Proton Pass For Business Features
Authentication Options (8)
Authentication User experience
Process of providing credentials and logging into multiple systems is easy and intuitive for users
Supports Required Authentication systems
Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.
Multi-Factor Authentication
Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.
Supports Required Authentication Methods/Protocols
Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case
Federation/SAML support (idp)
Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.
Federation/SAML support (sp)
Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Authentication
Verify the identity of users/devices to enable secure access
Access Control Types (5)
Endpoint access
Provides ability to control access to PC's, Mobile devices, and other endpoint devices.
Local Access
Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.
Remote Access
Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.
Partner Access
Controls access to users that are not company employees that are either within the companies local area network or outside the network
Supports BYOD users
Enables users to use their own device to access company applications.
Administration (6)
Ease of installation on server
Installation process is easy and flexible.
Password Policy Enforcement
Options for resetting and enforcing password policies
Administration Console
Provides Administration tools/console that are easy to use and learn for routine maintenance tasks
Ease of connecting applications
Easily provisions new systems, platforms or applications using configuration and not customization.
Self Service Password Administration
Users can set, change passwords without interaction from IT staff
Single Sign On
Allow users to access multiple services after entering their login credentials once
Platform (7)
Multiple Operating system support
Supports Endpoint access control to multiple operating systems
Multi-Domain Support
Allows user authentication to be honored by all the hosts in two or more domains
Cross Browser support
Support access to browser based applications across required browser types
Fail over protection
Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate
Reporting
Contains pre-built and custom reporting tools to required to manage business
Auditing
Provides mechanism for auditing authentication for trouble shooting purposes.
Third Party Web Services support
Can call and pass credentials to third party web services.
Authentication type (11)
SMS-Based
Sends a one-time passcode (OTP) via SMS.
Voice-Based Telephony
Provides a one-time passcode (OTP) via voice-call.
Email-Based
Sends a one-time passcode (OTP) via email.
Hardware Token-Based
Supports hardware tokens, which are often USB-sized, fob-like devices that store codes.
Software Token
Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline.
Biometric Factor
Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor.
Mobile-Push
Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet.
Risk-Based Authentication
Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user.
Knowledge-Based Authentication
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Mobile Authentication
Verify user identity through mobile devices
Functionality (17)
Multi-Device Sync
Allows the use of tokens on multiple devices. This feature can also be turned off if the user does not want this.
Backup
Offers encrypted backup recovery stored by the vendor.
User provisioning
Simplifies or automates user provisioning, deprovisioning, and other user role changes.
Password manager
Offers password management tools to end users.
Single Sign-on
Offers single sign-on functionalities to end users, allowing them to authenticate once and be given access to all of their company accounts.
Enforces policies
Enforces user-access policies based on individual, role type, group membership or other factors to prevent unauthorized access to company systems and data.
Authentication
Authenticates users prior to granting access to company systems.
Multi-factor authentication
Offers multi-factor authentication methods to verify a user's identity.
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Monitoring - Deep Web
Monitors select keywords on the deep web, which are non-indexed parts of the internet not available on the surface web.
Monitoring - Dark Web
Monitors select keywords on the dark areas of the web, which are only accessible via Tor and I2P, such as illicit marketplaces and dark forums.
Analysis
Provides context around identified information, including historical threat data, threat location data from geotags or inferred data, threat actors names, relationships, URLs, and other relevant information to conduct further investigations.
Ticketing
Integrates into ticketing or CRM platforms via API integrations.
Simple Search
Search through real-time and historical data without using technical query language.
Leak Source
Provides additional context and analysis to help identify the source of leaked information.
Centralized Dashboard
Offers a centralized dashboard to monitor, collect, process, alert, analyse and search through data flagged by the software.
Real-Time Alerts
Enables real-time alerts and reporting through push notifications in a mobile app, email, or sms alerts.
Usability & Access (14)
-
Quick Login
Expedites user logins using methods like a master password or password autofill.
-
Browser Extension
Integrates the tool with your browser for easy use.
-
Mobile App Usability
Integrates with your mobile device for use on mobile apps.
-
Multi-Device Use
Enables user to use the tool across multiple devices.
-
Admin Management
Allows an employer or administrator to manage employee access.
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Policy Management
Create, manage, and track policies and procedures within an organization
Data Storage Management
Manage and store data in a database
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Workflow Management
Create, design and manage workflows for repetitive tasks
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Secure Login
At least a username and password is required to access the system
Security Measures (10)
-
Password Generator
Generates passwords for each of your logins.
-
Two-Factor Authentication
Provides extra security by requiring an extra for of verification in addition to a password.
