Detack EPAS (Enterprise Password Analytics Solution) is a product from Detack GmbH that helps organisations find and prevent insecure, reused and compromised passwords. EPAS Audit simulates attacks on passwords in a sealed environment, without storing or revealing the cleartext, according to the vendor. The optional EPAS Enforcer add-on blocks such passwords during password changes and supports, among others, Microsoft Active Directory, Windows, Azure, UNIX systems, databases and identity management systems. It also includes a database of compromised credentials and reports that support ISO 27001, NIS2 and DORA documentation. EPAS is delivered as an appliance for on-premises or private cloud use.
Detack GmbH is headquartered in Ludwigsburg, Germany, and has subsidiaries in, among others, the United States, Singapore, Australia, Romania and Switzerland. Its website names no foreign parent company. Because the appliance is operated by the customer, password hashes and analysis results stay within the organisation's own infrastructure. For a European organisation this matters, as credentials are among the most sensitive data it holds. Detack also offers security consulting services alongside the product.