Identity Threat Detection and Response
ITDR.
A category of security tooling focused on detecting, investigating, and responding to identity-targeted attacks, emerging in 2023 and increasingly distinct from traditional EDR/XDR.
ITDR is enterprise-tier, most B2C consumer apps and B2B SaaS at startup-to-mid-market scale don't justify a separate ITDR product. The CIAM's built-in adaptive auth and audit logging covers the threats ITDR catches at the enterprise tier. Consider ITDR when the security team is large enough to operate it and the threat model includes identity-targeted persistent attackers.
Common questions
How is ITDR different from SIEM?
Do I need ITDR if I have a CIAM with adaptive MFA?
Which vendors lead in ITDR?