# Best Enterprise Identity Threat Detection and Response (ITDR) Software

## How Many Identity Threat Detection and Response (ITDR) Software Products Does G2 Track?

**Total Products under this Category:** 69

### Category Stats (Aug 2026)

- **Average Rating:** 4.54/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** SaaS Alerts (+3.34%) - Among all products in this category, SaaS Alerts recorded the largest rating increase compared to last month

_Last updated: August 06, 2026_

## How Does G2 Rank Identity Threat Detection and Response (ITDR) Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 3,400+ Authentic Reviews
- 69+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Identity Threat Detection and Response (ITDR) Software
 ![G2 Grid® for Identity Threat Detection and Response (ITDR) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/identity-threat-detection-and-response-itdr/grids.png?focus%5B%5D=68606&focus%5B%5D=4206&focus%5B%5D=146842&focus%5B%5D=40291&focus%5B%5D=1195973)

Highlighted products: CrowdStrike Falcon Endpoint Protection Platform, SailPoint, Microsoft Defender for Identity, Semperis Directory Services Protector, and Microsoft Entra Identity Protection.

Underlying data: [Grid® JSON](https://www.g2.com/categories/identity-threat-detection-and-response-itdr/grids.json?focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=sailpoint&focus%5B%5D=microsoft-defender-for-identity&focus%5B%5D=semperis-directory-services-protector&focus%5B%5D=microsoft-entra-identity-protection&segment=enterprise)

**Sponsored**

### Guardz

Guardz is a unified cybersecurity platform specifically designed for Managed Service Providers (MSPs). This innovative solution consolidates essential security controls, identity threat detection and response (ITDR), endpoint protection (EDR), email security, user awareness training and phishing simulations, and Managed Detection and Response (MDR) into a single AI-native framework. The platform aims to enhance operational efficiency by streamlining security processes and providing a comprehensive approach to cybersecurity. Targeting MSPs, Guardz addresses the unique challenges these providers face in managing multiple security tools that often operate in silos. By adopting an identity-centric approach, Guardz connects various security vectors, effectively reducing the gaps that can leave organizations vulnerable. This layered and holistic view enables MSPs to respond to user risks in real time, ensuring that security measures are not only reactive but also proactive in safeguarding client environments. Key features of Guardz include its 24/7 AI and human-led Managed Detection and Response (MDR) services. The platform employs agentic AI to triage threats at machine speed, allowing for rapid identification and prioritization of potential security incidents. This automated triage process is complemented by expert analysts who validate findings, mitigate risks, and guide response actions. As a result, MSPs can offer scalable protection to their clients without the need to expand their workforce, making it a cost-effective solution for growing cybersecurity demands. Guardz stands out in the cybersecurity landscape by providing a unified platform that integrates various security functions into one cohesive system. This integration not only simplifies the management of security tools but also enhances the overall effectiveness of security measures. By leveraging AI-driven insights and human expertise, Guardz empowers MSPs to deliver robust cybersecurity solutions that adapt to the evolving threat landscape, ensuring their clients remain protected against emerging risks.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1003176&secure%5Bchosen_at%5D=2026-08-10T06%3A02%3A55Z&secure%5Bdisplayable_resource_id%5D=1003176&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1003176&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1231537&secure%5Bresource_id%5D=1003176&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fidentity-threat-detection-and-response-itdr%2Fenterprise%3Fopen_modal_url%3D%252Fproducts%252Fmicrosoft-defender-for-identity%252Fwishlists%253Fhost_path%253D%25252Fcategories%25252Fidentity-threat-detection-and-response-itdr%25252Fenterprise%2526source%253Dcategory&secure%5Btoken%5D=1000a6d1ba1eb4c137c809fa2be5ba7030843d936ac8a5d9bb6a53de8bc72ac9&secure%5Burl%5D=https%3A%2F%2Fguardz.com%2F%3Futm_source%3Dg2%26utm_medium%3Dcpc%26utm_campaign%3Dvisitwebsite&secure%5Burl_type%5D=custom_url)

### [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews)

Organizations today face a serious challenge: managing numerous security vendors and tools while confronting an ever-evolving threat landscape. Sophisticated adversaries are becoming smarter, faster, and more evasive, launching complex attacks that can strike in minutes or even seconds. Traditional security approaches struggle to keep pace, leaving businesses vulnerable. The CrowdStrike Falcon Platform addresses this by offering a unified, cloud-native solution. It consolidates previously siloed security solutions and incorporates third-party data into a single platform with one efficient and resource-conscious agent, leveraging advanced AI and real-time threat intelligence. This approach simplifies security operations, speeds analyst decision making, and enhances protection to stop the breach, allowing organizations to reduce risk with less complexity and lower costs. CrowdStrike's Falcon Platform includes: - Endpoint Security: Secure the endpoint, stop the breach - Identify Protection: Identity is the front line, defend it - Next-Gen SIEM: The future of SIEM, today - Data Protection: Real-time data protection from endpoint to cloud - Exposure Management: Understand risk to stop breaches - Charlotte AI: Powering the next evolution of the SOC

