# Best Identity Threat Detection and Response (ITDR) Software - Page 5

## How Many Identity Threat Detection and Response (ITDR) Software Products Does G2 Track?

**Total Products under this Category:** 68

### Category Stats (Aug 2026)

- **Average Rating:** 4.56/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** SaaS Alerts (+2.15%) - Among all products in this category, SaaS Alerts recorded the largest rating increase compared to last month

_Last updated: August 01, 2026_

## How Does G2 Rank Identity Threat Detection and Response (ITDR) Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 3,400+ Authentic Reviews
- 68+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Identity Threat Detection and Response (ITDR) Software
 ![G2 Grid® for Identity Threat Detection and Response (ITDR) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/identity-threat-detection-and-response-itdr/grids.png?focus%5B%5D=68606&focus%5B%5D=1324237&focus%5B%5D=633&focus%5B%5D=146842&focus%5B%5D=1146&focus%5B%5D=1231537&focus%5B%5D=16881&focus%5B%5D=131564)

Highlighted products: CrowdStrike Falcon Endpoint Protection Platform, Huntress Managed ITDR, Okta, Microsoft Defender for Identity, IBM MaaS360, Guardz, SentinelOne Singularity Endpoint, and CrowdStrike Falcon Shield.

Underlying data: [Grid® JSON](https://www.g2.com/categories/identity-threat-detection-and-response-itdr/grids.json?focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=huntress-managed-itdr&focus%5B%5D=okta&focus%5B%5D=microsoft-defender-for-identity&focus%5B%5D=ibm-maas360&focus%5B%5D=guardz&focus%5B%5D=sentinelone-singularity-endpoint&focus%5B%5D=crowdstrike-falcon-shield)

**Sponsored**

### Guardz

Guardz is a unified cybersecurity platform specifically designed for Managed Service Providers (MSPs). This innovative solution consolidates essential security controls, identity threat detection and response (ITDR), endpoint protection (EDR), email security, user awareness training and phishing simulations, and Managed Detection and Response (MDR) into a single AI-native framework. The platform aims to enhance operational efficiency by streamlining security processes and providing a comprehensive approach to cybersecurity. Targeting MSPs, Guardz addresses the unique challenges these providers face in managing multiple security tools that often operate in silos. By adopting an identity-centric approach, Guardz connects various security vectors, effectively reducing the gaps that can leave organizations vulnerable. This layered and holistic view enables MSPs to respond to user risks in real time, ensuring that security measures are not only reactive but also proactive in safeguarding client environments. Key features of Guardz include its 24/7 AI and human-led Managed Detection and Response (MDR) services. The platform employs agentic AI to triage threats at machine speed, allowing for rapid identification and prioritization of potential security incidents. This automated triage process is complemented by expert analysts who validate findings, mitigate risks, and guide response actions. As a result, MSPs can offer scalable protection to their clients without the need to expand their workforce, making it a cost-effective solution for growing cybersecurity demands. Guardz stands out in the cybersecurity landscape by providing a unified platform that integrates various security functions into one cohesive system. This integration not only simplifies the management of security tools but also enhances the overall effectiveness of security measures. By leveraging AI-driven insights and human expertise, Guardz empowers MSPs to deliver robust cybersecurity solutions that adapt to the evolving threat landscape, ensuring their clients remain protected against emerging risks.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1003176&secure%5Bchosen_at%5D=2026-08-03T11%3A56%3A17Z&secure%5Bdisplayable_resource_id%5D=1003176&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1003176&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1231537&secure%5Bresource_id%5D=1003176&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fidentity-threat-detection-and-response-itdr%3Fpage%3D5&secure%5Btoken%5D=5f1e7c2106ae10dd995ac0f1a96877e9844470e239a970e5bbfe9042726eb352&secure%5Burl%5D=https%3A%2F%2Fguardz.com%2F%3Futm_source%3Dg2%26utm_medium%3Dcpc%26utm_campaign%3Dvisitwebsite&secure%5Burl_type%5D=custom_url)

### [SmartProfiler for Active Directory Security and Health](https://www.g2.com/products/smartprofiler-for-active-directory-security-and-health/reviews)

Active Directory is a primary source for Authentication and Authorization for users and business applications. Microsoft doesn't provide out of the box tools that can be used to perform health & risk assessment of Active Directory environment. Our SmartProfiler AD Assessment Tool can be used to perform assessment of multiple Active Directory forests and provide an Assessment Report which includes issues and recommendations to fix the issues.

