Vectra AI Identity Threat Detection and Response helps security teams detect, investigate, and respond to identity threats across an organization. Its coverage includes Active Directory, Microsoft Entra ID, local identities, cloud identities, and service accounts. Vectra says its AI identifies identity-focused attackers in real time, while correlating activity across network and cloud to filter benign behavior and reduce false positives. The platform provides dashboards for monitoring network, cloud, SaaS, and identity services, as well as workflows to investigate alerts and hunt unusual behavior. Response actions can be automated or customized. The product also describes detection and response for Microsoft 365 apps and AWS activity after an identity is compromised. Vectra says it has native integrations for dozens of security tools and supports third-party API connections. It is available through web and API platforms, with pricing on request and a 45-day trial deployment available through the demo page.
Who it is for
Vectra identifies security teams, architects, analysts, SOCs, and IAM teams as audiences. It may suit organizations looking to monitor human and machine identities, including service accounts.
What is good
- Covers Active Directory, Entra ID, local, and cloud identities
- Monitors human and machine identities, including service accounts
- Offers automated or customized response actions
- Native integrations for dozens of security tools
What to know first
- Pricing is available on request
- Premium support is a separate program
Verdict
Vectra ITDR brings identity threat detection, investigation, and response into workflows spanning network, cloud, SaaS, and identity services. Organizations should request pricing and determine whether standard or Premium Support fits their needs.
Vectra AI Identity Threat Detection and Response plans and pricing
All plansCompared on identity threat detection and response software
- Credential theft detection
- Yes
- Privilege abuse detection
- Yes
- Directory attack detection
- Yes
- Automated response
- Yes
- Identity coverage
- human_and_machine






