ITDR

Identity Protection

Mitigate the risk of identity-based attacks with continuous visibility, risk monitoring, and threat detection

Overview
Why it Matters
Benefits
What’s Inside
Use cases
Our Platform
Resources
Take the next step

Zscaler ITDR™ protects users with continuous visibility into identity misconfigurations and risky permissions. Detect and stop identity-based attacks such as credential theft, multifactor authentication bypass, and privilege escalation.

WHY IT MATTERS

Identity is the new attack surface

With the rapid adoption of zero trust, attackers are targeting users and identities as the point of entry and using this access to escalate privileges and move laterally.

5/10

organizations suffer an Active Directory attack

Enterprise Management

80%

of moderns attacks are identity-driven

Crowdstrike

90%

of Mandiant IR engagements involve AD

Dark Reading

Benefits

Strengthens your zero trust posture by mitigating the risks of user compromise and privilege exploitation

Quantify identity risk

Know how, why, and where you’re vulnerable. An identity security assessment generates a risk score to quantify and track the posture of your identity attack surface.

Find misconfigurations

Uncover issues like GPP password exposure, unconstrained delegation, and stale passwords, that open up new attack paths and allow attackers to gain the upper hand.

Remediate issues

Understand the issue, its impact, and who is affected. Build strong identity hygiene with step-by-step remediation guidance in the form of video tutorials, scripts, and commands.

Monitor in real time

Identity systems are in constant flux with configuration and permissions changes. Get alerts when configuration changes introduce new risks.

Detect identity attacks

Not all misconfigurations can be remediated. Detect and stop attacks like DCSync, DCShadow, kerberoasting, and more in the event of a compromise.

Contain identity threats

Leverage out-of-the-box integrations with ZPA, SIEMs, and leading EDRs to contain identity attacks in real time or use alerts as part of your SOC workflow.

What’s Inside