**Average Rating:** 4.6/5.0

**Total Reviews:** 417

#### How Do G2 Users Rate CrowdStrike Falcon Endpoint Protection Platform?

- **Quality of Support:** 8.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.0/10 (Category avg: 9.0/10)

#### Who Is the Company Behind CrowdStrike Falcon Endpoint Protection Platform?

- **Seller:** [CrowdStrike](https://www.g2.com/sellers/crowdstrike)
- **Company Website:** www.crowdstrike.com
- **Year Founded:** 2011
- **HQ Location:** Sunnyvale, CA
- **Twitter:** @CrowdStrike  
110,809 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f13dce0bc1628ccb762ed9d5acb4e0f0998a717639b903c3d3a271ef1da6ad7b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F2497653%2F&secure%5Burl_type%5D=linkedin_company_website)  
11,343 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Security Analyst, Cyber Security Analyst
- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 43% Large, 42% Medium

#### What Do G2 Reviewers Say About CrowdStrike Falcon Endpoint Protection Platform?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **lightweight performance and powerful threat detection** of CrowdStrike Falcon, enhancing operational efficiency and security.
- Users value the **effective threat detection** of CrowdStrike Falcon, ensuring robust security without compromising system performance.
- Users appreciate the **ease of use** of CrowdStrike Falcon, benefiting from a lightweight and efficient security solution.
- Users appreciate the **advanced real-time threat protection** of CrowdStrike Falcon, enhancing security with minimal system impact.
- Users appreciate the **strong threat detection** of CrowdStrike Falcon, effectively catching both known and unknown threats seamlessly.

##### Cons

- Users find the **cost of CrowdStrike Falcon** to be high, especially for smaller teams needing advanced features.
- Users face **initial complexity and a steep learning curve** with CrowdStrike Falcon, making it challenging for non-technical personnel.
- Users find the **initial learning curve** of CrowdStrike challenging, especially transitioning from other systems like Splunk.
- Users find the **high cost and limited features** frustrating, particularly for smaller teams needing advanced capabilities.
- Users express concern over **pricing issues** , especially for smaller organizations needing advanced features with additional licensing costs.

#### What Are Recent G2 Reviews of CrowdStrike Falcon Endpoint Protection Platform?

**["Crowdstrike Falcon: Proactive Security, Steep Learning Curve"](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852)**

**Rating:** 5.0/5.0 stars

_— Ansh B._

[Read full review](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852)

**["Lightweight Deployment, Powerful Incident Response Visibility"](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12952621)**

**Rating:** 5.0/5.0 stars

_— Anup A._

[Read full review](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12952621)

#### What Are G2 Users Discussing About CrowdStrike Falcon Endpoint Protection Platform?

- [How does Falcon prevent work?](https://www.g2.com/discussions/how-does-falcon-prevent-work) - 1 comment
- [Does CrowdStrike offer MFA?](https://www.g2.com/discussions/does-crowdstrike-offer-mfa) - 1 comment
- [What is OverWatch in CrowdStrike?](https://www.g2.com/discussions/what-is-overwatch-in-crowdstrike) - 1 comment
- [How much does CrowdStrike Falcon X cost?](https://www.g2.com/discussions/how-much-does-crowdstrike-falcon-x-cost)
- [What is MDR detection?](https://www.g2.com/discussions/what-is-mdr-detection)

### [SailPoint](https://www.g2.com/products/sailpoint/reviews)

SailPoint is the leader in identity security for the modern enterprise. Harnessing the power of AI and machine learning, SailPoint automates the management and control of access, delivering only the required access to the right identities and technology resources at the right time. Our sophisticated identity platform seamlessly integrates with existing systems and workflows, providing the singular view into all identities and their access. We meet customers where they are with an intelligent identity solution that matches the scale, velocity and environmental needs of the modern enterprise. SailPoint empowers the most complex enterprises worldwide to build a security foundation grounded in identity security.

