Semperis CISO: John Podboy

What the company sells

Semperis is an identity-driven cyber resilience and crisis management company that protects critical identity systems from agentic and conventional cyberattacks. Semperis is a private company and B2B cybersecurity provider specializing in Identity Threat Detection and Response (ITDR), cyber crisis management, and hybrid identity protection solutions and services. Semperis focuses on comprehensive identity resilience across the full attack lifecycle of prevention, detection, response, and recovery. Semperis states that its proprietary AI-powered technology is purpose-built for securing hybrid identity environments, including Active Directory, Entra ID, and Okta. Semperis helps organizations prevent, detect, respond to, and recover from agentic and conventional identity attacks.

Semperis states that every user, workload, and agent depends on identity providers like Active Directory, Entra ID, and Okta. Semperis states that Active Directory remains the identity source of truth in most organizations. Semperis states that attackers commonly go after highly privileged identities and embed backdoors to maintain access. Semperis states that misconfigurations and unpatched vulnerabilities pile up over years, while attackers pivot between on-prem and cloud identity systems in search of elevated privileges. Semperis states that recovery historically required a full AD rebuild, a costly, months-long effort with serious operational impact.

Directory Services Protector (DSP) is a Semperis product for hybrid identity threat prevention, detection, and response. Semperis delivers identity threat detection and response that combines tamperproof tracking of every directory change with automatic rollback of malicious activity. Directory Services Protector provides a single view of security vulnerabilities across the hybrid AD and Entra ID environment, including non-human identities, or service accounts. DSP includes hundreds of built-in, constantly updated security indicators to monitor hybrid AD and Entra ID environments for legacy vulnerabilities and emerging threats. DSP includes automated rollback to undo unwanted or malicious changes in both AD and Entra ID. DSP can identify service accounts, build an inventory, and monitor them with specialized indicators developed by the Semperis threat research team. Semperis offers attack detection powered by AI models developed by identity security experts to detect password spray, credential stuffing, other brute force attacks, and risky anomalies. Semperis offers out-of-the-box integrations for Splunk and Microsoft Sentinel that forward AD and Entra ID change data, DSP security indicator results, and notification rule events.

Semperis describes Active Directory Forest Recovery (ADFR) as an automated AD disaster recovery approach. Semperis ADFR is a backup and recovery solution purpose-built for recovering Active Directory from cyber disasters. Disaster Recovery for Entra Tenant (DRET) provides backup and recovery for Entra ID. Delegation Manager for AD is a Semperis offering for secure AD permissions delegation. Migrator for AD is a Semperis offering for security-first AD migration and consolidation. Ready1 is an enterprise cyber crisis readiness and crisis management platform.

Semperis Identity Forensics & Incident Response (IFIR) addresses the entire lifecycle of an identity-layer attack. Semperis states that its specialized team provides rapid containment, forensic investigation, and secure recovery. Semperis offers identity forensics following an attack to assess the damage, eradicate threat actors, and recover to a trusted environment. Semperis offers a service that gives a clear picture of AD security posture and a roadmap to address exposures at the strategic, operational, and tactical levels. Semperis offers a service to align recovery time objective (RTO) and recovery point objective (RPO) metrics and identify implicit dependencies that might hinder recovery plan execution. Semperis offers a review of identity and access management configuration from Entra ID security experts. Semperis offers expert guidance and purpose-built technology for AD migration and consolidation.

Semperis offers free community tools: Purple Knight for identity security assessment and Forest Druid for Tier 0 attack path discovery. Semperis publishes original research into emerging threats, threat mitigation, and industry trends.

