Segura is an identity and privileged access management company that helps organisations control who, and what, can use their most sensitive accounts and credentials. Its single platform covers the people who hold privileged access and the machine credentials that applications depend on.
The platform is aimed at security and IT teams that have to govern administrators, contractors and third-party suppliers alongside the machine credentials that applications and automation rely on.
At A Glance
| Vendor | Segura (formerly senhasegura) |
|---|---|
| Category | Privileged access management, secrets management |
| Identities covered | Privileged users, service accounts, SSH keys, API tokens, certificates |
| Deployment | Cloud (SaaS), on-premises or hybrid, agentless |
| Certifications | ISO 27001:2022, ISO 27701:2019, SOC 2 Type II, SOC 3 Type II |
| Founded | 2009, Brazil |
| Market classification | Privileged Access Management; also Secrets Management |
What Segura Does
Privileged credentials are spread across servers, databases, network devices, cloud consoles and code, and many of them are shared or never changed. Segura’s answer is to discover, manage and monitor every privileged account and password in one place, whoever or whatever uses it. The same policies then apply to administrators, developers, cloud teams and outside suppliers, so privileged access is governed by one set of rules rather than a separate tool for each group. The company describes its scope as human, machine and autonomous identities.
Products
Privileged Access Management (PAM Core)
PAM Core is for teams that need to stop administrators and applications from holding standing, static privileges. Access is granted just in time and withdrawn automatically after use, and passwords are rotated so credentials do not stay valid for long. Every session is recorded with video and keystroke logs, unauthorised commands can be blocked or flagged as they are typed, and keystroke dynamics and behavioural analytics help surface unusual activity. Applications can retrieve the credentials they need from the vault through APIs.
DevOps Secret Manager (DSM)
DSM targets the tokens, passwords, certificates and encryption keys that development pipelines depend on, and the habit of hard coding them into source code, scripts and configuration files. It generates dynamic secrets on demand, unique to each client, and stores, rotates and controls access to SSH keys. Scan Discovery finds secrets that are already in use and brings them under management, and API queries can be restricted by IP address, path and token.
Other Modules
| Endpoint Privilege Manager | Manages privileges on endpoints |
|---|---|
| Multi-Cloud Identity Security (CIEM) | Manages entitlements across cloud platforms |
| Certificate Manager | Discovers certificates and renews them automatically |
| Domum Remote Access | Gives third parties privileged remote access |
| MySafe | Lets individuals share passwords without exposing the credentials |
| Privileged Infrastructure | An appliance based, high availability infrastructure for running the platform |
How It Works
The architecture is agentless, so no software is installed on the systems whose privileged accounts are being managed.
| Component | What it does |
|---|---|
| Deployment | Customers can run Segura as a cloud service, install it on their own infrastructure, or combine the two in a hybrid model. |
| Connectors | Prebuilt connectors and native integrations cover 174+ systems. |
| Secrets injection | Secrets are provisioned, rotated and injected through APIs into CI/CD pipelines, containers and legacy applications, including Kubernetes workloads. |
| Monitoring | Session activity is recorded centrally, and anomaly alerts are forwarded to SIEM tools over Syslog. |
Identities And Systems Covered
| Human users | Administrators, IT staff, contractors and third-party suppliers |
|---|---|
| Machine identities | Service accounts, SSH keys, API tokens and certificates used by applications and automation |
| Discovery scope | Human, machine, shared and shadow IT accounts |
| Secrets | Tokens, passwords, certificates and encryption keys |
| Cloud platforms | AWS, Azure and Google Cloud |
| Directories | Active Directory |
| Target platforms | Oracle, Microsoft SQL Server, Cisco, VMware, SAP and Fortinet |
| Autonomous identities | A dedicated AI Agents solution |
Integrations
| Area | Integrations |
|---|---|
| CI/CD | Azure DevOps, GitLab CI/CD, GitHub Actions, Jenkins |
| ITSM | ServiceNow |
Company Background
| Founded | 2009, in Brazil |
|---|---|
| Headquarters | São Paulo, Brazil |
| Other offices | Centers of Excellence in Austin (United States), Katowice (Poland) and Riyadh (Saudi Arabia) |
| Leadership | Marcus Scharra, CEO |
| Reach | Operations in 70+ countries, more than 800 reported clients in sectors such as banking, aviation and telecommunications, and 260+ resellers |
| Funding | A reported USD 25 million growth round led by Riverwood Capital (February 2026) |
| Recognition | Included in the 2026 Gartner Magic Quadrant for PAM and in Gartner Peer Insights for PAM (2024 and 2026), and recognised by KuppingerCole, Frost & Sullivan and ISG |
Note: This overview is compiled from Segura’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.