Mitigating the risks of service account sprawl

“Service accounts are like a ticking time bomb in the privileged account world,” said Jai Dargan, vice president of Product Management at Thycotic. “Most admins don’t even know they exist until they get compromised and someone gains unauthorized access to a business-critical application, and by then it’s too late. This is the latest example of Thycotic delivering an innovative new way to solve our customers’ most pressing privileged access challenges”

Service accounts are the “silent killer” of privileged accounts

Service accounts exist in large numbers in almost every organization. Their specialized operation often requires elevated privileges and access to business-critical applications and data. They avoid the governance of other privileged accounts because they are rarely utilized by human users and operate behind the scenes, “silently” performing their assigned tasks, requiring little maintenance or attention. IT admins are often reluctant to decommission them because their dependencies can be difficult to ascertain, and inadvertent removal can lead to “killer” service disruptions. This reluctance leads to runaway service account sprawl, expanding the privileged account attack surface to proportions that are virtually impossible to manage without the proper tools.

Privileged account governance reduces attack surface and mitigates risk

Thycotic’s Account Lifecycle Manager enables comprehensive service account governance by automating the lifecycle of service accounts from cradle to grave, with workflows, automated provisioning, governance, compliance, and decommissioning capabilities. Service account requests follow approval workflows tailored to each organization’s specific needs. IT teams can seamlessly control service accounts and mitigate the risk of breaches, service interruptions and human error.

“Thycotic’s Account Lifecycle Manager has enabled several large enterprises to find and remove hundreds of thousands of unneeded and unmanaged accounts that could have otherwise compromised their networks,” said James Legg, president and CEO at Thycotic. “This is a critical solution for any company trying to navigate account governance.”

“Service accounts are an area where much risk is concentrated,” said Anmol Singh, lead analyst at KuppingerCole. “Our clients are really struggling to enforce appropriate privileged account governance for these accounts. There is huge market demand for a product like Account Lifecycle Manager, kudos to Thycotic for leading the charge to solve this major security challenge.”