Identity threat detection and response category analysis

Product categories seem to be multiplying faster than ever and ITDR is one of the latest to be talked up. But the reasons that ITDR exists are pretty interesting – here’s the low-down. Identity threat detection and response (ITDR for short) is fast becoming an established product category amongst providers and industry analysts. Purists will argue that a taxonomy consisting of anything more than SIEM with UEBA is excessive (although this hasn’t stopped terms like EDR/XDR from sticking around), but product categories are multiplying anyway. ITDR as a term has existed since the early 2020s. When it was first introduced, it focused on protecting identities in the context of more traditional identity infrastructure (e.g. Active Directory). The term has since been adopted by cloud-focused security vendors, but retains a hybrid lens, with AD still featuring heavily. It’s clear that an appreciation of identity-based threats is driving the need to protect user identities, with 74% of all breac

Product categories seem to be multiplying faster than ever and ITDR is one of the latest to be talked up. But the reasons that ITDR exists are pretty interesting – here’s the low-down. Identity threat detection and response (ITDR for short) is fast becoming an established product category amongst providers and industry analysts. Purists will argue that a taxonomy consisting of anything more than SIEM with UEBA is excessive (although this hasn’t stopped terms like EDR/XDR from sticking around), but product categories are multiplying anyway. ITDR as a term has existed since the early 2020s. When