Best Identity Threat Detection and Response (ITDR) Software - Page 5

Quest Identity Defense

Quest Identity Defense is an agentic AI-powered identity security platform that helps organizations reduce risk, stop attacks, and strengthen resilience across hybrid Active Directory and Microsoft Entra ID environments. As identity becomes the primary attack surface for cyberattacks, organizations need comprehensive visibility and protection across both human and non-human identities. Identity Defense delivers continuous insight into identity posture, privileged access, Tier 0 assets, and potential attack paths, helping security teams identify and remediate vulnerabilities before they can be exploited. Built specifically for hybrid identity environments, Identity Defense combines security-grade visibility, deep auditing, proactive protection and containment, and AI-driven threat detection in a unified platform. Security teams can benchmark configurations against industry best practices, uncover privilege risks, investigate suspicious activity, and gain the context needed to respond to threats faster. Human-readable auditing provides detailed visibility into identity changes, helping organizations strengthen security operations, support compliance initiatives, and improve overall governance. Identity Defense goes beyond detection by helping organizations actively safeguard critical identity infrastructure. Its unique object protection prevents critical Tier 0 misconfiguration, rather than having to rollback after changes. Agentic AI defense and Shields Up containment capabilities allow teams to autonomously freeze changes to Tier 0 and other high-value assets during a suspected attack, disrupting lateral movement, limiting persistence techniques, and reducing the potential blast radius of identity-based threats. By combining visibility, protection, detection, response, and compliance readiness, Quest Identity Defense helps organizations secure Active Directory and Entra ID, reduce identity risk, strengthen cyber resilience, and respond confidently to evolving threats across the complete identity security lifecycle. The platform also helps organizations align identity security operations with industry best practices while improving readiness for audits, compliance reviews, and incident response efforts.

Quest Security Guardian

Quest Security Guardian is an integrated, SaaS-based solution designed to dramatically reduce your identity attack surface across complex hybrid Active Directory (AD) and Entra ID (Azure AD) environments. Leveraging the power of Generative AI and Machine Learning, it provides proactive threat prevention, unified visibility, and accelerated incident response, enabling security teams to protect critical assets and simplify their AD security posture.

Semperis Active Directory Forest Recovery

Cyber-first Active Directory recovery. Active Directory Forest Recovery (ADFR)—the only backup and recovery solution purpose-built for recovering Active Directory from cyber disasters—fully automates the AD forest recovery process to any hardware (virtual or physical), reducing downtime, eliminating risk of malware reinfection, and enabling post-breach forensics to prevent follow-on attacks.

ServiceNow Identity & Access Security (formerly Veza)

Veza is the authorization platform for data security. Identity and security professionals use Veza to modernize access governance for the new data landscape. By automating the work of finding and fixing excessive permissions on a continuous basis, Veza helps organizations achieve Least Privilege. Veza’s unique approach ingests metadata from any app or data system, organizes it as an authorization graph, and makes it searchable in real-time.

SlashID

SlashID is the composable identity platform to improve identity security without user friction. SlashID Gate adds authentication, authorization,rate limiting and CAPTCHA-less bot detections to your APIs and workloads in minutes. Gate can also enforce passkeys and SSO on any internal application without any code modification. SlashID Access is the most reliable and secure user identity management module thanks to our HSM-backed, globally-replicated, serverless architecture. With Access, you can implement passwordless authentication flows, multi-tenancy, one-click user invitations, RBAC, SAML and MFA in hours, not weeks. Access minimizes latency for your users, seamlessly handles traffic spikes and avoids downtime and customer data breaches.

Average Rating: 5.0/5.0

Total Reviews: 3

SmartProfiler for Active Directory Security and Health

Active Directory is a primary source for Authentication and Authorization for users and business applications. Microsoft doesn't provide out of the box tools that can be used to perform health & risk assessment of Active Directory environment. Our SmartProfiler AD Assessment Tool can be used to perform assessment of multiple Active Directory forests and provide an Assessment Report which includes issues and recommendations to fix the issues.

Sophos ITDR

Sophos ITDR reduces identity risk by continuously monitoring human and non-human identities, uncovering security gaps, detecting compromised credentials, and identifying suspicious activity across Microsoft Entra ID and Active Directory environments. With AI-driven Identity Risk Scoring, dark web monitoring, contextualized cases, and automated response capabilities, Sophos ITDR enables security teams to prioritize the threats that matter most and respond faster to identity-based attacks.

