> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/understanding-securepass/what-is-securepass.md).

# What is SECUREpass

SECUREpass is a single platform that controls who can access what across your organization — on-premises applications, public cloud platforms (AWS, Azure, Google Cloud, Oracle), Windows and Linux systems, databases, and SaaS applications — and verifies the identity of every user before granting access.

In a modern enterprise, a single person's access can span dozens of systems, and privileged access can be granted to almost any identity under the right conditions. SECUREpass addresses this by converging identity and access into one platform instead of a patchwork of disconnected tools.

## A converged identity platform

SECUREpass aggregates identities and entitlements from every source — on-premises directories, cloud IAM services, databases, and SaaS applications — into a single identity model, the **Access Graph**. That gives one view to answer the central question of identity security: who can take what action on what resource, and why.

On that foundation, SECUREpass delivers four capability pillars:

* **Identity & Access Management (IAM)** — authenticate users, manage their identities and lifecycle, and control access to applications with SSO and fine-grained policies.
* **Multi-Factor Authentication & Adaptive Authentication** — 15+ authentication modes with AI/ML risk-based step-up, balancing security against user experience.
* **Identity Governance (IGA)** — access reviews and certifications, entitlement and role management, segregation of duties, and audit-ready reporting.
* **Privileged Access & Identity Management (PAM & PIM)** — vault and rotate privileged credentials, broker and record privileged sessions, and govern the privileged identity lifecycle.

## Who uses SECUREpass

| Role                                           | What they do in SECUREpass                                      |
| ---------------------------------------------- | --------------------------------------------------------------- |
| **End users** (employees, customers, partners) | Authenticate, self-serve, and request access                    |
| **IT administrators**                          | Onboard users, configure policies and integrations              |
| **Security teams**                             | Enforce MFA, monitor privileged sessions, investigate risk      |
| **Developers**                                 | Integrate applications via SAML, OIDC/OAuth 2.0 and REST APIs   |
| **Auditors**                                   | Review access certifications, audit logs and compliance reports |

## Where SECUREpass fits in your IT stack

SECUREpass sits between your sources of identity — HR systems, directories, cloud IAM — and the applications and resources your people use. It ingests identities, applies authentication and access policies, and brokers access to downstream systems.

> **Diagram needed** — HR / directories / cloud IAM / databases / SaaS → SECUREpass (Identity, Access, Privilege, Governance) → Applications & resources.

## Deployment flexibility

* **On-premises** — full control over data and infrastructure; suited to highly regulated industries and government.
* **SaaS** — rapid implementation, automatic updates, lower upfront cost.
* **PaaS** — managed infrastructure with control over application logic and client instances.
* **Hybrid and air-gapped** — for organizations spanning environments or operating isolated networks.