GigaOm Radar 2026: Identity Threat Detection and Response Market Evolves with AI, Identity Protection, and PAM Integration

The newest GigaOm Radar for Identity Threat Detection and Response (ITDR) confirms a major shift in cybersecurity priorities: identity has become the new security perimeter.

As organizations increasingly adopt hybrid infrastructure, SaaS applications, AI services, and machine identities, modern ITDR platforms are evolving beyond traditional identity monitoring toward proactive protection, AI-assisted detection, and automated response.

The report evaluates 20 leading ITDR vendors and highlights several Softprom technology partners.

CrowdStrike — Leader and Fast Mover

GigaOm positions CrowdStrike as a Leader and Fast Mover in the ITDR market.

The report highlights the strengths of the CrowdStrike Falcon platform, including:

• Unified endpoint, cloud, SaaS, and identity telemetry correlation
• AI-powered SecOps through Charlotte AI
• Advanced nonhuman identity (NHI) protection
• Automated incident response using Falcon Fusion SOAR
• Real-time conditional access enforcement

Analysts also emphasize CrowdStrike’s growing support for AI agent identities and Zero Standing Privileges capabilities across SaaS and cloud environments.

CyberArk — Expanding Identity Security Beyond PAM

CyberArk is recognized as a Challenger and Fast Mover with a strong focus on identity-centric security.

The report notes CyberArk’s strengths in:

• Nonhuman identity observability and secrets management
• AI-enhanced SecOps with CORA AI
• Broad IAM and cloud integrations
• Protection for workforce, developer, machine, and AI identities

GigaOm also highlights CyberArk’s ability to manage secrets and privileged identities across AWS, Azure, and GCP environments.

Netwrix — Identity-First Security for Active Directory Environments

Netwrix is positioned as a Challenger and Fast Mover in the Maturity/Feature Play quadrant.

According to the report, Netwrix differentiates itself through:

• Strong Microsoft Active Directory and Entra ID visibility
• Deception technologies and proactive controls
• AI-guided remediation suggestions
• NHI discovery and behavioral monitoring
• Integrated identity recovery capabilities

The report also highlights Netwrix’s focus on preventing identity attacks before incidents occur.

Segura — PAM and ITDR Convergence

Segura is recognized for combining PAM and ITDR into a unified platform.

Key strengths highlighted by GigaOm include:

• Privileged access monitoring and behavioral analytics
• GenAI-powered incident analysis via Segura Intelligence
• Cloud entitlement visibility across AWS, Azure, GCP, and OCI
• Session recording and anomaly detection
• Broad compliance support and MITRE ATT&CK mapping

The report emphasizes Segura’s focus on hybrid cloud identity security and predictive analytics.

Acalvio — Deception Technology for Identity Threat Detection

GigaOm highlights Acalvio ShadowPlex for its specialized deception-based approach to ITDR.

The platform delivers:

• Honeytoken-based identity attack detection
• Early warning for cloud identity attacks
• Protection against Kerberoasting and credential abuse
• Integrations with CrowdStrike Falcon and Microsoft Defender for Identity
• AI-assisted honeytoken recommendations

Acalvio is particularly suited for organizations seeking high-fidelity identity deception capabilities layered into existing security ecosystems.

The Future of ITDR

The report concludes that the ITDR market is rapidly evolving around:

• AI-enhanced security operations
• Protection of nonhuman and AI identities
• Integrated PAM and identity analytics
• Automated response and orchestration
• Cross-cloud visibility and behavioral analysis

As an official partner of CrowdStrike, CyberArk, Netwrix, Segura, and Acalvio, Softprom helps organizations build modern identity security strategies aligned with today’s hybrid and AI-driven environments.