ISPM
Identity Security Posture Management. Continuous assessment of identity-related misconfigurations and risk, such as dormant accounts, weak MFA coverage, and risky entitlements. Posture is preventive; ITDR is the runtime detection counterpart.
Posture management answers "what could go wrong" while detection answers "what is going wrong", and the two need different data. ISPM findings are usually unglamorous and high value: accounts excluded from MFA policy, admins without privileged workstations, dormant service accounts with live keys, and nested group membership nobody intended. The work is prioritization, since a raw findings list from a large tenant is unusable.
See also: what is ITDR, CIEM, least privilege, ITDR vendors
Related on Start with Identity
- GlossaryEntitlement
A specific permission or right an identity holds over a resource. Governance and CIEM exist to keep entitlements understood, justified, and minimal. Entitlement
- GlossaryEntity Analytics
The analysis of behaviour and relationships across all entities in an environment, human and non-human, to establish what normal looks like and surface deviatio
- GlossaryIdentity Resilience
The ability to keep authenticating and authorising legitimate users, and to recover the identity system itself, when the identity provider or directory is degra
- BlogOkta buys Permiso Security to put ITDR inside the identity provider
Okta signed a definitive agreement to acquire Permiso Security, reportedly for just under 200 million dollars in an almost all-cash deal. It moves detection of
- PodcastSemperis
Semperis' biweekly show for defenders of hybrid Active Directory and Entra ID environments, hosted by 15-time Microsoft MVP Sean Deuby.
- BlogSilverfort acquires Fabrix Security, a one-year-old AI access-decision engine
Price undisclosed, reported as tens of millions for a company founded in 2025. Fabrix supplies the identity knowledge graph and decisioning; Silverfort supplies