VeridiumID

Short Summary

Identity Threat Detection and Response (ITDR) is becoming a core enterprise security priority because identity infrastructure has become the most dependable entry point for attackers. Rather than triggering traditional endpoint or network alarms, adversaries exploit stolen credentials, misconfigured identity services, and abused trust relationships. Enterprises struggle because identity ecosystems are sprawling and fragmented across identity providers, directories, cloud apps, legacy platforms, privileged access tools, and governance systems, each producing isolated logs and signals. This fragmentation obscures attack paths and enables privilege escalation, lateral movement via service accounts, and exploitation of configuration gaps.

ITDR addresses this by unifying visibility, continuous monitoring, identity-specific analytics, and correlation across silos, treating identity as both a control plane and a detection surface. Demand is heightened by the rapid growth of Non-Human Identities (NHIs) such as service accounts, workloads, and API keys, which often have broad permissions and weak monitoring. ITDR also underpins Zero Trust by continuously validating risk signals beyond one-time authentication, and it supports regulatory needs for stronger identity-centric auditability and traceability. Operationally, ITDR can guide or automate response actions like disabling accounts, revoking sessions, or enforcing step-up verification.

Veridium’s VeridiumID platform is positioned as an independent identity risk management and authentication layer that augments existing IAM/SSO rather than replacing it, with bidirectional feeds to SOC tools. It emphasizes “human endpoint security,” combining passwordless authentication, AI-driven anomaly detection, continuous session integrity monitoring, enrollment and recovery governance, and behavioral biometrics (“digital body language”). It integrates via standard protocols (SAML, RADIUS, OAuth, OIDC), supports Windows logon and Citrix, and offers on-premises/sovereign deployment options. Strengths include broad authenticators, no-code policy orchestration, and continuous verification; challenges include limited NHI coverage, market perception as “just MFA,” and an underdeveloped CIAM presence.

Interesting Facts

• Identity Threat Detection and Response (ITDR) is described as a central component of enterprise security strategy.
• Identity ecosystems commonly span identity providers, directory services, cloud applications, legacy systems, privileged access platforms, and governance tools.
• Non-Human Identities include service accounts, workloads, API keys, and machine-to-machine interactions.
• Zero Trust assumes compromise and requires continuous validation rather than one-time authentication.
• Veridium was founded in 2016 and is headquartered in London, UK.
• VeridiumID is marketed as an independent authentication and identity threat protection layer that augments existing IAM and SSO investments.
• VeridiumID integrates with identity providers using SAML, RADIUS, OAuth, and OpenID Connect (OIDC).
• VeridiumID includes a native plugin to Windows Logon and supports access infrastructures such as Citrix.
• VeridiumID supports on-premises and sovereign cloud deployments.
• The stated challenges for VeridiumID include limited current coverage for NHIs and a less-developed CIAM presence.

Notable Quotes

• “Identity systems have become the most reliable entry point for adversaries.”
• “Adversaries take advantage of this fragmentation, using techniques such as privilege escalation, lateral movement through service accounts, and the abuse of configuration gaps to remain undetected.”
• “Rather than treating identity as a static element of the stack, ITDR elevates it to serve as both a control plane and a detection surface.”
• “Zero Trust assumes compromise and requires continuous validation rather than one-time authentication.”
• “For many security leaders, ITDR is the missing layer that connects identity teams with the Security Operations Center (SOC).”
• “It approaches this as ‘human endpoint security,’ treating the individual and their behavior as the actual endpoint to be observed and protected…”
• “Once a user is authenticated, the platform continues to track user–device–session integrity, monitoring behavioral consistency, device posture, and contextual drift.”
• “VeridiumID goes beyond traditional device or network telemetry to examine digital body language.”
• “A key differentiator of VeridiumID is its no-code policy orchestration engine, where administrators define authentication and risk policies as flowchart-style graphs rather than scripts or static rules.”
• “This ‘overlay’ model makes it possible to strengthen authentication and add ITDR capabilities without migrating all identities to a single cloud identity provider or disrupting existing SSO implementations.”