Identity & access managementKEYSTONE
The right access, for the right person, at the right time.
We secure Active Directory, privileged accounts and cloud access, the first target of every attack.
What we hear
in the field.
Exposed Active Directory
An attacker who takes Active Directory takes the whole information system.
Shared accounts
Administrator passwords known to everyone, never changed, used by contractors.
Former employees
Accounts never disabled after someone leaves: a door left open for good.
What we take care of.
Active Directory
- Directory security audit
- Tiered administration model
- Clean-up of accounts and groups
- Change monitoring
Privileged accounts
- Password vault (Heimlane Vault)
- Traced administrator access
- Supervised contractor access
- Automatic rotation
Cloud access
- MFA and conditional access
- Entra ID Protection, PIM
- Passwordless authentication
- FIDO2 security keys
Governance
- Joiner and leaver process
- Access review
- Reports for auditors
- Password policy
Three levels, tailored
to your scope.
Monthly subscription or fixed price, depending on the service.
Essential
- Active Directory audit
- Remediation plan
- MFA on cloud access
- Fixed-price engagement
Business
- AD remediation
- Conditional access
- Administrator vault
- Half-yearly access review
Premium
- Full PAM with session recording
- AD tiering
- Quarterly access review
- Continuous AD monitoring
How we work.
Audit
AD, accounts, permissions and cloud access.
Priorities
Risks ranked by severity.
Remediation
Fixes in stages, with no interruption.
Upkeep
Monitoring and regular reviews.
What you receive.
Who it is for, in practice.
Bank
Administrator access traced and recorded for the regulator’s audit.
Multi-company group
Active Directory clean-up and removal of unused accounts.
Services company
Contractor access supervised and time-limited.
Typical scenarios, shown for illustration.
Your questions,
our answers.
What is KEYSTONE?
KEYSTONE is the “Identity & access” offer from Cyberacore, a cybersecurity entity based in Casablanca. We secure Active Directory, privileged accounts and cloud access, the first target of every attack.
What does KEYSTONE include?
KEYSTONE covers four areas: Active Directory (Directory security audit, Tiered administration model), Privileged accounts (Password vault (Heimlane Vault), Traced administrator access), Cloud access (MFA and conditional access, Entra ID Protection, PIM) and Governance (Joiner and leaver process, Access review).
What are the service levels of KEYSTONE?
Three levels, on a monthly subscription or at a fixed price: Essential (Active Directory audit, Remediation plan); Business (AD remediation, Conditional access); Premium (Full PAM with session recording, AD tiering).
Which technologies does KEYSTONE use?
KEYSTONE relies on Heimlane Vault.
How does a KEYSTONE project start?
In four stages: Audit (AD, accounts, permissions and cloud access), Priorities (Risks ranked by severity), Remediation (Fixes in stages, with no interruption) and Upkeep (Monitoring and regular reviews). The Cyber Score Express helps frame the need beforehand.
Let’s talk about your
information system.
An assessment to take stock: a concrete review, presented by our experts.