Commvault Advances Identity Resilience, Enabling Customers to Identify , Manage Hidden Risks in Identity Systems Before Attackers Exploit Them

Commvault, delivering continuous recovery for the AI era, has announced new identity resilience capabilities that will help organisations discover changes across a wide range of identity environments, understand their Tier 0 exposure, and quickly remediate associated risks.

Identity systems are a prime target for attackers because they can offer fast access to critical enterprise resources. With 80% of large enterprises using multiple identity providers, including Active Directory, Entra ID, and Okta, organizations face growing complexity across human and non-human identities, permissions, and policies.

What Commvault Offers

Commvault’s latest capabilities give identity, IT, and security teams more awareness, control, and response capabilities that take identity resilience to the next level, including:

• Continuously detecting changes across identity providers: Cross-provider identity auditing will give administrators visibility into a broad range of changes affecting identities, permissions and the configurations that govern access across Active Directory, Entra ID, and Okta environments.
• Uncovering Tier 0 exposures: Identity attack intelligence capabilities will identify an organisation’s most privileged identity assets and reveal who has control over them. By having a complete view—a Tier 0 inventory—teams can uncover hidden risks that otherwise could give attackers control of critical identity systems.
• Guiding remediation and recovery: AI-guided recommendations help teams understand why exposure exists and how to address risky access, while supporting rollback of unwanted changes and recovery of trusted identity configurations.

“Attackers don’t need to compromise every system. They just need to compromise the identities that control them”, said Pranay Ahlawat, Chief Technology and AI Officer, Commvault. “As AI agents and non-human identities proliferate, this risk is only growing. Our goal is simple: help customers understand who controls their most critical identity infrastructure, identify dangerous changes, and restore trusted access when things go wrong.”

“Identity threat detection and response leads identity security priorities and resilience ranks next, yet only 47% of organisations have a completed identity recovery plan,” says Emanuel Figueroa, Senior Research Analyst for Identity and Access Management Security, IDC. “Breaking the kill chain ends the attack, but not its aftermath: changed permissions, group memberships, policies, and trust relationships can persist after access is revoked. Access controls can’t by themselves return a directory to a verified state, so recovery is becoming a distinct buying criterion. Commvault’s extension of recovery across Active Directory, Entra ID, and Okta shows data-protection vendors are moving to meet it.”

Global Availability

Identity attack intelligence and cross-provider identity auditing are planned for early access in the coming quarters. They will be offered as part of Commvault IDRecover – a portfolio of innovations that help organizations uncover identity risk, monitor and detect suspicious changes, and rapidly restore trusted access when identity systems are compromised.