#### Who Is the Company Behind SmartProfiler for Active Directory Security and Health?

- **Seller:** [DynamicPacks Technologies](https://www.g2.com/sellers/dynamicpacks-technologies)
- **Year Founded:** 2019
- **HQ Location:** Minneapolis, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f859c3b0153f6c235a5102231e16141e24bf11c389c2d0bd9624ad56bad089fd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F31072104&secure%5Burl_type%5D=linkedin_company_website)  
18 employees on LinkedIn®

### [SPHEREboard](https://www.g2.com/products/sphereboard/reviews)

SPHERE is the leader in Identity Hygiene.  We help companies maintain real-time visibility, achieve least privilege, and automate identity risk mitigation. Organizations struggle with excessive, unmonitored privileges, historical blind spots, and compliance gaps—creating major security and audit risks. SPHERE solves this with SPHEREboard, a purpose-built platform that continuously discovers, analyzes, and remediates identity security risks—with minimal manual effort. By augmenting the foundational capabilities of PAM, IGA, and other identity solutions, SPHERE enforces Identity Hygiene, enabling security teams to effectively identify excessive access, safeguard privileged assets from external threats, and meet compliance mandates —faster and more effectively than ever before.

#### Who Is the Company Behind SPHEREboard?

- **Seller:** [SPHERE Technology Solutions](https://www.g2.com/sellers/sphere-technology-solutions)
- **Year Founded:** 2009
- **HQ Location:** Newark, New Jersey, United States
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=60920bd90bc7ab634393bce903a268f6a24572ffa966fcfc248a75fe59d2629f&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsphere-technology-solutions%2F&secure%5Burl_type%5D=linkedin_company_website)  
109 employees on LinkedIn®

### [StackGuard](https://www.g2.com/products/stackguard/reviews)

Non-Human Identity Discovery & Remediation platform

#### Who Is the Company Behind StackGuard?

- **Seller:** [StackGuard](https://www.g2.com/sellers/stackguard)
- **Year Founded:** 2025
- **HQ Location:** Singapore, SG
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b7d9c1750e043c8a0e29ffebe6cbfeb70d5b390ba72eafd4ed66ec5c822ceb97&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fstackguard%2F&secure%5Burl_type%5D=linkedin_company_website)  
6 employees on LinkedIn®

### [Stack Identity](https://www.g2.com/products/stack-identity/reviews)

Stack Identity is a comprehensive identity security platform designed to detect, eliminate, and govern unauthorized access—referred to as Shadow Access—in cloud environments. By integrating Cloud Infrastructure Entitlement Management , Identity Threat Detection and Response , and Cloud Identity Governance and Administration , Stack Identity provides a unified solution to manage identity and access risks across cloud and data estates. Key Features and Functionality: - Unified Platform: Utilizes an Identity Security Data Lake to consolidate, correlate, and contextualize identity, access risks, and vulnerabilities across cloud infrastructures. - Automated Detections: Identifies toxic combinations, chained access, lateral movement, drift detection, overprivileged access, unauthorized shadow access, shadow identities, and policy violations. - Open API Platform: Offers data enrichment and analytics capabilities, enabling detection, remediation, and governance tailored to business needs. - Extensible Integration: Seamlessly integrates with multi-cloud environments, Identity Provider systems, ticketing systems, Security Operations , Identity and Access Management , and Governance, Risk, and Compliance processes. - Compliance Automation: Automates audit and compliance processes for frameworks such as AWS FTR, HIPAA, CISA, PCI DSS, SOC2, SEBI, CIS, and FedRamp. Primary Value and Problem Solved: Stack Identity addresses the critical challenge of Shadow Access—unauthorized, unmonitored, and unintended access to sensitive data and applications in cloud environments. By providing continuous visibility and automated remediation of identity and access risks, the platform helps organizations prevent data breaches, ensure compliance, and strengthen their overall security posture. This proactive approach enables security and engineering teams to audit, govern, and promptly rightsize access, thereby reducing privilege exposure and shrinking the attack surface.

#### Who Is the Company Behind Stack Identity?

- **Seller:** [Stack Identity](https://www.g2.com/sellers/stack-identity)
- **HQ Location:** Menlo Park, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=bf24e93c68deebdfa62799872a90ff79a35b3c99432fce12f26724807a06f5f6&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fstack-identity&secure%5Burl_type%5D=linkedin_company_website)  
10 employees on LinkedIn®