SPHEREboard

SPHERE is the leader in Identity Hygiene.  We help companies maintain real-time visibility, achieve least privilege, and automate identity risk mitigation. Organizations struggle with excessive, unmonitored privileges, historical blind spots, and compliance gaps—creating major security and audit risks. SPHERE solves this with SPHEREboard, a purpose-built platform that continuously discovers, analyzes, and remediates identity security risks—with minimal manual effort. By augmenting the foundational capabilities of PAM, IGA, and other identity solutions, SPHERE enforces Identity Hygiene, enabling security teams to effectively identify excessive access, safeguard privileged assets from external threats, and meet compliance mandates —faster and more effectively than ever before.

StackGuard

Non-Human Identity Discovery & Remediation platform

Stack Identity

Stack Identity is a comprehensive identity security platform designed to detect, eliminate, and govern unauthorized access—referred to as Shadow Access—in cloud environments. By integrating Cloud Infrastructure Entitlement Management , Identity Threat Detection and Response , and Cloud Identity Governance and Administration , Stack Identity provides a unified solution to manage identity and access risks across cloud and data estates. Key Features and Functionality: - Unified Platform: Utilizes an Identity Security Data Lake to consolidate, correlate, and contextualize identity, access risks, and vulnerabilities across cloud infrastructures. - Automated Detections: Identifies toxic combinations, chained access, lateral movement, drift detection, overprivileged access, unauthorized shadow access, shadow identities, and policy violations. - Open API Platform: Offers data enrichment and analytics capabilities, enabling detection, remediation, and governance tailored to business needs. - Extensible Integration: Seamlessly integrates with multi-cloud environments, Identity Provider systems, ticketing systems, Security Operations , Identity and Access Management , and Governance, Risk, and Compliance processes. - Compliance Automation: Automates audit and compliance processes for frameworks such as AWS FTR, HIPAA, CISA, PCI DSS, SOC2, SEBI, CIS, and FedRamp. Primary Value and Problem Solved: Stack Identity addresses the critical challenge of Shadow Access—unauthorized, unmonitored, and unintended access to sensitive data and applications in cloud environments. By providing continuous visibility and automated remediation of identity and access risks, the platform helps organizations prevent data breaches, ensure compliance, and strengthen their overall security posture. This proactive approach enables security and engineering teams to audit, govern, and promptly rightsize access, thereby reducing privilege exposure and shrinking the attack surface.

Thales OneWelcome Identity Platform

The Thales OneWelcome Identity Platform is a cloud-based identity and access management solution designed to deliver secure, frictionless digital experiences for all external identities, including customers and partners. It provides a unified platform to manage identities across B2C, B2B, gig-workers, and workforce use cases, helping organizations build trusted digital interactions at scale. The Thales OneWelcome Identity Orchestrator (IO) is a next-gen Visual Orchestration tool that enables no-code orchestration of any user journey and acts as the central engine of an Identity Fabric, moving organizations away from siloed, product‑centric deployments toward a more connected, risk-aware system of systems that can compute dynamic decisions based on all available contextual signals. As a cloud-based component, IO provides a visual interface and execution engine to manage complex interactions across B2C, B2B, and gig worker markets. To support security and compliance, Thales incorporates Adaptive Authentication, combining multi-factor authentication and risk-based access controls, alongside Consent and Preference Management to help organizations meet privacy and regulatory requirements. Delegated User Management enables secure administration of partner and third-party access through self-service workflows. With support for Passwordless Authentication, including passkeys and hardware-based authenticators, and a modular architecture built on identity apps, the platform enables flexible deployment while helping organizations modernize identity, reduce complexity, and strengthen security across digital channels.

Average Rating: 4.4/5.0

Total Reviews: 6

Trustle

Trustle goes beyond Cloud Infrastructure Entitlement Management (CIEM) to prioritize the most over-privileged users, and easily transition your entire organization to Just-In-Time Access to everything from AWS production environments processing customer transactions to GitHub repos with valuable source code and HR platforms housing your employees' personal information. Trustle takes you from questioning whether a contractor still has access to being confident that the Operations team's access was revoked immediately after the maintenance window. Your team will thank you when they see how easy it is to request and approve access through the Chat tools (Slack, Microsoft Teams) they use every day.

Average Rating: 4.5/5.0

Total Reviews: 1

Zilla Security

Zilla Security is the leading provider of modern identity governance and administration (IGA), providing a SaaS platform that automates the processes of identity compliance, provisioning, and security. Zilla stands out for its speed to value, offering the most complete set of application integrations capabilities for both commonly used and custom applications. Zilla AI Profiles™ eliminates the tedious, nearly impossible process of creating and maintaining rules that define roles or groups. Through its automations, Zilla clients are able to deploy 5X faster, complete access reviews with 80% less effort, and enable faster provisioning with 60% fewer ITSM tickets.