Semperis Product Overview

The world’s leading organizations trust Semperis to spot directory vulnerabilities, intercept cyberattacks in progress, and quickly recover from ransomware and other data integrity emergencies. Semperis is headquartered in New Jersey and operates internationally, with its research and development team distributed between San Francisco and Tel Aviv. Semperis hosts the award-winning Hybrid Identity Protection conference (www.hipconf.com). The company has received the highest level of industry accolades and was recently ranked #157 in the 2021 Inc. 5000 list, the most prestigious ranking of the nation’s fastest-growing private companies. Semperis is accredited by Microsoft and recognized by Gartner.

____

Semperis is an identity-driven cyber resilience and threat mitigation platform for multi-cloud and hybrid environments. Purpose-built for securing hybrid Active Directory (AD) environments, Semperis' patented technology protects over 50 million identities from cyberattacks, data breaches, and operational errors. The software automates the entire AD forest recovery process, eliminates malware, and recovers anywhere — even to the cloud. For security teams defending multi-cloud environments, Semperis ensures the integrity and availability of critical enterprise directory services at every step in the cyber kill chain. The platform allows organizations to spot directory vulnerabilities, intercept cyberattacks in progress, and recover from ransomware and other data integrity emergencies. Semperis products include Directory Services Protector (DSP) and Active Directory Forest Recovery (ADFR). DSP delivers comprehensive identity threat detection and response, while ADFR brings cyber-first disaster recovery for Active Directory.

Pros of Semperis

Back to top ↑

Semperis empowers organizations to recover AD even after domain controllers are infected or wiped out.
Unlike tracking tools that rely solely on security logs and agents on every domain controller, Semperis DSP monitors multiple data sources, including the AD replication stream. It forwards suspicious changes to the SIEM system with meaningful context, reducing the burden on security analysts.

Cons of Semperis

Back to top ↑

The automation capabilities of Semperis are lacking for some users, particularly in terms of offloading recovery data.

Breakdown of core features

Back to top ↑

Malware-proof backups

Admins can restore to the most recent backup, even after domain controllers' infection. Semperis decouples AD from the underlying operating system to prevent malware re-infection. There’s no need for trial-and-error restores in search of clean backups and no rebuilding AD from scratch. The software minimizes the impact of outages and helps the company get back to business quickly.

Automated forest recovery

Semperis lets organizations recover an entire Active Directory forest with just a few clicks. Users can automate every aspect of forest recovery, including cleaning up metadata, rebuilding the Global Catalog, and restructuring site topology. This feature also avoids human errors, reduces downtime, and prevents costly business interruptions.

Incident response

The platform speeds up forensic analysis and gets to the source of the attack. It translates unstructured AD and Azure AD change data into a human-readable format. IT teams can search, correlate, and undo changes at object and attribute levels and drill down to any point in time to isolate compromised accounts and prevent future attacks.

Automated remediation

With Semperis, IT teams can secure hybrid AD at scale with autonomous rollback of suspicious modifications that are too risky to wait for human intervention. Admins can create custom triggers and alerts for critical system changes and stop intruders and rogue administrators from achieving their objectives. Furthermore, users can add audit notifications on changes to sensitive AD objects and attributes, with the option to automatically undo select changes.