Keeper Security introduces kernel-level endpoint security product

Keeper Security has announced Keeper Forcefield, a product designed to protect against memory-based attacks on Windows devices.

Forcefield is a kernel-level endpoint security product that proactively defends against memory-based attacks, including credential theft from infostealers and runtime memory-scraping malware.

Unlike conventional antivirus or Endpoint Detection and Response (EDR) tools, it enforces real-time memory protection capable of blocking non-privileged, fileless and zero-day attacks without degrading system performance.

It installs a lightweight, kernel-level driver that shields protected application memory from unauthorised access. Users can toggle Forcefield on or off within the Keeper Desktop application or deploy it via Group Policy.

The solution also differentiates between trusted and untrusted processes in real-time, ensuring legitimate activity continues uninterrupted while malicious or unknown processes are blocked from scraping sensitive data.

Windows applications protected by Forcefield include web browsers (Chrome, Firefox, Edge, Brave, Opera and Vivaldi); Keeper software (Desktop App, Web Vault, Browser Extensions, Gateway, Bridge, Commander and KeeperChat); and operating systems (Windows 11 x64 and ARM64).

"Forcefield closes one of the most dangerous blind spots in endpoint security," said Craig Lurey, CTO and co-founder of Keeper Security.

"Malware can extract sensitive information directly from a device's memory, even at the user level where administrative privilege isn't required. Forcefield prevents this type of exploit entirely without disrupting trusted applications or everyday workflows."

Forcefield is available for both individual users and enterprise environments.