NETAND is a South Korean security software company that builds access control and account management products for privileged infrastructure. Its HIWARE family controls who can reach servers, network equipment, databases and Kubernetes clusters, manages the passwords and keys behind those systems, and records what users do once connected.
The products are aimed at organisations that must prove to auditors that administrative access is limited, monitored and logged, in legacy data centres and in the cloud alike.
At A Glance
| Vendor | NETAND |
|---|---|
| Category | Privileged access management, access control and account management |
| Identities covered | System, database and Active Directory accounts, SSH keys, Kubernetes users, CCTV device accounts |
| Deployment | Proxy gateway, with agent and sniffing methods in a hybrid configuration |
| Customers | NICE Payments, Inha University Hospital, Korea District Heating Corporation, KGC Ginseng Corporation, E1 |
| Certifications | Common Criteria EAL4 (HIWARE PSM V6.3), ISO/IEC 27001 |
| Founded | 2007 |
| Market classification | Privileged Access Management |
What NETAND Does
Privileged accounts on servers, databases and network devices are a favourite target for attackers and a constant subject of audit findings. NETAND tackles both by putting a single checkpoint in front of that infrastructure and pairing it with central management of the accounts and credentials behind it. The HIWARE portfolio splits into access control products, which decide who reaches which system and what they can do there, and account management products, which handle passwords and keys for systems, databases and Active Directory.
Software is only part of the offer. NETAND analyses each customer’s infrastructure and requirements, sets up internal security policies and processes around HIWARE, and then supports it with regular patches, emergency fault handling and training.
Products
HIWARE PSM
PSM is the system access control product. It governs who can connect to servers and network equipment and what permissions they hold once connected, which makes it the core of most HIWARE deployments.
HIWARE IM
IM brings the accounts and passwords on servers and network systems under one management point, so administrators no longer keep local credentials device by device. It synchronises and consolidates identity types in real time. HIWARE ADIM does the same for Active Directory, giving unified account and password management for directory accounts.
HIWARE DBAM And DBIM
These two products apply the same model to databases. DBAM controls access and permissions for database users, while DBIM manages database account passwords centrally.
HIWARE UAC
UAC closes the gap left by users who try to connect directly and avoid the gateway. It controls direct access to systems and databases that bypasses HIWARE.
HIWARE K8S And SecureKey
K8S extends privileged access control to container platforms, managing user access and permissions for Kubernetes cluster resources. SecureKey targets server login: it replaces static SSH keys with SSH CA signed key authentication, a zero trust approach to server login based on signed keys.
HIWARE CCTV PM And Authenticator
CCTV PM tracks the accounts on CCTV devices and manages their passwords, a class of device that often keeps default credentials. Authenticator is a mobile app that combines OTP and FIDO to strengthen user sign-in.
How It Works
HIWARE is built on a proxy gateway. Users must pass through it to reach managed devices, so it acts as the security checkpoint for every privileged session. Where an infrastructure needs it, NETAND combines the gateway with agent and sniffing methods in a hybrid configuration, and UAC covers connections that go around it.
| Component | What it does |
|---|---|
| Access control | Each session starts with user identification and verification of the access device, followed by the minimum privilege needed, with several verification methods and fine-grained permissions available. |
| Session monitoring | Sessions are watched in real time to confirm that work is legitimate while it is happening, and prohibited commands can be blocked. |
| Audit logging | All access and activity is logged automatically and kept as objective audit evidence. |
| Clients | HIWARE runs on Windows, macOS and Linux, in the Edge, Chrome and Safari browsers, with Korean, English and Chinese interfaces. |
Identities And Systems Covered
| Privileged system accounts | Server and network equipment accounts and passwords (PSM, IM) |
|---|---|
| Database accounts | Database access and account passwords (DBAM, DBIM) |
| Directory accounts | Active Directory accounts and passwords (ADIM) |
| Keys | SSH CA signed keys (SecureKey) |
| Kubernetes | User access and permissions for cluster resources (K8S) |
| Device accounts | CCTV accounts and passwords (CCTV PM) |
| Human users | Mobile OTP and FIDO authentication (Authenticator) |
Integrations
| Area | Integrations |
|---|---|
| Global cloud platforms | Oracle Cloud, Amazon AWS, Google Cloud, Microsoft Azure |
| Korean cloud platforms | NAVER Cloud, KT Cloud, Samsung Cloud, NHN Cloud |
Company Background
| Founded | 28 February 2007 |
|---|---|
| Headquarters | Seoul, South Korea, with an R&D lab in Korea |
| Other offices | Singapore |
| Leadership | Shin Ho-cheol, CEO |
| Reach | About 1,500 reported customers, more than 60 partners and a presence in 20 countries, across finance, broadcasting and telecoms, manufacturing, the public sector, education and healthcare |
Note: This overview is compiled from NETAND’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.