CISO Tribune

Vendor comparison · 2 companies

Semperis vs ServiceNow

Semperis is an identity-driven cyber resilience and crisis management company that protects critical identity systems from agentic and conventional cyberattacks. ServiceNow sells Security Operations, a product that unifies security, IT, and risk into a single system of action. CISO Tribune files both under Incident response and forensics. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Semperis
  • ServiceNow
Semperis vs ServiceNow: Products, Customers and Funding Compared
SemperisSemperis is an identity-driven cyber resilience and crisis management company that protects critical identity systems from agentic and conventional cyberattacks.semperis.comServiceNowServiceNow sells Security Operations, a product that unifies security, IT, and risk into a single system of action.servicenow.com
What it sells
  • Directory Services Protector[4][6]Hybrid identity threat prevention, detection, and response.
  • Active Directory Forest Recovery[1]A backup and recovery solution purpose-built for recovering Active Directory from cyber disasters.
  • Disaster Recovery for Entra Tenant[1]Backup and recovery for Entra ID.
  • Delegation Manager for AD[4]Secure AD permissions delegation.
  • Migrator for AD[4]Security-first AD migration and consolidation.
  • Ready1[1][4]An enterprise cyber crisis readiness and crisis management platform.
  • Purple Knight[1][4]A free community tool for identity security assessment.
  • Identity Forensics & Incident Response[1]Identity forensics after an attack to assess damage, eradicate threat actors, and recover to a trusted environment.
  • Security Operations[1][2][3]ServiceNow Security Operations unifies security, IT, and risk into a single system of action.
  • Security Incident Response[1][3]Security Incident Response uses AI-assisted playbooks that help contain threats.
  • Unified Security Exposure Management[1][2][3]Unified Security Exposure Management comes as the next evolution of Vulnerability Response.
  • Third-party Risk Management[4]Third-party Risk Management centralizes vendor risk in one system.
  • Identity and Access Security[5]Identity and Access Security addresses risk across human, non-human, and AI agent identities.
  • Super Intelligence Control Tower[6]Super Intelligence Control Tower is a central hub to discover, secure, govern, observe, and measure any AI across an enterprise.
Categories
Headquarters
Hoboken, United States[2][4]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • May 7, 2026Semperis announced the appointment of John Podboy as its Chief Information Security Officer.[9]
  • February 4, 2026Semperis announced the acquisition of MightyID, an identity resilience specialist for Okta and Ping cloud identity providers.[10]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[9]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, ServiceNow sells mainly to organizations that run business functions across IT, HR, customer service, finance and procurement, in all industries and business types. Security Incident Response includes handing security incidents off to new analysts, and a view of security and risk metrics that executives can use. ServiceNow describes its platform as the cloud-based foundation for all of its products.
Last verified
November 5, 2026November 5, 2026

Where they overlap

  • Semperis and ServiceNow are both filed under Incident response and forensics.

Where they differ, field by field

  • Semperis's primary category is Identity threat detection and response; ServiceNow's is GRC and integrated risk platforms.
  • Semperis is also filed under Directory backup and recovery. ServiceNow is also filed under Vulnerability management.
  • Semperis lists Directory Services Protector, Active Directory Forest Recovery, Disaster Recovery for Entra Tenant, Delegation Manager for AD, Migrator for AD and 3 more. ServiceNow lists Security Operations, Security Incident Response, Unified Security Exposure Management, Third-party Risk Management, Identity and Access Security and 1 more.
  • Semperis is headquartered in Hoboken, United States.

What it sells: Semperis

What Directory Services Protector does[4][6]
Semperis delivers identity threat detection and response that combines tamperproof tracking of every directory change with automatic rollback of malicious activity. DSP includes hundreds of built-in, constantly updated security indicators to monitor hybrid AD and Entra ID environments for legacy vulnerabilities and emerging threats. DSP includes automated rollback to undo unwanted or malicious changes in both AD and Entra ID.
What Purple Knight does[1][4]
Purple Knight is one of the free community tools from Semperis. Purple Knight is used for identity security assessment.
What Identity Forensics & Incident Response does[1]
Semperis Identity Forensics & Incident Response (IFIR) addresses the entire lifecycle of an identity-layer attack. Semperis states that its specialized team provides rapid containment, forensic investigation, and secure recovery.

