ITDR vendors
We list 58 companies active in identity threat detection and response, and 6 of them have it as their main focus. 7 are public, 10 are owned by another company and 41 are private. Most are based in the United States (48). The oldest, Microsoft, was founded in 1975. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).
By countryUnited States 48
Companies focused on identity threat detection and response
6 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Cymphony Cymphony provides an AI-native workforce security platform that maps identities, data, and permissions to reduce risk. | Tel Aviv, Israel | Private | |||
L Lepide Lepide provides software to audit and secure Active Directory, files, and Microsoft 365. | Austin, United States | 2005 | Private | ||
Semperis Semperis provides identity-driven cyber resilience and crisis management for critical identity systems. | Hoboken, United States | Private | |||
Sevii Sevii provides an autonomous defense and remediation platform that stops cyber adversaries without human intervention. | Mooresville, United States | Private | |||
Silverfort Silverfort provides runtime identity security for enterprises, protecting human and machine identities across cloud and on-premises environments. | Plano, United States | 2016 | Private | ||
SpyCloud SpyCloud is a cybersecurity company that specialises in identity threat protection. | Austin, United States | 2016 | Private |
Also active in identity threat detection and response
52 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Redmond, United States | 1975 | 228,000 staff | Public, MSFT | $331.8bn (FY2026) |
Palo Alto Networks Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats. | Santa Clara, United States | 2005 | 13,900 staff | Public, PANW | $11.5bn (FY2026) |
CrowdStrike CrowdStrike provides AI-native cybersecurity solutions to stop breaches. | Austin, United States | 2011 | 7,925 staff | Public, CRWD | $4.8bn (FY2026) |
Okta Okta provides cloud-based identity and access management solutions for workforce and customer identities. | San Francisco, United States | 2009 | Public, OKTA | $2.9bn (FY2026) | |
Commvault Commvault provides a cloud-native platform for data security, identity resilience, and cyber recovery. | Tinton Falls, United States | 1996 | Public, CVLT | $1.2bn (FY2026) | |
SentinelOne SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection. | Mountain View, United States | 2013 | Public, S | $1.0bn (FY2026) | |
Varonis Varonis provides data security software that protects data across cloud, SaaS and on-premises environments. | Miami, United States | 2005 | Public, VRNS | $623.5m (FY2025) | |
Darktrace Darktrace provides AI-powered cybersecurity solutions that detect and respond to threats across networks, cloud, email, and AI systems. | Cambridge, United Kingdom | 2013 | 1,600 staff | Owned by Thoma Bravo | |
Abnormal AI Abnormal AI uses behavioural analysis to detect and stop email, identity, and AI-driven cyber attacks. | San Francisco, United States | 2018 | Private | ||
Appgate AppGate provides zero trust network access and fraud protection software for enterprises and government agencies. | New York, United States | Private | |||
AppOmni AppOmni provides a platform to secure SaaS applications and AI environments for enterprises. | San Mateo, United States | 2018 | Private | ||
Babel Street Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise. | Reston, United States | Private | |||
Blumira Blumira provides a security operations platform for IT teams to detect and respond to threats. | Ann Arbor, United States | Private | |||
Capsule Security Capsule Security provides a runtime security platform that monitors and intervenes in AI agent behavior. | Tel Aviv, Israel | Private | |||
Centeye Security Centeye provides a security platform for managed service providers and managed security service providers. | United States | 2026 | Private | ||
C Corsha Corsha provides identity-based security for machine-to-machine connections in industrial and operational networks. | Vienna, United States | Private | |||
Cyderes Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management. | Kansas City, United States | Private | |||
Cyera Cyera provides a data security platform that discovers and protects sensitive data across cloud environments. | New York, United States | 2021 | Private | ||
Darwinium Darwinium provides edge-based intent intelligence to prevent digital fraud and abuse across customer journeys. | San Francisco, United States | Private | |||
Dashlane Dashlane provides credential security and password management for businesses. | Paris, France | 2009 | Private | ||
Delinea Delinea provides privileged access management and identity security for AI agents, humans, and machines. | San Francisco, United States | 2015 | Owned by TPG Capital | ||
Duo Security Duo Security provides multi-factor authentication and identity security tools for businesses. | Ann Arbor, United States | 2010 | Owned by Cisco | ||
Exabeam Exabeam provides security operations platforms that use behavioural analytics to detect and respond to threats. | Broomfield, United States | 2013 | Owned by Thoma Bravo | ||