**Average Rating:** 4.5/5.0

**Total Reviews:** 190

#### How Do G2 Users Rate SailPoint?

- **Quality of Support:** 7.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.5/10 (Category avg: 9.0/10)

#### Who Is the Company Behind SailPoint?

- **Seller:** [SailPoint](https://www.g2.com/sellers/sailpoint)
- **Company Website:** www.sailpoint.com
- **Year Founded:** 2004
- **HQ Location:** Austin, TX
- **Twitter:** @SailPoint  
15,037 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=c0a750520dcce1b9589bc66fe1f2830d2beaedb71ec0b739bce76205485f027c&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F47456%2F&secure%5Burl_type%5D=linkedin_company_website)  
3,642 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Software Engineer, Senior Manager
- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 76% Large, 18% Medium

#### What Do G2 Reviewers Say About SailPoint?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** in SailPoint, simplifying access management across multiple applications effortlessly.
- Users value SailPoint's **strong identity governance capabilities** , which enhance access control and provide centralized visibility.
- Users value the **advanced security features** of SailPoint, ensuring robust protection and simplified access management.
- Users value the **automated access reviews** of SailPoint, which enhance security and simplify user permission management.
- Users appreciate the **easy integration** of SailPoint, enabling smooth access management across multiple applications.

##### Cons

- Users find the **improvement needed** in RBAC module and support responsiveness, delaying resolutions and feature implementations.
- Users experience **poor customer support** with slow response times and difficulties in communication, leading to frustration.
- Users highlight **missing features** in SailPoint, facing challenges with complexity and delayed updates for new functionalities.
- Users find SailPoint to be **expensive** due to time-consuming reviews and costly assistance for customization.
- Users find the **difficult learning** curve frustrating, especially without a programming background or sufficient formal training.

#### What Are Recent G2 Reviews of SailPoint?

**["Centralized Identity Governance with Powerful Automation"](https://www.g2.com/survey_responses/sailpoint-review-13122387)**

**Rating:** 4.5/5.0 stars

_— Soufiane C._

[Read full review](https://www.g2.com/survey_responses/sailpoint-review-13122387)

**["Identity Governance and Compliance Visibility for Complex Enterprises"](https://www.g2.com/survey_responses/sailpoint-review-13000024)**

**Rating:** 4.0/5.0 stars

_— Chardae A._

[Read full review](https://www.g2.com/survey_responses/sailpoint-review-13000024)

#### What Are G2 Users Discussing About SailPoint?

- [What is SailPoint used for?](https://www.g2.com/discussions/sailpoint-what-is-sailpoint-used-for) - 2 comments
- [What database does SailPoint use?](https://www.g2.com/discussions/what-database-does-sailpoint-use) - 1 comment
- [How much does SailPoint cost?](https://www.g2.com/discussions/how-much-does-sailpoint-cost)
- [What is SailPoint used for?](https://www.g2.com/discussions/what-is-sailpoint-used-for) - 2 comments
- [What is SailPoint software?](https://www.g2.com/discussions/what-is-sailpoint-software)

### [Microsoft Defender for Identity](https://www.g2.com/products/microsoft-defender-for-identity/reviews)

Microsoft Defender for Identity enables you to integrate Microsoft Defender for Identity with Defender for Endpoint, for an even more complete threat protection solution. While Defender for Identity monitors the traffic on your domain controllers, Defender for Endpoint monitors your endpoints, together providing a single interface from which you can protect your environment.

**Average Rating:** 4.3/5.0

**Total Reviews:** 93

#### How Do G2 Users Rate Microsoft Defender for Identity?

- **Quality of Support:** 7.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.1/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Microsoft Defender for Identity?

- **Seller:** [Microsoft](https://www.g2.com/sellers/microsoft)
- **Year Founded:** 1975
- **HQ Location:** Redmond, Washington
- **Twitter:** @microsoft  
13,091,739 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9458f51bd6ded48ad432a804f19ad736469f007787569b63827154231c315630&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft%2F&secure%5Burl_type%5D=linkedin_company_website)  
231,632 employees on LinkedIn®
- **Ownership:** MSFT

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 39% Large, 32% Small

#### What Are Recent G2 Reviews of Microsoft Defender for Identity?

**["Powerful Security with Seamless Integration"](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-8093624)**

**Rating:** 4.5/5.0 stars

_— Devender K._

[Read full review](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-8093624)

**["Effective Identity Security"](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-12702851)**

**Rating:** 5.0/5.0 stars

_— Rawad A._

[Read full review](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-12702851)

### [Semperis Directory Services Protector](https://www.g2.com/products/semperis-directory-services-protector/reviews)

Semperis Directory Services Protector puts Active Directory security and identity threat detection and response on autopilot with continuous AD threat monitoring, real-time alerts, and autonomous remediation capabilities. DSP helps you respond more effectively to Active Directory security incidents and everyday operational mistakes. It provides a complete picture of risk exposure in hybrid environments and provides backup and recovery of critical Entra ID resources

**Average Rating:** 4.8/5.0

**Total Reviews:** 25

#### How Do G2 Users Rate Semperis Directory Services Protector?

- **Quality of Support:** 9.6/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.1/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Semperis Directory Services Protector?