What it sells: ServiceNow

What Security Operations does[1][2][3]
Security Operations consolidates signals from any SIEM, EDR, TIP, scanner, or cloud and maps them to the CMDB for business context. Security Operations applies threat intel and AI to prioritize and act.
What Security Incident Response does[1][3]
Security Incident Response triggers automated containment and remediation tasks across security and IT tools. Security Incident Response coordinates major security incidents in a dedicated workspace with task tracking, integrated collaboration, and executive status reporting.
What Unified Security Exposure Management does[1][2][3]
Unified Security Exposure Management consolidates findings from scanners, cloud, containers, and code into one workflow. Unified Security Exposure Management maps issues to the CMDB for context, prioritizes risks using threat intelligence and AI scoring, and automates remediation.
What Third-party Risk Management does[4]
Third-party Risk Management automates assessments, monitors vendor changes, and routes remediation tasks to the right teams to manage risk consistently across suppliers. Third-party Risk Management centralizes issue tracking across all vendors and automates escalation workflows.
What Identity and Access Security does[5]
Identity and Access Security examines users, groups, roles, and policies to uncover the actual permissions each identity has for specific resources across cloud, SaaS, and on-premises systems. Identity and Access Security discovers non-human identities, maps permissions and blast radius, assigns owners, and reduces sprawl.
What Super Intelligence Control Tower does[6]
Super Intelligence Control Tower auto-discovers agents, models, copilots, MCP servers, and datasets across an enterprise and displays them in a unified inventory tied to the CMDB. Super Intelligence Control Tower tracks AI identity and access, blocks prompt injections, and includes a kill switch to stop an AI agent.

Questions about Semperis and ServiceNow

What do Semperis and ServiceNow sell?
Semperis sells Directory Services Protector, Active Directory Forest Recovery, Disaster Recovery for Entra Tenant, Delegation Manager for AD, Migrator for AD and 3 more. ServiceNow sells Security Operations, Security Incident Response, Unified Security Exposure Management, Third-party Risk Management, Identity and Access Security and 1 more.
Are Semperis and ServiceNow in the same category?
They share Incident response and forensics. Semperis's primary category is Identity threat detection and response and ServiceNow's is GRC and integrated risk platforms.
Where are Semperis and ServiceNow headquartered?
Semperis is headquartered in Hoboken, United States.
Who are Semperis and ServiceNow sold to?
From its own pages, ServiceNow sells mainly to organizations that run business functions across IT, HR, customer service, finance and procurement, in all industries and business types.
What have Semperis and ServiceNow announced recently?
May 7, 2026: Semperis announced the appointment of John Podboy as its Chief Information Security Officer.

About Semperis

Semperis is an identity-driven cyber resilience and crisis management company that protects critical identity systems from agentic and conventional cyberattacks. Semperis is a private company and B2B cybersecurity provider specializing in Identity Threat Detection and Response (ITDR), cyber crisis management, and hybrid identity protection solutions and services. Semperis focuses on comprehensive identity resilience across the full attack lifecycle of prevention, detection, response, and recovery. Semperis states that its proprietary AI-powered technology is purpose-built for securing hybrid identity environments, including Active Directory, Entra ID, and Okta. Semperis helps organizations prevent, detect, respond to, and recover from agentic and conventional identity attacks.[1][3]

Semperis states that every user, workload, and agent depends on identity providers like Active Directory, Entra ID, and Okta. Semperis states that Active Directory remains the identity source of truth in most organizations. Semperis states that attackers commonly go after highly privileged identities and embed backdoors to maintain access. Semperis states that misconfigurations and unpatched vulnerabilities pile up over years, while attackers pivot between on-prem and cloud identity systems in search of elevated privileges. Semperis states that recovery historically required a full AD rebuild, a costly, months-long effort with serious operational impact.[3][5][6]

Directory Services Protector (DSP) is a Semperis product for hybrid identity threat prevention, detection, and response. Semperis delivers identity threat detection and response that combines tamperproof tracking of every directory change with automatic rollback of malicious activity. Directory Services Protector provides a single view of security vulnerabilities across the hybrid AD and Entra ID environment, including non-human identities, or service accounts. DSP includes hundreds of built-in, constantly updated security indicators to monitor hybrid AD and Entra ID environments for legacy vulnerabilities and emerging threats. DSP includes automated rollback to undo unwanted or malicious changes in both AD and Entra ID. DSP can identify service accounts, build an inventory, and monitor them with specialized indicators developed by the Semperis threat research team. Semperis offers attack detection powered by AI models developed by identity security experts to detect password spray, credential stuffing, other brute force attacks, and risky anomalies. Semperis offers out-of-the-box integrations for Splunk and Microsoft Sentinel that forward AD and Entra ID change data, DSP security indicator results, and notification rule events.[5][6]

