Proofpoint Reviews, Ratings & Features 2026 | Gartner Peer Insights

Identity Threat Detection and Response (ITDR) encompasses a suite of security practices and technologies dedicated to detecting, investigating, and responding to threats that target digital identities within an organization. As identity-related attacks such as compromised credentials, privilege escalation, and unauthorized access become increasingly common, ITDR solutions play a pivotal role in safeguarding sensitive systems and data. These solutions work by continuously monitoring identity activities, analyzing behavioral patterns, and identifying anomalies that may signal malicious intent. When a threat is detected, ITDR tools empower security teams to respond rapidly through measures like isolating affected accounts, enforcing multi-factor authentication, or triggering automated remediation workflows. In an era where digital identities are a primary attack vector, ITDR is essential for strengthening an organization’s overall security posture.

Who are the target users of Identity Threat Detection and Response (ITDR) solutions?

Primary users of ITDR solutions include security operations teams, IT administrators, and identity and access management (IAM) professionals within organizations of all sizes. Chief Information Security Officers (CISOs), compliance managers, and risk management teams also rely on ITDR to ensure regulatory compliance and reduce the risk of data breaches. These solutions are especially critical for, remote workforces, or heightened regulatory requirements.

What are the core capabilities of Identity Threat Detection and Response (ITDR) solutions?

Anomaly-Based Threat Detection: Tracks identity behavior to detect unusual patterns like odd login times or access spikes that may signal compromised accounts or insider threats.
Real-Time Alerting: Delivers instant notifications when identity-related risks are detected, helping security teams act before damage occurs.
Automated Threat Response: Takes immediate action such as locking accounts or triggering MFA to contain threats without waiting for manual intervention.

What are the benefits of Identity Threat Detection and Response (ITDR) solutions?

ITDR solutions help organizations proactively defend against identity-based attacks, reducing the risk of data breaches and operational disruptions. Security teams benefit from faster threat detection and response, improved visibility into identity-related risks, and reduced manual workloads through automation. Executives and compliance leaders gain confidence in their organization’s ability to meet regulatory requirements and protect sensitive information, ultimately enhancing the organization’s reputation and resilience against evolving cyber threats.

Active

Find the top Identity Threat Detection and Response (ITDR) with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Identity Threat Detection and Response (ITDR)

Proofpoint Identity Threat Defense

Proofpoint

Operations Associate

Proofpoint Identity Threat Defense provides strong visibility into identity based threats and effectively compliments existing security controls.
The solution is particularly effective in detecting compromised accounts, lateral movement and anomalous user behaviour that traditional perimeter controls often miss.

50M - 250M USD

<50M USD

250M - 500M USD

3B - 10B USD

500M - 1B USD

10B - 30B USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

1B - 3B USD

30B + USD

Manager, It Security And Risk Management

After an extensive review during move to the o365 environment we went with a more robust competitor. 

It Manager

Proofpoint Identity Threat Defense es una solución que maneja bastante bien la detección temprana de ataques basados en identidades y detección de movimientos laterales, con su técnica de "deception" (engaño) para los intrusos, la convierte en una solución muy poderosa. Donde no es muy buena es en la observación/detección en el momento de la autenticación, Proofpoint observa principalmente lo que ocurre antes y después de que un atacante obtiene acceso a una identidad.

Proofpoint Identity Threat Defense is a solution that handles early detection of identity-based attacks and lateral movement quite well. Its "deception" technique for intruders makes it a very powerful solution. Where it falls short is in observation/detection at the authentication stage. Proofpoint primarily observes what happens before and after an attacker gains access to an identity.

CrowdStrike

Microsoft

SentinelOne

Delinea

Silverfort

Cisco Systems

WithSecure

Palo Alto Networks

Netwrix

Semperis

Seceon

Blackpoint Cyber

Huntress

Permiso Security

The company focuses on providing cybersecurity and compliance solutions. It primarily aims to offer protection across various digital channels such as email, web, cloud, and social media.

We provide the most effective cybersecurity and compliance solutions to protect people on every channel including email, the web, the cloud, and social media.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Strong lateral movement detection, but limited visibility in authentication

Critical Review

Delays in Mail Delivery and Multi Domain Issues Reported with This Product

Likes and dislikes about

likes

dislikes