-
Security Audits
Analyzes and evaluates the quality and variety of your passwords.
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
Risk Assessment
Initiate collection and analysis of known risks
Autosave & Autofill
Automatically saves usernames, passwords, addresses and other details, and uses these to automatically fill form fields
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Multi-Factor Authentication
Request two or more credentials to prove user's identity before granting access to systems
Storage (4)
-
Digital Wallet
Stores records like credit cards or receipts in addition to passwords.
-
File Storage
Stores files in addition to passwords.
Secure Data Storage
Securely stores data to prevent data loss or breaches
Encrypted Password Storage
Passwords are stored in an encrypted format
Encryption (9)
Email Encryption
Encrypts the content of emails and their attachments.
Messaging Encryption
Encrypts messages being sent via text or within an application.
File Transfer Encryption
Protects data with within or as it leaves your secure or local network.
Data Encryption
Provide a level of encryption of data in transit, protecting sensitive data while it lives in the backup application.
Document Encryption
Provides a level of encryption for text documents.
Full-Disk Encryption
Encrypts entire device to secure data in case it is lost or stolen.
Cloud Encryption
Encrypt data to and from the cloud and on cloud storage devices
Application Encryption
Encrypts all types of data passing through an application.
P2P Encryption
Encrypt data in transit to create secure communication links between devices or components
Compliance (5)
Authentication
Allows administrators to set multi-factor authentication requirements including tokens, keys, or sms messaging
Policy Enforcement
Abilities to set standards for database security and risk management.
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Key Management
Manage the creation, exchange, storage, use, and replacement of physical or cryptographic keys.
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Management (9)
Backup
Stores data remotely, on-premise, or in cloud databases in case of recovery during disaster.
Backup and Recovery
Create backups and provide methods to recover deleted/lost data
File Management
Allows administrators to set levels of encryption for file types. Allows administrators to decide which files to encrypt.
Anomaly Detection
Monitors activity within networks and alerts administrators when unusual activity occurs.
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Policy Management
Create, manage, and track policies and procedures within an organization
Incident Management
Manage and track all disruptions and incidents
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Type (2)
On-premises solution
Provides an IAM solution for on-prem systems.
Cloud-solution
Provides an IAM solution for cloud-based systems.
Reporting (7)
Activity Tracking
Track and document all activities across devices, networks, and other systems
Reporting
Provides reporting functionality.
Access & Permission Change Reporting
Log and report all modifications to user roles and access rights.
Compliance & Audit Trail Export
Provide standardized reports for regulatory compliance and audits.
Ad hoc Reporting
Generate one-off reports that meet information requirements
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Real-Time Reporting
Active reporting of data and metrics
Implementation (3)
Easy Setup
Offers an easy to understand user interface to make setup smooth.
Mobile SDK
Offers a mobile software development kit (SDK) for iOS, Blackberry, and Android.
Web SDK
Offers a software development kit (SDK) for web-based applications.
Authentication & Authorization - Identity and Access Management (IAM) (1)
Adaptive & Contextual Access Control
Grant access based on user attributes, location, device posture or risk.
Administration & Governance - Identity and Access Management (IAM) (5)
Identity Lifecycle Management
Automate onboarding, offboarding, and access reviews throughout user lifecycles.
Self‑Service Account Management
Enable users to reset passwords and update profiles without admin support.
Member Accounts
Accounts held by members of an organization
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
Generative AI - Identity and Access Management (IAM) (3)
AI‑Driven Access Anomaly Detection
Identify unusual access patterns using machine learning models.
Automated Policy Tuning
Dynamically adjust access policies based on risk and AI-generated insights.
Predictive Role Recommendations
Suggest appropriate user roles based on usage patterns and peer behavior.
Additional Functionality (155)
Secure Data Storage
Securely stores data to prevent data loss or breaches
User Defined Attributes
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Automated Scheduling
Automatically create schedules based on business needs or employee availability and qualifications
Active Directory Integration
Integrates with Active Directory
Secure Login
At least a username and password is required to access the system
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Risk Assessment
Initiate collection and analysis of known risks
Self Service Portal
Online portal through which end users can access the system, manage tasks, or obtain information
Data Verification
Process of checking different types of data for accuracy to avoid errors or inconsistencies
Customizable Templates
Pre-designed layouts that can be customized to match preferences and requirements
Biometrics
Identify or authenticate a person's identity through biological data such as fingerprints or facial patterns.
