TOOL PROFILE · DIRECTORY THREAT DETECTION AND RECOVERY
Semperis: IAM jobs covered, pricing and limits
Short answer
Protection and recovery for Active Directory, Entra ID and Okta: detection of risky directory changes, rollback and forest recovery. Its own pages document threat detection. Purple Knight is free; paid products have no list price.
Which IAM jobs does Semperis cover?
Read the stack as a list
- J5 Identity threat detection and response: 5 documented, 1 partial
- J4 Privileged access: 2 documented, 7 partial
- J3 Application coverage and identity orchestration: 2 documented, 6 partial
- J2 Lifecycle and governance: 7 documented, 4 partial
- J1 Directory and single sign-on: 5 documented, 1 partial
| Job | Status | What its pages say |
|---|---|---|
| J1Directory and SSO | Not in our sources | Semperis protects and recovers directories; it is not one. Source: Semperis homepage · Read 29 Sep 2026 |
| J2Lifecycle and IGA | Not in our sources | No description on the pages we read. |
| J3App coverage | Not in our sources | No description on the pages we read. |
| J4Privileged access | Not in our sources | No description on the pages we read. |
| J5Threat detection | Documented | Directory Services Protector watches hundreds of indicators of exposure and compromise across AD and Entra ID and can automatically roll back malicious changes; AD Forest Recovery, Disaster Recovery for Entra Tenant and Recovery for Okta cover recovery. Source: Semperis: Active Directory security · Read 29 Sep 2026 · Source: Semperis homepage · Read 29 Sep 2026 |
How does Semperis fit in an IAM stack?
Semperis takes the threat detection job for directories: it watches Active Directory and Entra ID for risky changes, rolls them back, and recovers AD forests, Entra tenants and Okta after an attack. It sits beside whichever directory you run.
Suits: Organizations still running Active Directory that need detection and a tested recovery plan.
What does it cost and how is it deployed?
- Pricing
- Purple Knight assessment is free. Directory Services Protector is listed on Microsoft Marketplace with "Price varies" and no list price; no public price on semperis.com.
Source: Semperis Purple Knight · Read 29 Sep 2026 · Source: Microsoft Marketplace: Semperis Directory Services Protector · Read 11 Oct 2026
- Deployment
- Directory Services Protector uses the AD replication stream; further deployment detail not in our sources.
Source: Semperis: Active Directory security · Read 29 Sep 2026
- Integrations
- Covers Active Directory, Entra ID and Okta.
Source: Semperis homepage · Read 29 Sep 2026 · Source: Semperis Purple Knight · Read 29 Sep 2026
- Certifications
- Not covered in our sources
Where is Semperis strong?
- Recovery for AD forests, Entra tenants and Okta.
Source: Semperis homepage · Read 29 Sep 2026
- Free Purple Knight assessment with 218+ indicators across AD, Entra ID and Okta.
Source: Semperis Purple Knight · Read 29 Sep 2026
- Forest Druid maps Tier 0 attack paths.
Source: Semperis homepage · Read 29 Sep 2026
What are its limits?
- Focused on directory protection, not on sign-in, governance or privileged access.
Source: Semperis homepage · Read 29 Sep 2026
- No list price for paid products; the Microsoft Marketplace listing says the price varies.
Source: Microsoft Marketplace: Semperis Directory Services Protector · Read 11 Oct 2026
Which head-to-heads include Semperis?
Frequently asked questions
What does Semperis do in an IAM stack?
Protection and recovery for Active Directory, Entra ID and Okta: detection of risky directory changes, rollback and forest recovery. Its pages document threat detection.
Does Semperis publish pricing?
Purple Knight assessment is free. Directory Services Protector is listed on Microsoft Marketplace with "Price varies" and no list price; no public price on semperis.com.
What does Semperis not cover?
On the pages we read, Semperis does not describe directory and SSO, lifecycle and IGA, app coverage and privileged access. Focused on directory protection, not on sign-in, governance or privileged access.
Read next