- **Seller:** [Semperis](https://www.g2.com/sellers/semperis)
- **Company Website:** www.semperis.com
- **Year Founded:** 2015
- **HQ Location:** Hoboken, New Jersey
- **Twitter:** @SemperisTech  
10,074 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0018c787ec107d113f80de57fe0ac60f83b23d2d2fb56018ab80191a760d408c&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsemperis%2F&secure%5Burl_type%5D=linkedin_company_website)  
674 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 80% Large, 20% Medium

#### What Do G2 Reviewers Say About Semperis Directory Services Protector?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Semperis Directory Services Protector, making Active Directory management straightforward and efficient.
- Users value the **robust security features** of Semperis DSP, effectively safeguarding their identity infrastructure against threats.
- Users value the **live security indicators and auto undo functionality** of Semperis DSP for effective identity protection.
- Users value the **prompt and helpful customer support** of Semperis Directory Services Protector, enhancing their overall experience.
- Users praise the **automation capabilities** of Semperis DSP, appreciating its seamless integration and proactive security features.

##### Cons

- Users experience **communication issues** with Semperis's support, though timely assistance helps resolve database error messages.
- Users experience **data inconsistency issues** with Semperis DSP, but support resolves problems promptly.
- Users feel there is a **lack of information** in help resources, particularly regarding AD report data limitations.
- Users find the **limited reporting** features clunky, suggesting improvements for better data communication and support.
- Users feel that **customer support is lacking** and communication needs significant improvement for effective assistance.

#### What Are Recent G2 Reviews of Semperis Directory Services Protector?

**["Looking for a great Tool to Monitor AD? It is right Here!"](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342674)**

**Rating:** 5.0/5.0 stars

_— Benjamin E._

[Read full review](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342674)

**["Granular Instant Rollback & Continuous AD Vulnerability Visibility"](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342665)**

**Rating:** 5.0/5.0 stars

_— Jose Miguel C._

[Read full review](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342665)

### [Microsoft Entra Identity Protection](https://www.g2.com/products/microsoft-entra-identity-protection/reviews)

Identity Protection is a tool that allows organizations to accomplish three key tasks: Automate the detection and remediation of identity-based risks. Investigate risks using data in the portal. Export risk detection data to your SIEM.

**Average Rating:** 4.5/5.0

**Total Reviews:** 41

#### How Do G2 Users Rate Microsoft Entra Identity Protection?

- **Quality of Support:** 9.0/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.0/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Microsoft Entra Identity Protection?

- **Seller:** [Microsoft](https://www.g2.com/sellers/microsoft)
- **Year Founded:** 1975
- **HQ Location:** Redmond, Washington
- **Twitter:** @microsoft  
13,091,739 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9458f51bd6ded48ad432a804f19ad736469f007787569b63827154231c315630&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft%2F&secure%5Burl_type%5D=linkedin_company_website)  
231,632 employees on LinkedIn®
- **Ownership:** MSFT

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 51% Large, 27% Medium

#### What Are Recent G2 Reviews of Microsoft Entra Identity Protection?

**["Balancing Security and Complexity"](https://www.g2.com/survey_responses/microsoft-entra-identity-protection-review-7230531)**

**Rating:** 5.0/5.0 stars

_— suaib n._

[Read full review](https://www.g2.com/survey_responses/microsoft-entra-identity-protection-review-7230531)

**["Review of Microsoft Entra Identity Protection"](https://www.g2.com/survey_responses/microsoft-entra-identity-protection-review-8527430)**

**Rating:** 4.0/5.0 stars

_— Paarth S._

[Read full review](https://www.g2.com/survey_responses/microsoft-entra-identity-protection-review-8527430)

Spotlight Categories

[Product Information Management (PIM) Systems](https://www.g2.com/categories/product-information-management-pim)

[Event Registration and Ticketing Software](https://www.g2.com/categories/event-registration-ticketing)

[Bot Platforms Software](https://www.g2.com/categories/bot-platforms)

[Media Monitoring Software](https://www.g2.com/categories/media-monitoring)

[Professional Services Automation Software](https://www.g2.com/categories/professional-services-automation)

Similar Categories

- [Insider Threat Management (ITM)](/categories/insider-threat-management-itm)

- [User and Entity Behavior Analytics (UEBA)](/categories/user-and-entity-behavior-analytics-ueba)

[Browse Identity Threat Detection and Response (ITDR) Themes](/categories/identity-threat-detection-and-response-itdr/themes)