CISO Tribune

Vendor comparison · 2 companies

Reflex Security vs Semperis

Reflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit. Semperis is an identity-driven cyber resilience and crisis management company that protects critical identity systems from agentic and conventional cyberattacks. CISO Tribune files both under Incident response and forensics. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Reflex Security
  • Semperis
Reflex Security vs Semperis: Products, Customers and Funding Compared
Reflex SecurityReflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit.reflexsecurity.ioSemperisSemperis is an identity-driven cyber resilience and crisis management company that protects critical identity systems from agentic and conventional cyberattacks.semperis.com
What it sells
  • Reflex[1][2][3]A crisis simulation platform that builds a live crisis from a team's real environment and adapts to each decision the team makes.
  • Directory Services Protector[4][6]Hybrid identity threat prevention, detection, and response.
  • Active Directory Forest Recovery[1]A backup and recovery solution purpose-built for recovering Active Directory from cyber disasters.
  • Disaster Recovery for Entra Tenant[1]Backup and recovery for Entra ID.
  • Delegation Manager for AD[4]Secure AD permissions delegation.
  • Migrator for AD[4]Security-first AD migration and consolidation.
  • Ready1[1][4]An enterprise cyber crisis readiness and crisis management platform.
  • Purple Knight[1][4]A free community tool for identity security assessment.
  • Identity Forensics & Incident Response[1]Identity forensics after an attack to assess damage, eradicate threat actors, and recover to a trusted environment.
Categories
Headquarters
Not stated on its pagesHoboken, United States[2][4]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • May 7, 2026Semperis announced the appointment of John Podboy as its Chief Information Security Officer.[9]
  • February 4, 2026Semperis announced the acquisition of MightyID, an identity resilience specialist for Okta and Ping cloud identity providers.[10]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetNot written yet
Last verified
November 5, 2026November 5, 2026

Where they overlap

  • Reflex Security and Semperis are both filed under Incident response and forensics.

Where they differ, field by field

  • Reflex Security's primary category is Breach simulation and automated pen-testing; Semperis's is Identity threat detection and response.
  • Reflex Security is also filed under Security awareness training. Semperis is also filed under Directory backup and recovery.
  • Reflex Security lists Reflex. Semperis lists Directory Services Protector, Active Directory Forest Recovery, Disaster Recovery for Entra Tenant, Delegation Manager for AD, Migrator for AD and 3 more.
  • Semperis is headquartered in Hoboken, United States.

What it sells: Reflex Security

What Reflex does[1][2][3]
Reflex builds a tailored scenario in minutes, catered to the real environment, tools and threats of the team. The team works a live breach while an adaptive adversary and pressured stakeholders push back in real time. AI agents play every side of the breach and react to each call the team makes.

What it sells: Semperis

What Directory Services Protector does[4][6]
Semperis delivers identity threat detection and response that combines tamperproof tracking of every directory change with automatic rollback of malicious activity. DSP includes hundreds of built-in, constantly updated security indicators to monitor hybrid AD and Entra ID environments for legacy vulnerabilities and emerging threats. DSP includes automated rollback to undo unwanted or malicious changes in both AD and Entra ID.
What Purple Knight does[1][4]
Purple Knight is one of the free community tools from Semperis. Purple Knight is used for identity security assessment.
What Identity Forensics & Incident Response does[1]
Semperis Identity Forensics & Incident Response (IFIR) addresses the entire lifecycle of an identity-layer attack. Semperis states that its specialized team provides rapid containment, forensic investigation, and secure recovery.

Questions about Reflex Security and Semperis

What do Reflex Security and Semperis sell?
Reflex Security sells Reflex. Semperis sells Directory Services Protector, Active Directory Forest Recovery, Disaster Recovery for Entra Tenant, Delegation Manager for AD, Migrator for AD and 3 more.
Are Reflex Security and Semperis in the same category?
They share Incident response and forensics. Reflex Security's primary category is Breach simulation and automated pen-testing and Semperis's is Identity threat detection and response.
Where are Reflex Security and Semperis headquartered?
Semperis is headquartered in Hoboken, United States.
What have Reflex Security and Semperis announced recently?
May 7, 2026: Semperis announced the appointment of John Podboy as its Chief Information Security Officer.

About Reflex Security

Reflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit. Reflex Security says a team's response is the only part of a breach that the team owns. Reflex Security says incident training usually means a traditional tabletop exercise made up of slides, a facilitator and a room.[1][2][3]

Reflex lets a team describe the incident, or start from what Reflex already knows about the team. Reflex builds a tailored scenario in minutes, catered to the real environment, tools and threats of the team. Reflex users pick a threat, and Reflex handles the prep and the paperwork.[3]

In a Reflex exercise, the team works a live breach while an adaptive adversary and pressured stakeholders push back in real time. Reflex tests breach coordination across technical, legal and executive teams.[3]

Reflex produces an after-action report the moment the team finishes the exercise.[2][3]

Reflex Security on the record

Sources

Reflex Security full record

  1. [1]reflexsecurity.ioReflex Security · reflexsecurity.io · undated page, accessed November 5, 2026 · Tier A
  2. [2]How ai powered tabletop exercises improve incident response readinessReflex Security · reflexsecurity.io · undated page, accessed November 5, 2026 · Tier A
  3. [3]Reflex SecurityReflex Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Reflex Security Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Semperis full record

  1. [1]semperis.comSemperis · semperis.com · undated page, accessed November 5, 2026 · Tier A
  2. [2]Press releasesSemperis · semperis.com · published November 5, 2026 · Tier A
  3. [3]Semperis - Active Directory - AD Security and Recovery SolutionsSemperis · undated page, accessed November 10, 2026 · Tier A
  4. [4]Official Information About Semperis for AISemperis · undated page, accessed November 10, 2026 · Tier A
  5. [5]Services Identity Security and Recovery Incident Response - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  6. [6]Directory Services Protector - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  7. [7]AD Security Glossary - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  8. [8]About us - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  9. [9]Semperis Names John Podboy Chief Information Security Officer - SemperisSemperis · published May 7, 2026 · Tier A
  10. [10]Semperis Acquires Identity Resilience Provider MightyID to Extend Identity Protection for Okta and Ping Multi-Cloud Environments - SemperisSemperis · published February 4, 2026 · Tier A

Spot a factual error? Request a correction.