Keeper
An enterprise password and secrets company whose agent answer is Keeper Secrets Manager — “built for DevOps, IT security and development teams” — delivering just-in-time secrets.
Compare
Keeper vs Runner Pouch
Keeper's Secrets Manager page leads with eliminating secrets sprawl and protecting Non-Human Identities. Runner Pouch gives every login your team needs to the people and agents you choose, and the AI never sees the password.
In one line
Pouch
The password manager for your team and its AI agents: logins for any website, given to the people and agents you choose, and the AI never sees the password.
Side by side
How Keeper and Runner Pouch each hand out a credential
What it is bought for
Keeper
Enterprise password management, and Secrets Manager for “sensitive credentials in CI/CD pipelines, containers, automation scripts and cloud infrastructure.”
Pouch
Logins for any website, with notes and 2FA codes, viewed and copied after a check that it's you, and given to the people and agents you choose.
Its answer for agents, in its words
Keeper
Just-in-Time secrets, delivered through Keeper Secrets Manager.
Pouch
Stored logins given to named agents, standing or for a set time, and taken back one at a time or all at once.
Keeping the password from the AI
Keeper
“Secrets are never written to disk, logs or prompts, and are encrypted end-to-end.”
Pouch
The password never reaches the AI. Pouch keeps it out of chats, transcripts and logs.
How access is scoped
Keeper
“AI agents can be assigned specific roles, access scopes and time-limited privileges, all centrally managed and auditable.”
Pouch
Choose all agents or only some, set a standing or time-limited assignment, and see the hand-off in assignment history.
Sharing with a person
Keeper
“Securely share logins or files with individuals or entire teams on a permanent or time-limited basis.”
Pouch
Give a login to a named teammate, for a set time or until you take it back, or send a contractor a link that opens once.
What the record shows
Keeper
“Monitor password changes, logins, record sharing and more with built-in activity logs.”
Pouch
Every assignment, view, copy and share, and a signed webhook that sends it to your own systems.
Already using Keeper?
If Keeper secures your infrastructure's secrets well today, keep it. Nothing on this page asks you to move a secret.
Use Pouch where a Runner operator assigns stored logins to named agents and can take one assignment or all of an agent's assignments back.
What Runner Pouch adds
- Never the passwordGive an agent the account; the password stays out of every model, transcript and log.
- Assignment choicesChoose all agents or only some, with a standing assignment or a limit of one hour, one day or one week.
- One or allEnd one account assignment or take back every account assigned to an agent in one act.
- Assignment historySee which account was assigned to which agent, when it started and when it ended.
Questions about Keeper and Runner Pouch
Keeper scopes agent access too — what is different?
Keeper's page describes roles, scopes and time limits managed centrally for DevOps, IT security and development teams. Pouch keeps stored logins, named-agent assignments and assignment history in one view.
Do I have to choose?
No. Keep the password manager that holds your personal and company credentials, and use Pouch for the accounts your agents work with.
Who can see and copy a saved password?
Owners, admins and anyone you give the login to, each after confirming it's them with a passkey or an authenticator code. Every view is recorded.
Can a Pouch assignment expire?
Yes. Choose one hour, one day or one week, or leave the assignment standing.
What happens when I take everything back from an agent?
Every account assignment for that agent ends in one act, and each return appears in assignment history.
How are saved passwords encrypted?
Each organization's saved passwords are encrypted under its own key in Google Cloud's key service. Closing the organization destroys the key.
Can I take every login with me?
Yes. An owner can export every login to a CSV file most password managers accept.
How do I get Pouch?
Pouch needs a Runner account. Open your workspace and choose Pouch from the sidebar.
What does Pouch cost?
Nothing extra. Pouch is included with your Runner subscription.
What this page says about Keeper was read from its maker's pages on 2026-11-03:
- Keeper Secrets Manager (opens in a new tab)“built for DevOps, IT security and development teams” · “sensitive credentials in CI/CD pipelines, containers, automation scripts and cloud infrastructure”
- Keeper: securing AI agents (opens in a new tab)“Secrets are never written to disk, logs or prompts, and are encrypted end-to-end” · “AI agents can be assigned specific roles, access scopes and time-limited privileges, all centrally managed and auditable”
- Keeper for business (opens in a new tab)“Securely share logins or files with individuals or entire teams on a permanent or time-limited basis” · “Monitor password changes, logins, record sharing and more with built-in activity logs”
Trademarks of their owners. No affiliation or endorsement.