Sectona Security Platform 6.0 Is Here: A Closer Look at What's New
Enterprise security teams are expected to do more with constrained resources and have zero tolerance for access related incidents. Every inefficiency in your PAM workflows – a manual step that could be automated, a visibility gap during an audit, or an integration that requires constant maintenance – compounds into real operational and security risk.
Sectona Security Platform 6.0 is built to address exactly that.
This release brings meaningful improvements across cloud integrations, session controls, audit visibility, and administrative workflows. So, your team spends less time managing the platform and more time using it to secure what matters.
Technology: A More Capable and Better-Connected Platform
Sectona Security Platform 6.0 expands what’s possible at the infrastructure layer. From cloud identity discovery to database proxy and certificate-based authentication – these updates reduce the friction of onboarding diverse assets, integrating with the systems your team already relies on, and scaling coverage without making systems harder to manage.
Azure Entra ID Discovery and Onboarding:
Introduced automated discovery and onboarding for Azure Entra ID privileged accounts, alongside a new Linked Directory Store that enables SAML-based integration with both Active Directory and Entra ID. Together, these capabilities deliver seamless automated onboarding, dynamic group mapping, and user status validation across directory stores, giving organisations operating in hybrid or multi-directory environments a single and coherent way to manage cloud and on-prem identities.
Session and Account Analytics:
On top of the strong analytical capabilities that Sectona already provides, Session Analytics and Account Analytics have been significantly expanded with deeper detail, richer filters, and a more cohesive view of privileged access activity. What used to require toggling between multiple screens is now visible in one place – session behaviour, account usage patterns, authentication trends, and security posture across assets, all without the extra clicks. For teams that run regular access reviews or need to respond quickly to anomalies, the time savings are real – less hunting, more clarity, and a fuller picture of what’s happening across your privileged environment at any given moment.
Google Cloud Certificate Based Authentication:
Certificate-based authentication has been introduced for Google Cloud discovery configurations, enhancing security while simplifying the integration of cloud-hosted assets into your privileged access framework.
Direct Inline Proxy for Databases:
Direct inline proxy support for MySQL, MSSQL, and MariaDB enhances the native user experience by allowing users to connect to their database of choice through their preferred thick client. This eliminates the architectural dependency on a separate jump server, which in turn removes the requirement for Microsoft RDS CAL licences that jump server-based setups previously demanded, translating into measurable infrastructure cost savings and a significantly smoother database access experience for organisations.
Security: Tighter Controls, Clearer Audit Visibility
Security teams need to know what’s happening across privileged accounts in real-time and we have added several improvements that make visibility sharper and more actionable.
Hardware Security Module (HSM) Integration:
Protecting encryption keys is a critical aspect of securing the overall Sectona Security Platform. The platform now integrates with external cryptographic operations through both physical and cloud-hosted Hardware Security Modules (HSM), including Utimaco, Thales, AWS Cloud HSM, and Azure Cloud HSM. This ensures the platform’s encryption key is managed entirely outside the application layer, with secure encryption and decryption operations governed by strong cryptographic standards, AES 256-bit and RSA 2048-bit, ensuring data confidentiality and integrity across the system. For teams with tight key security controls and compliance obligations such as GDPR and PCI DSS, this closes a meaningful gap in their security architecture.
Strengthening Password Reconciliation:
In any PAM deployment, credentials are vaulted and rotated according to a defined schedule. However, under certain conditions, they can fall out of sync, whether due to a user manually changing a credential after checkout or a network disruption interrupting the rotation cycle. When this occurs, password reconciliation is triggered to resynchronise the affected account.
In the scenario where management account is out of sync, the solution extends reconciliation privileges to a set of standard accounts in addition to the management account. Password rotation is applied to all these accounts, including the management account, on staggered schedules, ensuring that all passwords across the privileged estate remain under active rotation and that no standing privileges persist within the environment.
Granular Session Control:
Consider a scenario where a user is actively working on a critical server and their activity raises a potential concern. With 6.0, administrators are no longer limited to choosing between passive monitoring and immediate termination.
Instead, they can pause the session, engage the user directly for clarification, and assess the situation before acting. If the activity is deemed safe, the session can be resumed seamlessly without any loss of progress. If the risk is validated, decisive action can be taken to terminate the session.