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Real-Time Data
Receive data and information in real time
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Customizable Reports
Alter the layout and content of reports
Risk Analysis
Analyze potential risks across the organization
Alerts/Escalation
System alerts about the need to escalate an issue or request
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Secure Password Sharing
Securely share encrypted passwords with colleagues
Mobile Access
Access software remotely via mobile devices
Single Sign On
Allow users to access multiple services after entering their login credentials once
Data Synchronization
Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
API
Application programming interface that allows for integration with other systems/databases
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Activity Tracking
Track and document all activities across devices, networks, and other systems
Password Policies
Set and enforce password security requirements such as length, character sets, and regular password changes
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Active Directory Integration
Integrates with Active Directory
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Password Synchronization
Securely access passwords from any device
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Multi-Language
Manage and support multiple languages
Collaboration Tools
Provides a channel for team members to share media files, communicate, and work together
Administrative Reporting
Tagging
Attach digital tags to documents and assets for identification, search, or monitoring purposes
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
Mobile Alerts
Notifications via mobile devices
Customizable Branding
Add customized logos and colors to align with company branding
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Biometrics
Identify or authenticate a person's identity through biological data such as fingerprints or facial patterns.
IP Restriction
Only allow access from specified IP addresses
Status Tracking
Track the status over time for a request, process, asset, or transaction
Security Breach Monitoring
Receive alerts and reports of security problems including password breaches
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
Active Directory Integration
Integrates with Active Directory
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Remote Access/Control
Access work applications remotely, for when working away from the office and/or traveling
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Social Sign On
Secure Login
At least a username and password is required to access the system
Real-Time Monitoring
Active monitoring of systems, applications, or networks
API
Application programming interface that allows for integration with other systems/databases
Access Management
Control and manage access to company resources
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Policy Management
Create, manage, and track policies and procedures within an organization
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Fraud Detection
Identify and prevent suspicious activity
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Member Accounts
Accounts held by members of an organization
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Customizable Branding
Add customized logos and colors to align with company branding
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Secure Data Storage
Securely stores data to prevent data loss or breaches
Single Sign On
Allow users to access multiple services after entering their login credentials once
Real-Time Analytics
Analyze and gain insights into data in real-time
Data Verification
Process of checking different types of data for accuracy to avoid errors or inconsistencies
Biometrics
Identify or authenticate a person's identity through biological data such as fingerprints or facial patterns.
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
Workflow Management
Create, design and manage workflows for repetitive tasks
Activity Tracking
Track and document all activities across devices, networks, and other systems
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Self Service Portal
Online portal through which end users can access the system, manage tasks, or obtain information
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Push Notifications
Trigger clickable pop-up messages
Access Control
Regulate who can view information within the system
Email Alerts
Receive and/or send email notifications for urgent updates, requests, or other information
Data Security
Protect sensitive data for digital privacy
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Knowledge Base Management
Manage a repository of information that includes articles, FAQs, or tutorials used for self-service support
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
Multiple Authentication Methods
Authenticate user identities through different methods such as ID cards, PINs, passwords, RFID, and biometrics
PCI Compliance
Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Secure Login
At least a username and password is required to access the system
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Tokenization
Convert sensitive data into unique identification symbols (Tokens) that retain all essential information
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Remote Access/Control
Access work applications remotely, for when working away from the office and/or traveling
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Active Directory Integration
Integrates with Active Directory
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
API
Application programming interface that allows for integration with other systems/databases
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Alerts/Escalation
System alerts about the need to escalate an issue or request
Single Sign On
Allow users to access multiple services after entering their login credentials once
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Secure Data Storage
Securely stores data to prevent data loss or breaches
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Data Security
Protect sensitive data for digital privacy
Activity Tracking
Track and document all activities across devices, networks, and other systems
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Active Directory Integration
Integrates with Active Directory
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
Data Verification
Process of checking different types of data for accuracy to avoid errors or inconsistencies
Access Management
Control and manage access to company resources
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Secure Data Storage
Securely stores data to prevent data loss or breaches
Data Security
Protect sensitive data for digital privacy
Biometrics
Identify or authenticate a person's identity through biological data such as fingerprints or facial patterns.
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
API
Application programming interface that allows for integration with other systems/databases
Data Synchronization
Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency
Secure Login
At least a username and password is required to access the system
Policy Management
Create, manage, and track policies and procedures within an organization
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Real-Time Data
Receive data and information in real time
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Self Service Portal
Online portal through which end users can access the system, manage tasks, or obtain information
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Employee Onboarding
Process of familiarizing new employees with the company, their position, and responsibilities
Activity Tracking
Track and document all activities across devices, networks, and other systems
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Workflow Management
Create, design and manage workflows for repetitive tasks

