Overview

CyberArk Secure Web Sessions (SWS) is a cloud-based service designed to enhance the security and visibility of user activities within web applications. By recording, auditing, and protecting all user actions, SWS ensures that organizations can monitor and secure their web sessions effectively. This solution is particularly beneficial for high-risk and sensitive web applications, providing a robust layer of security without impacting the user experience. SWS integrates seamlessly with CyberArk Identity Single Sign-On (SSO) and serves as an additional authentication factor for accessing protected web applications. The platform uses a browser extension to monitor and segregate web apps accessed through CyberArk Identity SSO, ensuring that all user activities are recorded and protected. With features like session recording, continuous authentication, and session protection, SWS helps organizations safeguard their web applications from threats originating on the endpoint and prevent data exfiltration.

Capabilities

Session recording Record all user activities using a “stepper” approach. Actions like mouse clicks, “enter” or “tab” keystrokes trigger a screenshot of a user’s browser window along with relevant metadata. Audit trail Search all recorded sessions using free text input and filter security events by dates and actions. The session audit trail provides context and step-by-step breakdown of the actions taken prior, during and after a security event. Continuous authentication Identify when a high-risk session is left open and requires re-authentication to ensure that the person who initiated the web session is the one using the application. Session protection Protect the web-session at the endpoint with the Secure Web Sessions browser extension. Optional integration with CyberArk Endpoint Privilege Manager further protects high-risk web sessions from malicious processes originating on the endpoint. Built-in privacy Record web session activities only for applications protected by Secure Web Sessions, regardless of other tabs open in the browser. Recordings take place locally, are encrypted and are only accessible by customers with a specific private key.

Benefits

Record every step Record actions taken by specific users within protected apps without impacting the user experience. Enable continuous authentication Validate that the person who initiated the web session is the one using the application. Protect Web sessions Secure web applications from threats originating on the endpoint and prevent data exfiltration.