By preserving session state during pauses and enabling shared visibility, this capability ensures continuity while supporting a more informed and coordinated response
SIEM Coverage and MFA Visibility:
SIEM coverage has been expanded to capture key identity and access events, privileged access assignments, role and status changes, and login activity, so your security operations team receives actionable and real-time notifications. MFA status is now visible in both user login history and session view, giving auditors and administrators a clear record of whether multi-factor authentication was enforced at the time of any given session. Together, these updates mean less scrambling when an audit or incident investigation demands answers.
Experience: Less Friction, More Clarity
The experience improvements in this release are thoughtfully designed to support the diverse needs of Sectona’s core users, including administrators managing accounts and analysts reviewing session data.
Asset Category Support in Attribute-Based Account Groups:
Attribute-based account groups now support Asset Category as a filtering attribute, enabling more precise and automated account organisation. The platform can intelligently recognise asset types such as operating systems, databases, and firewalls, based on their category, and group accounts accordingly.
This enhancement improves attribute-based filtering and simplifies rule creation, allowing administrators to build more structured and scalable policies while reducing manual effort and overall complexity.
Spanish and Turkish Language Support:
Spanish and Turkish language support has been added, making the platform more accessible for international teams and reducing the friction that comes with navigating a security tool in a second language.
Pre-configured Access Types for Accelerated Onboarding:
Added support for access types, including AWS Snowflake, Azure Console, and Cisco EDR, come with pre-configured parameters and SSO scripts, enabling faster onboarding across a wide range of vendor ecosystems.
These built-in templates provide a consistent and structured approach to access configuration, allowing administrators to provision access faster and initiate sessions with minimal effort. This simplifies how access is configured and activated, improving speed and reliability in day-to-day operations.
Notify Users During Updates:
The platform now handles maintenance windows with greater care. Login, proxy access, sessions, and APIs are restricted during maintenance with a configurable message to users, while existing sessions and background processes continue uninterrupted. Admins can configure scheduled activation without requiring a platform restart.
What This Release Means for Your Organisation
Sectona Security Platform 6.0 is designed to address real challenges in managing privileged access at scale, improving audit readiness, reducing manual onboarding effort, and enabling faster response through enhanced session control. Here’s how these capabilities come together in real-world scenarios.
See It in Practice
Incident Response: An on-call administrator gets an alert about suspicious activity on a service account. Using the Session Analytics report, they identify the anomaly within minutes. They suspend the active session immediately from the Live Session View, rotate the password under the account-specific policy, and hand off approval rights to a backup using workflow delegation, all without leaving the platform. What could have been hours of manual coordination gets contained faster, with a complete audit trail attached.
Cloud Onboarding: A security team expanding into Azure needs to bring hundreds of Entra ID privileged accounts under PAM coverage. Automated discovery identifies the accounts, they’re onboarded programmatically and mapped to dynamic groups through the Linked Directory Store, and rotation policies are applied at the account level from day one. Onboarding, that previously took days of manual work, gets done in a fraction of the time.
Compliance Audit Preparation: A compliance officer is preparing for a scheduled audit and needs to demonstrate that privileged access is properly controlled and monitored. They pull the Account Analytics report to show access patterns and account usage trends, verify MFA enforcement status from login history, and confirm that SIEM has been capturing all privileged access assignments and role changes. What once required gathering data from multiple sources is now available in a few clicks, clean, consolidated, and audit ready.
How It Matters
- HSM-backed key management expanded SIEM coverage and MFA visibility in session history give security leaders the depth that auditors and regulators increasingly expect, without requiring custom integrations to achieve it.
- Security teams spend less time on manual and repetitive tasks, from cloud identity onboarding to session management and credential rotation, allowing them to focus on work that requires human judgement.
- Administrators gain real-time control over live sessions with the ability to pause, communicate, and terminate without disrupting a user’s work unnecessarily, striking a better balance between security responsiveness and user experience.
- Analytics are deeper and more consolidated, meaning teams get the full picture of privileged access activity with fewer clicks and less context-switching across views.
As your environment grows – more cloud assets, more directories, and more teams – Sectona Security Platform 6.0 scales with it.
If you’d like to see how these capabilities map to your specific environment, reach out to the Sectona team or request a personalised walkthrough. A good starting point is understanding where your current privileged access gaps are and how quickly they can be closed.
For more information about Sectona Security Platform version 6.0 and detailed technical configuration guidance, visit our documentation portal and release notes.