Identity threat detection and response
Monitoring of identity systems such as Active Directory and identity providers to detect and stop identity-based attacks.
8 vendors · alphabetical, never ranked
- Abnormal AIAbnormal AI sells a behavioral analytics platform that protects email and identity systems and monitors use of AI tools and agents, with separate modules for account takeover detection, identity threat protection and AI agent security.Privately held
- CayosoftCayosoft sells software that manages, monitors and recovers hybrid Microsoft identity environments, including instant recovery of an Active Directory forest to a clean standby environment after ransomware or another disruption.Privately held
- MalwarebytesMalwarebytes sells ThreatDown, a platform that combines endpoint detection and response, identity threat detection and response, vulnerability and patch management, and email security with managed detection and response.Ownership not established
- MitigaMitiga sells a breach prevention platform that captures activity across cloud, SaaS, AI and identity systems, reconstructs attacker behavior into a single attack sequence, and works to contain attacks before they cause impact, with separate detection and response modules for cloud, SaaS and AI.Ownership not established
- PermisoPermiso sells an identity security platform built on a graph that connects every human, non-human and AI identity to the credentials, machines and actions tied to it, used to inventory identities, assess their exposure and detect identity-driven attacks across cloud, SaaS and on-premises environments.Owned by Okta since 2026 · primary category
- ValenceValence sells an identity security platform for SaaS and AI agents, covering discovery of shadow and machine identities, enforcement of least privilege and policy on how AI connects to applications, and detection of suspicious identity activity.Ownership not established
- Vectra AIVectra AI sells the Vectra AI Platform, a network detection and response product that analyzes traffic, identity systems and cloud activity to surface attacker behavior such as lateral movement and compromised credentials.Ownership not established
- WatchGuard TechnologiesWatchGuard Technologies sells network firewalls, identity threat detection and response, AI-powered endpoint detection and response, and a unified platform combining these with multi-factor authentication and secure Wi-Fi.Owned by Vector Capital since 2022
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.