Semperis was founded by Mickey Bresman (CEO), Guy Teverovsky (CTO), and Matan Liberman (EVP Business Development). Semperis has its headquarters in Hoboken, New Jersey, and operates internationally. Semperis raised a $40M Series B led by Insight Partners, bringing total funding at that point to $54M. Semperis raised over $200M in a Series C led by KKR, with Ten Eleven Ventures, Paladin Capital Group, Atrium Health Strategic Fund, Tech Pioneers Fund, and Insight Partners. Semperis secured $125M in growth financing to accelerate R&D and global expansion and bolster executive leadership. General David Petraeus (U.S. Army, Ret.), a Partner at KKR and former Director of the CIA, joined Semperis as a strategic advisor to help bolster identity threat detection and response in the public sector. Prime Healthcare needed to modernize and accelerate AD forest recovery after an internal change caused outages across multiple domain controllers. Temple Health, a healthcare system, sought an ITDR approach that met healthcare security and compliance requirements while simplifying recovery. Foulston Siefkin LLP moved to a hybrid AD and Entra ID environment and reviewed business continuity.^{[1][3][5][6][7][8]}

Categories

• Identity threat detection and response (primary category)
• Directory backup and recovery
• Incident response and forensics
• Compare Semperis with companies in the same categoryside by side

Headquarters

Hoboken, United States^[2][4]

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

John Podboy, Chief Information Security Officer (appointment announced in the week of May 4, 2026)

Website

semperis.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Directory Services Protector^[4][6]

  Hybrid identity threat prevention, detection, and response.

  Semperis delivers identity threat detection and response that combines tamperproof tracking of every directory change with automatic rollback of malicious activity. DSP includes hundreds of built-in, constantly updated security indicators to monitor hybrid AD and Entra ID environments for legacy vulnerabilities and emerging threats. DSP includes automated rollback to undo unwanted or malicious changes in both AD and Entra ID.

• Active Directory Forest Recovery^[1]

  A backup and recovery solution purpose-built for recovering Active Directory from cyber disasters.

• Disaster Recovery for Entra Tenant^[1]

  Backup and recovery for Entra ID.

• Delegation Manager for AD^[4]

  Secure AD permissions delegation.

• Migrator for AD^[4]

  Security-first AD migration and consolidation.

• Ready1^[1][4]

  An enterprise cyber crisis readiness and crisis management platform.

• Purple Knight^[1][4]

  A free community tool for identity security assessment.

  Purple Knight is one of the free community tools from Semperis. Purple Knight is used for identity security assessment.

• Identity Forensics & Incident Response^[1]

  Identity forensics after an attack to assess damage, eradicate threat actors, and recover to a trusted environment.

  Semperis Identity Forensics & Incident Response (IFIR) addresses the entire lifecycle of an identity-layer attack. Semperis states that its specialized team provides rapid containment, forensic investigation, and secure recovery.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Semperis's categories, then alphabetical. A list from the record, never a ranking.

• On identity threat detection and response, Semperis competes with Permiso, Silverfort, Cayosoft, Abnormal AI, Acalvio, AuthMind, Beyond Identity, Blackpoint Cyber, CrowdStrike, CyberKord and 16 more.

• On directory backup and recovery, Semperis competes with Cayosoft, Commvault and Rubrik.

• On incident response and forensics, Semperis competes with BreachRx, CYPFER, Kroll, Surefire Cyber, Sygnia, Accenture, Alphabet, Arctic Wolf, BlackBerry, BlackCloak and 27 more.

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• May 7, 2026

  Semperis announced the appointment of John Podboy as its Chief Information Security Officer. Semperis^[9]

• February 4, 2026

  Semperis announced the acquisition of MightyID, an identity resilience specialist for Okta and Ping cloud identity providers. Semperis^[10]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]semperis.comSemperis · semperis.com · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
2. [2]Press releasesSemperis · semperis.com · published November 5, 2026 · Tier A: the company, a regulator or a filing
3. [3]Semperis - Active Directory - AD Security and Recovery SolutionsSemperis · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
4. [4]Official Information About Semperis for AISemperis · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]Services Identity Security and Recovery Incident Response - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Directory Services Protector - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]AD Security Glossary - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]About us - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Semperis Names John Podboy Chief Information Security Officer - SemperisSemperis · published May 7, 2026 · Tier A: the company, a regulator or a filing
10. [10]Semperis Acquires Identity Resilience Provider MightyID to Extend Identity Protection for Okta and Ping Multi-Cloud Environments - SemperisSemperis · published February 4, 2026 · Tier A: the company, a regulator or a filing

Last verified November 5, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 5, 2026, expanded November 10, 2026 from the references above.

Work for Semperis? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.