“Well-designed from a security perspective”
“A solid approach to security”
“Conforms with best practices”

These are some of the conclusions drawn by Foundstone, Inc., independent experts in strategic security, about Password Manager. Foundstone conducted a security assessment of Password Manager to determine its vulnerability to a range of threat conditions. Results of this third-party testing indicated that Password Manager’s security capabilities, including strong encryption, buffer overflow prevention, appropriate use of operating system and registry permissions, and the presence of anti-tampering techniques, contribute to the solid security framework built into the product.

Password Manager, part of the Citrix Access Suite, provides enterprise single sign-on access to Windows, Web and host-based applications.  With over 39,000 hours invested by the Citrix R&D team prior to the first market release of Password Manager in September 2003, this solution improves the speed and safety of connecting to secure applications, and can cut IT support costs by up to 25 percent by reducing the number of password-related help desk calls.

Password Manager is in the process of Common Criteria Certification

Password Manager for Presentation Server and Password Manager Enterprise Edition are in process of Common Criteria EAL-2 Certification. The security claims for Password Manager are formally defined. Certification attests to important security claims such as residual information protection and anti-phishing methods. Once complete, Password Manager will be the first scriptless Enterprise Single Sign-on solution to have achieved Common Criteria Certification. Learn more.

Download the full report and learn why Foundstone wrote, “security was a major consideration during the design and development of Citrix Password Manager”.