### [Thales OneWelcome Identity Platform](https://www.g2.com/products/thales-onewelcome-identity-platform/reviews)

The Thales OneWelcome Identity Platform is a cloud-based identity and access management solution designed to deliver secure, frictionless digital experiences for all external identities, including customers and partners. It provides a unified platform to manage identities across B2C, B2B, gig-workers, and workforce use cases, helping organizations build trusted digital interactions at scale. The Thales OneWelcome Identity Orchestrator (IO) is a next-gen Visual Orchestration tool that enables no-code orchestration of any user journey and acts as the central engine of an Identity Fabric, moving organizations away from siloed, product‑centric deployments toward a more connected, risk-aware system of systems that can compute dynamic decisions based on all available contextual signals. As a cloud-based component, IO provides a visual interface and execution engine to manage complex interactions across B2C, B2B, and gig worker markets. To support security and compliance, Thales incorporates Adaptive Authentication, combining multi-factor authentication and risk-based access controls, alongside Consent and Preference Management to help organizations meet privacy and regulatory requirements. Delegated User Management enables secure administration of partner and third-party access through self-service workflows. With support for Passwordless Authentication, including passkeys and hardware-based authenticators, and a modular architecture built on identity apps, the platform enables flexible deployment while helping organizations modernize identity, reduce complexity, and strengthen security across digital channels.

**Average Rating:** 4.8/5.0

**Total Reviews:** 2

#### How Do G2 Users Rate Thales OneWelcome Identity Platform?

- **Quality of Support:** 8.3/10 (Category avg: 9.1/10)
- **Ease of Use:** 9.2/10 (Category avg: 9.1/10)

#### Who Is the Company Behind Thales OneWelcome Identity Platform?

- **Seller:** [Thales Group](https://www.g2.com/sellers/thales-group)
- **HQ Location:** Austin, Texas
- **Twitter:** @ThalesCloudSec  
6,935 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6e2851e1a59f8d20bde4bcb61853df023b359c511759b122b0978397a41c6e7e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthalessoftwaremonetization%2F&secure%5Burl_type%5D=linkedin_company_website)  
46 employees on LinkedIn®
- **Ownership:** EPA:HO
- **Total Revenue (USD mm):** $15,854

#### Who Uses This Product?

- **Company Size:** 50% Large, 50% Medium

#### What Do G2 Reviewers Say About Thales OneWelcome Identity Platform?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **secure and convenient access management** of Thales OneWelcome, enhancing their overall user experience.
- Users value the **multifactor and adaptive authentication** features for enhanced security against unauthorized access.
- Users appreciate the **smooth and convenient access management** of Thales OneWelcome, enhancing their overall experience significantly.
- Users appreciate the **secure access management** of Thales OneWelcome, enabling smooth and frictionless user experiences.

##### Cons

- Users find the **initial setup complex** , making implementation challenging and sometimes unclear regarding pricing expectations.
- Users find the **pricing unclear** , leading to challenges in budgeting and expectations for the Thales OneWelcome Identity Platform.

#### What Are Recent G2 Reviews of Thales OneWelcome Identity Platform?

**["The Powerful Solution for Securtiy"](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-10919996)**

**Rating:** 5.0/5.0 stars

_— neha v._

[Read full review](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-10919996)

**["Secure, Frictionless Access Management with Thales OneWelcome Identity Platform"](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-11151239)**

**Rating:** 4.5/5.0 stars

_— Vishal P._

[Read full review](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-11151239)

### [Trustle](https://www.g2.com/products/trustle/reviews)

Trustle goes beyond Cloud Infrastructure Entitlement Management (CIEM) to prioritize the most over-privileged users, and easily transition your entire organization to Just-In-Time Access to everything from AWS production environments processing customer transactions to GitHub repos with valuable source code and HR platforms housing your employees' personal information. Trustle takes you from questioning whether a contractor still has access to being confident that the Operations team's access was revoked immediately after the maintenance window. Your team will thank you when they see how easy it is to request and approve access through the Chat tools (Slack, Microsoft Teams) they use every day.

**Average Rating:** 4.5/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate Trustle?

- **Quality of Support:** 8.3/10 (Category avg: 9.1/10)
- **Ease of Use:** 10.0/10 (Category avg: 9.1/10)

#### Who Is the Company Behind Trustle?

- **Seller:** [Trustle](https://www.g2.com/sellers/trustle)
- **Year Founded:** 2019
- **HQ Location:** Boston, MA, USA
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=ba3f720c2f6266f6fc3b468262f9f8ce2b6f8fba40f106d6f7834308c4ad9848&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftrustlesecurity&secure%5Burl_type%5D=linkedin_company_website)  
15 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Medium

#### What Do G2 Reviewers Say About Trustle?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **cloud-based identity security** of Trustle, which enhances access management and minimizes risks effectively.
- Users value Trustle's **effective identity management** , enhancing security and access control across cloud environments seamlessly.
- Users value the **secure access** provided by Trustle, ensuring effective identity security and risk management in the cloud.

