guarantee was found.
The product itself is strong on credentials: passkeys are stored, filled and can unlock the vault, TOTP codes are generated inside it, YubiKeys and biometrics are supported, One-Time Share sends a record to anyone without an account, and departing staff have their vault transferred by an admin. Developers get the Python-based Commander CLI and SDK, SDKs for .NET, JavaScript and Python, Terraform providers, and a vendor-maintained MCP server for the Secrets Manager, which Keeper's own comparison table lists as an add-on. Support is 24/7 by email, live chat and phone with an EMEA number in Ireland. Trustpilot is 3.2 on 3,164 reviews: 77% are five-star, most of them older, and the recent unprompted ones about sync failures, an export refused after expiry and a cancellation link that moves before renewal weigh the score down.
Not yet tested by Saaskly: assessed on published pricing, documentation, audit reports and third-party reviews.
Pros
- +ISO 27001, SOC 2 Type 2 and FIPS 140-3; passkeys unlock the vault; TOTP, YubiKey, One-Time Share and vault transfer on offboarding
- +Pound pricing from £2.00 a user; EU data region; 24/7 phone, chat and email support
- +Commander CLI, SDKs, Terraform providers and a vendor-built MCP server
Cons
- −SSO and SCIM are Enterprise-only at £5.00; reporting, dark-web monitoring and Secrets Manager are paid add-ons even on Enterprise
- −No free plan, no monthly billing, no money-back guarantee, VAT basis unclear on the page
- −Sued Ars Technica over a 2017 vulnerability report (dropped 2018); Trustpilot 3.2 on 3,164 reviews with recent lockouts and renewal complaints
Pricing
Minimum commitment: £3.07 (£3.07/yr for the entry licence). The least you can spend before walking away; excludes numbers, minutes and add-ons.
Personal
£3.07/yr · annual commitment
Month-to-month: not published
- ✓£3.07/mo (£36.84/yr) on Keeper's UK site 8 Sep 2026; Family £7.36/mo for 5 with 10 GB storage. VAT basis unclear (template text). No free plan; BreachWatch £24.29/yr add-on.
Business Starter
£2/yr · annual commitment
Month-to-month: not published
- ✓£2.00/user/mo billed annually, for 5 to 10 users; no shared team folders. Business £3.50 adds shared folders and delegated admin; Enterprise £5.00 adds SSO Connect, SCIM, AD/LDAP, RBAC. Reporting, compliance, dark web and Secrets Manager are add-ons at every tier. No monthly billing.
Specifications
| Rating | 3.7 |
| Business per user* | £2/user/mo annual only (Business Starter) |
| Individual | £3.07/mo annual only |
| Free tier | None |
| Seat minimum | 5 |
| Breach on record | No |
| Last audit | None published |
| Open source | No |
| Self-host | No |
| Passkeys | Store + unlock |
| TOTP codes | ✓ |
| Hardware key | ✓ |
| SSO | Extra cost |
| SCIM | ✓ |
| Shared vaults | ✓ |
| Secrets manager | ✓ |
| CLI | ✓ |
| MCP server | ✓ |
| Owned in** | US-owned |
| Data location | US, EU (Ireland, Frankfurt), AU, CA or JP region; no UK region |
| Trustpilot (reviews) | 3.2 (3,164) |
| Family plan | £7.36/mo (5 seats) |
| Scored tier | Business Starter |
| Tier above | Enterprise (£5.00/user) |
| Money-back (days) | 0 |
| Encryption | AES-256-GCM; PBKDF2-HMAC-SHA256 1,000,000 rounds |
| Zero-knowledge | ✓ |
| Breach note | Dec 2017: extension flaw found by Tavis Ormandy; Keeper sued Ars Technica over the report, dropped Mar 2018 |
| Bug bounty | ✓ |
| Email aliases | No |
| Built-in VPN | No |
| Admin console | ✓ |
| Role-based permissions | ✓ |
| Password health reports | ✓ |
| Dark-web monitoring | ✓ |
| External sharing | ✓ |
| Guest accounts | No |
| Emergency access | ✓ |
| Audit logs | ✓ |
| Browser extensions | Chrome, Firefox, Safari, Edge, Opera, Brave |
| Desktop apps | ✓ |
| Linux | ✓ |
| API | ✓ |
| HQ | US |
| Owner | Keeper Security, Inc. |
| SOC 2 | ✓ |
| ISO 27001 | ✓ |
| Live chat | ✓ |
| Phone support | ✓ |
| Support channels | Phone 24/7 (EMEA number in Ireland), Live chat 24/7, Email |
*Business per user: the business or teams tier the score is set on, per user per month on annual billing and then month-to-month, in the currency the vendor shows a UK visitor on the research date; see each profile for the VAT basis, the seat minimum and what the tier above adds.
**Owned in: where the company that owns the provider answers to. A US-owned provider is subject to US law (including the CLOUD Act) wherever the vault is stored; with a zero-knowledge design the vendor cannot read the vault either way, so this column is about the company, not the encryption. "Data location" records where the encrypted vault is stored.
Researched and drafted with AI assistance; reviewed and approved by Tim Meredith. How we use AI
Work at Keeper? Something not look right? Register in the vendor portal to see what we publish and send corrections.