Semperis describes Active Directory Forest Recovery (ADFR) as an automated AD disaster recovery approach. Semperis ADFR is a backup and recovery solution purpose-built for recovering Active Directory from cyber disasters. Disaster Recovery for Entra Tenant (DRET) provides backup and recovery for Entra ID. Delegation Manager for AD is a Semperis offering for secure AD permissions delegation. Migrator for AD is a Semperis offering for security-first AD migration and consolidation. Ready1 is an enterprise cyber crisis readiness and crisis management platform.[1][7]

Semperis Identity Forensics & Incident Response (IFIR) addresses the entire lifecycle of an identity-layer attack. Semperis states that its specialized team provides rapid containment, forensic investigation, and secure recovery. Semperis offers identity forensics following an attack to assess the damage, eradicate threat actors, and recover to a trusted environment. Semperis offers a service that gives a clear picture of AD security posture and a roadmap to address exposures at the strategic, operational, and tactical levels. Semperis offers a service to align recovery time objective (RTO) and recovery point objective (RPO) metrics and identify implicit dependencies that might hinder recovery plan execution. Semperis offers a review of identity and access management configuration from Entra ID security experts. Semperis offers expert guidance and purpose-built technology for AD migration and consolidation.[1][5]

Semperis offers free community tools: Purple Knight for identity security assessment and Forest Druid for Tier 0 attack path discovery. Semperis publishes original research into emerging threats, threat mitigation, and industry trends.[1]

Semperis was founded by Mickey Bresman (CEO), Guy Teverovsky (CTO), and Matan Liberman (EVP Business Development). Semperis has its headquarters in Hoboken, New Jersey, and operates internationally. Semperis raised a $40M Series B led by Insight Partners, bringing total funding at that point to $54M. Semperis raised over $200M in a Series C led by KKR, with Ten Eleven Ventures, Paladin Capital Group, Atrium Health Strategic Fund, Tech Pioneers Fund, and Insight Partners. Semperis secured $125M in growth financing to accelerate R&D and global expansion and bolster executive leadership. General David Petraeus (U.S. Army, Ret.), a Partner at KKR and former Director of the CIA, joined Semperis as a strategic advisor to help bolster identity threat detection and response in the public sector. Prime Healthcare needed to modernize and accelerate AD forest recovery after an internal change caused outages across multiple domain controllers. Temple Health, a healthcare system, sought an ITDR approach that met healthcare security and compliance requirements while simplifying recovery. Foulston Siefkin LLP moved to a hybrid AD and Entra ID environment and reviewed business continuity.[1][3][5][7][8]

Semperis on the record

Sources

Semperis full record

  1. [1]semperis.comSemperis · semperis.com · undated page, accessed November 5, 2026 · Tier A
  2. [2]Press releasesSemperis · semperis.com · published November 5, 2026 · Tier A
  3. [3]Semperis - Active Directory - AD Security and Recovery SolutionsSemperis · undated page, accessed November 10, 2026 · Tier A
  4. [4]Official Information About Semperis for AISemperis · undated page, accessed November 10, 2026 · Tier A
  5. [5]Services Identity Security and Recovery Incident Response - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  6. [6]Directory Services Protector - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  7. [7]AD Security Glossary - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  8. [8]About us - SemperisSemperis · undated page, accessed November 10, 2026 · Tier A
  9. [9]Semperis Names John Podboy Chief Information Security Officer - SemperisSemperis · published May 7, 2026 · Tier A
  10. [10]Semperis Acquires Identity Resilience Provider MightyID to Extend Identity Protection for Okta and Ping Multi-Cloud Environments - SemperisSemperis · published February 4, 2026 · Tier A

ServiceNow full record

  1. [1]servicenow.comServiceNow · servicenow.com · undated page, accessed November 5, 2026 · Tier A
  2. [2]Vulnerability Response – Threat Intelligence - ServiceNowServiceNow · undated page, accessed November 10, 2026 · Tier A
  3. [3]Security Incident Response Pricing - ServiceNowServiceNow · undated page, accessed November 10, 2026 · Tier A
  4. [4]Third-Party Risk Management – ServiceNowServiceNow · undated page, accessed November 10, 2026 · Tier A
  5. [5]Identity and Access Security | Risk Management - ServiceNowServiceNow · undated page, accessed November 10, 2026 · Tier A
  6. [6]Super Intelligence Control Tower - ServiceNowServiceNow · undated page, accessed November 10, 2026 · Tier A
  7. [7]IT Asset Management - ITAM - ServiceNowServiceNow · undated page, accessed November 10, 2026 · Tier A
  8. [8]Resource Management - ServiceNowServiceNow · undated page, accessed November 10, 2026 · Tier A
  9. [9]ServiceNow IT Service Management Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.