#### What Are Recent G2 Reviews of Trustle?

**["Trustle Cloud Base Security Solution"](https://www.g2.com/survey_responses/trustle-review-10722969)**

**Rating:** 4.5/5.0 stars

_— Rehan D._

[Read full review](https://www.g2.com/survey_responses/trustle-review-10722969)

### [Veza Core Authorization Platform](https://www.g2.com/products/veza-core-authorization-platform/reviews)

Veza is the authorization platform for data security. Identity and security professionals use Veza to modernize access governance for the new data landscape. By automating the work of finding and fixing excessive permissions on a continuous basis, Veza helps organizations achieve Least Privilege. Veza’s unique approach ingests metadata from any app or data system, organizes it as an authorization graph, and makes it searchable in real-time.

#### Who Is the Company Behind Veza Core Authorization Platform?

- **Seller:** [Veza](https://www.g2.com/sellers/veza)
- **Year Founded:** 2020
- **HQ Location:** Silicon Valley, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3d801e4f2979d075c0f6d10bbcc7f8966700d44988c664f9e45897cf048cd0de&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fveza&secure%5Burl_type%5D=linkedin_company_website)  
287 employees on LinkedIn®

### [Zilla Security](https://www.g2.com/products/zilla-security/reviews)

Zilla Security is the leading provider of modern identity governance and administration (IGA), providing a SaaS platform that automates the processes of identity compliance, provisioning, and security. Zilla stands out for its speed to value, offering the most complete set of application integrations capabilities for both commonly used and custom applications. Zilla AI Profiles™ eliminates the tedious, nearly impossible process of creating and maintaining rules that define roles or groups. Through its automations, Zilla clients are able to deploy 5X faster, complete access reviews with 80% less effort, and enable faster provisioning with 60% fewer ITSM tickets.

#### Who Is the Company Behind Zilla Security?

- **Seller:** [Zilla Security](https://www.g2.com/sellers/zilla-security)
- **Year Founded:** 2020
- **HQ Location:** Boston, MA
- **Twitter:** @zillasecurity  
52 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f4cef5c9b8f5119c98a7d2eb2d0262b6369e1c3008efc22d58c93340c9d1e2a2&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fzillasecurity%2F&secure%5Burl_type%5D=linkedin_company_website)  
33 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Hospital & Health Care
- **Company Size:** 27% Large, 18% Medium

- [‹ Prev‹ Prev](/categories/identity-threat-detection-and-response-itdr?order=g2_score&page=4#product-list)
- [1](/categories/identity-threat-detection-and-response-itdr?order=g2_score#product-list)
- [2](/categories/identity-threat-detection-and-response-itdr?order=g2_score&page=2#product-list)
- [3](/categories/identity-threat-detection-and-response-itdr?order=g2_score&page=3#product-list)
- [4](/categories/identity-threat-detection-and-response-itdr?order=g2_score&page=4#product-list)
- 5
- Next ›Next ›

Spotlight Categories

[Mobile Device Management (MDM) Software](https://www.g2.com/categories/mobile-device-management-mdm)

[Product Analytics Software](https://www.g2.com/categories/product-analytics)

[Expense Management Software](https://www.g2.com/categories/expense-management)

[Employee Communications Software](https://www.g2.com/categories/employee-communications)

[Marketing Analytics Tools](https://www.g2.com/categories/marketing-analytics)

Similar Categories

- [Insider Threat Management (ITM)](/categories/insider-threat-management-itm)

- [User and Entity Behavior Analytics (UEBA)](/categories/user-and-entity-behavior-analytics-ueba)

[Browse Identity Threat Detection and Response (ITDR) Themes](/categories/identity-threat-detection-and-response-itdr/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated October 3, 2024

Identity threat detection and response (ITDR) software detects identity-related threats and vulnerabilities, such as credential misuse and abuse, unapproved entitlements and privilege escalations, and other identity-related threats. Information security teams use this software as part of their threat detection initiatives, specifically geared toward the identity-related attack surface.

Identity threat detection and response (ITDR) software is different from [identity and access management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam); IAM’s function is to prevent identity-related risks through proper user authentication and access up front, while ITDR identifies threats once systems have been compromised. ITDR is also different from [insider threat management (ITM) software](https://www.g2.com/categories/insider-threat-management-itm) in that ITDR identifies credentials and privileges abuse, commonly from external parties that have identified and misused identity vulnerabilities, while ITM monitors the actions a threat actor takes such as downloading data they are not entitled to.

To qualify for inclusion in the Identity Threat Detection and Response (ITDR) category, a product must:

- Monitor and detect potentially malicious identity and privileges activity
- Identify identity-related misconfigurations
- Investigate identity threats with contextual user information
- Flag unauthorized accounts and excessive privileges

Show More