Advisor
IAM
Domains Identity & Access Management Identity Threat Detection & Response (ITDR)
Identity Threat Detection & Response (ITDR)
Identity Threat Detection & Response (ITDR) refers to solutions designed to identify, investigate, and mitigate threats that specifically target digital identities and identity infrastructure within an organization.
Identity Threat Detection & Response (ITDR) refers to solutions designed to identify, investigate, and mitigate threats that specifically target digital identities and identity infrastructure within an organization. These solutions focus on detecting malicious activities such as credential misuse, privilege escalation, lateral movement, and anomalous access patterns that may indicate identity-based attacks. Core capabilities of ITDR include continuous monitoring of identity systems, behavioral analytics to spot deviations from normal user activity, automated alerting, and response mechanisms to contain or remediate threats. ITDR tools often integrate with identity and access management (IAM) platforms, directory services, and security information and event management (SIEM) systems to provide comprehensive visibility and context for identity-related incidents. Security operations teams, identity and access management professionals, and incident responders typically use ITDR solutions to protect against threats that exploit user accounts, service accounts, and privileged credentials. Unlike traditional IAM, which focuses on access control and authentication, ITDR emphasizes real-time detection and response to active threats targeting identity systems, complementing but not replacing endpoint or network threat detection. Cyberin provides a neutral platform for organizations to explore and compare Identity Threat Detection & Response solutions based on their technical and operational requirements.
24
Vendors
31
Products
206
Datapoints
Vendor Landscape how the vendors in this category relate
neutral · data-driven
Arrange bySimilarityThis categoryIAM DomainThe Cyberin Framework (TCF)SeniorityEmployee countStock price
Related Wiki Articles
Some products are hidden. Sign up for free to see them all.
Filters
Notable Integrations, Detection Methods, Risk Analytics, AD Coverage +6 more Show ↓
Vendor
All Semperis SentinelOne Netwrix Microsoft Silverfort Quest Tenable CrowdStrike + 16 more
Notable Integrations
All ServiceNow Splunk SIEM Microsoft Sentinel Microsoft Defender CrowdStrike Okta Duo
Detection Methods
All Anomaly detection Behavioral Analytics Rule-Based Policies Protocol analysis UEBA Bot Detection Attack Path Analysis Risk Correlation
Risk Analytics
All Risk Scoring User Risk Scoring Exposure Graph Anomaly Detection Peer Grouping Baseline Deviations Threat Correlation Attack Path Insights
AD Coverage
All Kerberoasting Detection DCSync Detection Brute Force Detection Password Spray Detection Privilege Changes Lateral Movement Detection Not Applicable Hybrid Identity Signals
Identity Sources
All Active Directory Microsoft Entra ID Okta Windows Endpoints VPN File Servers Windows Servers PAM Telemetry
Response actions
All Alert Automated Remediation Quarantine Block Authentication Disable Account Isolate Host MFA Step Up Reset Password
Privileged Focus
All Service Account Protection Lateral Movement Privileged Access Monitoring Privilege Misuse Detection Insider Threats Privilege Escalation Detection Admin Activity Tracking Domain Admin Monitoring
Deployment Model
All SaaS On-Premises Hybrid Agentless Self-Managed Cloud Managed
Cloud IdP Coverage
All Microsoft Entra ID Okta Not Applicable PingOne PingIdentity
Deception Features
All Honeytokens Decoy Credentials Decoy Accounts AD Decoys Credential Lures Decoy Shares Decoy Files
24 products
Sort:
Show:
Elastic Security
Elastic
Anomaly detectionActive DirectoryBrute Force Detection
LogRhythm UEBA
Anomaly detectionActive DirectoryAccount Takeover Detection
Quest On Demand Audit
Quest
Behavioral AnalyticsAzure AD LogsHybrid Identity Signals
Exabeam Identity Threat Detection
Exabeam
Anomaly detectionActive DirectoryAccount Takeover Detection
Okta Identity Threat Protection
Okta
Behavioral AnalyticsDevice SignalsNot Applicable
BeyondTrust Identity Security Insights
BeyondTrust
Behavioral AnalyticsActive DirectoryLateral Movement Detection
Authomize Platform
Authomize
Authorization GraphMicrosoft Entra IDNot Applicable
Delinea Privileged Behavior Analytics
Delinea
Anomaly detectionActive DirectoryBrute Force Detection
Cynet Identity Protection
Cynet
Attack Path AnalysisActive DirectoryBrute Force Detection
Quest Change Auditor
Quest
Behavioral AnalyticsActive DirectoryAD Schema Changes
ManageEngine ADAudit Plus
ManageEngine
Anomaly detectionActive DirectoryAccount Lockouts
Heimdal Identity Threat Detection And Response
Heimdal
Behavioral AnalyticsActive DirectoryBrute Force Detection
Netwrix StealthDEFEND
Netwrix
Behavioral AnalyticsActive DirectoryBrute Force Detection
Netwrix Auditor
Netwrix
Access MonitoringActive DirectoryAccount Lockouts
Silverfort Unified Identity Protection
Silverfort
Behavioral AnalyticsActive DirectoryLateral Movement Detection
Silverfort Service Accounts Protection
Silverfort
Anomaly detectionActive DirectoryNTLM Monitoring
Semperis Directory Services Protector
Semperis
Attack Path AnalysisActive DirectoryDCShadow Detection
Semperis Forest Druid
Semperis
Attack Path AnalysisActive DirectoryDelegation Mapping
Proofpoint Identity Threat Defense
Proofpoint
Attack Path AnalysisActive DirectoryDCSync Detection
Tenable Identity Exposure
Tenable
Attack Path AnalysisActive DirectoryDCSync Detection
SentinelOne Singularity Identity
SentinelOne
Attack Path AnalysisActive DirectoryDCShadow Detection
SentinelOne Singularity Hologram
SentinelOne
Credential Theft DetectionActive DirectoryDCSync Detection
Cisco Identity Intelligence
Cisco
Behavioral AnalyticsActive DirectoryKerberoasting Detection
Microsoft Entra ID Protection
Microsoft
Rule-Based PoliciesConditional AccessADFS Signals
Also in Identity & Access Management
Filter by Vendor
Semperis
2 products
SentinelOne
2 products
Netwrix
2 products
Microsoft
2 products
Silverfort
2 products
Quest
2 products
Tenable
1 product
CrowdStrike
1 product
Proofpoint
1 product
Rezonate
1 product
Cisco
1 product
ManageEngine
1 product
Authomize
1 product
OpenText
1 product
Securonix
1 product
Ping Identity
1 product
Cynet
1 product
Okta
1 product
Exabeam
1 product
Heimdal
1 product
Darktrace
1 product
Delinea
1 product
Elastic
1 product
BeyondTrust
1 product
0 selected
Compare
Looking for the best Identity Threat Detection & Response (ITDR) tool? Our Advisor can help you compare.
Ask the Advisor
CYBERIN ADVISOR