In short: Keeper Remote Browser Isolation lets users open internal and SaaS web applications from the Keeper vault in a Chromium browser that runs on the Keeper Gateway, not on their device. Credentials are filled in on the gateway, sessions can be recorded and no VPN is needed. It is included in KeeperPAM and licensed per user.
What Keeper Remote Browser Isolation is
Browser isolation runs a web page somewhere other than the user's device and streams only the picture back. Keeper Remote Browser Isolation (RBI) applies that idea to privileged and sensitive web applications: admin consoles, internal intranets, network device web interfaces and SaaS tools with powerful accounts.
When a user opens a web application record in their vault, the Keeper Gateway starts an up-to-date Chromium browser in a container, connects to the target site and projects the session back into the vault. Website code never runs on the user's device, and the device never needs network access to the target.
Key capabilities
| Capability | What it gives you |
|---|---|
| Isolation | Web content runs in a container on the gateway, away from the user's laptop |
| Credential autofill on the gateway | Passwords are injected on the gateway and never sent to the user's device, including HTTP Basic Auth for older apps |
| Access control | Sessions follow KeeperPAM permissions, so you decide who can open which application |
| Session recording | Sessions can be recorded, shared and monitored |
| Browsing features | Multiple tabs, session persistence, controlled file upload and download, and copy and paste |
| Hide elements | Mask parts of a page users should not see or use |
That makes it useful for giving a supplier or a junior admin access to a web console without handing over the password or opening the network.
How it is licensed
Remote Browser Isolation is part of KeeperPAM, which is licensed per user: the people who open isolated sessions. It is not bought from the Keeper admin console on its own; Keeper arranges it through its sales team, which we do for you. If you also want privileged sessions to servers, password rotation or secrets management, those come in the same PAM licence.
Ask us for a quote and we will confirm the licence and term that fit your use.
Requirements and deployment
RBI needs a Keeper Gateway deployed where it can reach the target web applications, such as a small virtual machine or container in your network or cloud account. The gateway connects outbound to Keeper, so no inbound firewall rules are needed. Users launch sessions from the Keeper Web Vault or Desktop app, and each application is defined as a browser record with its URL and credentials.
It is designed for specific sensitive applications, not as a replacement for everyday web browsing. For organisation-wide browser security, compare secure enterprise browsers.
Why isolate admin web consoles
Web admin consoles for firewalls, hypervisors, backup systems and cloud platforms are among the most valuable targets in any organisation. Isolating them means a compromised laptop cannot capture the session's credentials or inject code into the page, and network rules can limit those consoles to the gateway alone. Recordings show exactly what was changed and by whom, which helps both incident investigation and change control.
Who it suits and how we help
Keeper RBI suits IT teams who manage firewalls, switches, hypervisors or SaaS admin consoles through web interfaces, and organisations giving third parties access to internal web apps. We deploy the gateway, set up application records and permissions, enable recording and manage licences. See secure remote access for other ways to reach internal systems.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Keeper Remote Browser Isolation sold separately?
It is included in KeeperPAM and arranged with Keeper rather than added in the admin console. We confirm the right licence when we quote.
Do users need a VPN to use Keeper RBI?
No. The Keeper Gateway reaches the web application and streams the session into the user's vault, so the user's device needs no network route to the target.
Does the user see the password for the web app?
No. Credentials are filled in on the gateway and never sent to the user's device.