Fidelis Security Fidelis Security provides cybersecurity solutions for enterprises and government agencies. | Riverside, United States | 2003 | Owned by Partner One | ||
Huntress Huntress provides managed cybersecurity services including endpoint detection, identity threat detection, and security awareness training. | Columbia, United States | Private | |||
HYPR HYPR provides passwordless authentication and identity verification for enterprises. | Holmdel, United States | 2014 | Private | ||
Imprivata Imprivata provides access management and digital identity solutions for organisations in mission-critical and life-critical sectors. | Lexington, United States | 2002 | Owned by Thoma Bravo | ||
IronWiFi IronWiFi sells a cloud-based network identity platform for WiFi authentication and access control. | Orlando, United States | 2014 | Private | ||
LexisNexis Risk Solutions Risk data and analytics provider whose ThreatMetrix, Emailage and InstantID products detect fraud and verify digital identities for banks, insurers and governments. | Alpharetta, United States | Private | |||
Living Security Living Security provides a platform that measures and reduces human risk in organisations. | Austin, United States | 2017 | Private | ||
Lumu Lumu provides network detection and response to identify and stop cyber threats in real time. | Doral, United States | Private | |||
Malwarebytes Malwarebytes provides antivirus, VPN and identity protection software for individuals and businesses. | Santa Clara, United States | 2004 | Private | ||
Obsidian Security Obsidian Security provides security for third-party applications and AI agents. | Palo Alto, United States | Private | |||
Outerlimit Outerlimit provides a security and authorization layer for agentic AI systems. | London, United Kingdom | Private | |||
Pindrop Pindrop provides deepfake detection and identity verification for voice and video interactions. | Atlanta, United States | 2011 | Private | ||
Qevlar AI Qevlar AI provides an autonomous security operations platform that investigates alerts and automates response. | Paris, France | 2023 | Private | ||
Reco Reco provides an AI agent security platform that maps, governs, and protects AI agents across enterprise applications. | Altamonte Springs, United States | Private | |||
Socure Socure provides an AI-powered identity verification and fraud prevention platform. | Incline Village, United States | Private | |||
Stellar Cyber Stellar Cyber provides an AI-native security operations platform that unifies detection and response tools. | San Jose, United States | 2015 | Private | ||
Sysdig Sysdig provides cloud security built on the open-source Falco project, with an emphasis on runtime detection inside running workloads. | United States | 2013 | Private | ||
Teleport Teleport provides a unified identity layer for securing access to infrastructure, applications, and AI agents. | Oakland, United States | 2015 | Private | ||
Vectra AI Vectra AI provides AI-native security and observability to detect and respond to cyber threats. | San Jose, United States | 2011 | Private | ||
XM Cyber XM Cyber provides a platform for continuous exposure management across hybrid environments. | Neckarsulm, Germany | Owned by Schwarz Group | |||
Zenity Zenity provides security and governance for AI agents and low-code applications. | Tel Aviv, Israel | 2021 | Private | ||
Zero Networks Zero Networks provides automated microsegmentation and zero trust security to stop lateral movement and contain attacks. | Tel Aviv, Israel | Private | |||
Beyond Identity Beyond Identity provides identity security software that eliminates passwords and verifies users and devices. | New York, United States | Private | |||
BioCatch BioCatch analyses user behaviour to detect and prevent fraud and financial crime for banks. | Israel | 2010 | Owned by Permira | ||
GetReal Security GetReal Security provides deepfake detection and identity verification software for enterprises. | Austin, United States | 2022 | Private | ||
Memcyco Memcyco provides real-time detection and prevention of digital impersonation and account takeover fraud. | Boston, United States | Private | |||
Polyguard Polyguard provides real-time identity verification to confirm a real person is present during hiring and other digital interactions. | New York, United States | 2024 | Private | ||
Proofpoint Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools. | Sunnyvale, United States | 2002 | Owned by Thoma Bravo | ||
RSA RSA provides identity and access management solutions for government, financial, and high-assurance organisations. | Burlington, United States | 1986 | Owned by Clearlake Capital |
Recent deals in identity threat detection and response
All identity threat detection and response dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.
More in Identity & Access
See every category- IAM vendors 78 companies
- PAM vendors 24 companies
- IGA vendors 32 companies
- CIAM vendors 16 companies
- MFA vendors 49 companies
- Password manager vendors 14 companies
- Secrets management vendors 29 companies