Semperis

Semperis is a cybersecurity company focused on identity threat detection and response, with a specific emphasis on protecting Microsoft Active Directory (AD) and Azure AD environments. The company was founded by Mickey Bresman, Matan Liberman, and Guy Teverovsky. Semperis is headquartered in Hoboken, New Jersey, with significant R&D operations in Israel.

Semperis addresses a concrete and well-documented attack surface: Active Directory, which serves as the authentication backbone for the majority of enterprise Windows environments, is a primary target in ransomware and nation-state attacks. The company's products help enterprises detect AD misconfigurations, monitor for attack indicators, and recover AD infrastructure after a breach — a capability that became widely recognized as critical following high-profile ransomware incidents in which attackers compromised AD to move laterally and deploy payloads. Buyers are primarily enterprise security teams, incident response teams, and identity and access management (IAM) practitioners. The sales motion is sales-led and enterprise-focused, with engagement through managed security service providers (MSSPs) and incident response partners.

The flagship product is Directory Services Protector (DSP), which provides continuous monitoring, threat detection, and automated remediation for Active Directory. It tracks changes in AD in real time and can roll back unauthorized changes without requiring a full AD restore. A second major product is Active Directory Forest Recovery (ADFR), which automates the recovery of an entire AD forest following a cyberattack or outage — a process that traditionally required days of manual effort. Semperis has also expanded coverage to Entra ID (Azure AD) as enterprises have adopted hybrid identity environments.

The primary named competitors in the AD security space include Quest Software (with its Change Auditor and Recovery Manager products) and Netwrix. Microsoft itself has expanded native AD security tooling, though third-party vendors such as Semperis argue that native tooling lacks the forensic depth, automated recovery, and attack-path analysis their platforms provide. The broader identity security market has grown significantly following high-profile AD-based attacks including those associated with the NotPetya and various ransomware-as-a-service campaigns. Semperis has been recognized in analyst coverage of the identity threat detection and response (ITDR) category.

Semperis has a meaningful R&D presence in Israel. The Israeli team focuses on core product engineering and security research. Several of the company's founders and technical leaders have Israeli backgrounds, which is consistent with the company's positioning within the broader Israeli cybersecurity ecosystem.