Semperis vs Silverfort for ITDR

SHORT ANSWER

On our weights for ITDR, Silverfort scores 7.6 / 10 and Semperis 6.8 / 10. Semperis scores higher on response and recovery; posture and attack paths; and maturity and buying clarity; Silverfort scores higher on detection breadth; stopping attacks at sign-in; and token and session attacks.

Editorial assessment · Desk research from public vendor material · Reviewed 2026-09-29

Scores by criterion

C1Detection breadth25%
Semperis
8

Scans for hundreds of indicators of exposure and compromise across Active Directory and Entra ID, using the AD replication stream.

Source: Semperis Directory Services Protector

Silverfort
9

Names brute force, password spraying, credential stuffing, Pass-the-Hash, Pass-the-Ticket, Kerberoasting and DCSync.

Source: Silverfort: ITDR

Higher score: Silverfort

C2Stopping attacks at sign-in20%
Semperis
5

Automatic rollback of malicious changes, rather than blocking sign-in attempts.

Source: Semperis Directory Services Protector

Silverfort
9

Blocks, challenges with MFA or ends the session inline, before authentication completes.

Source: Silverfort: ITDR

Higher score: Silverfort

C3Token and session attacks20%
Semperis
4

Token and session attacks are not addressed on the pages reviewed.

Source: Semperis Directory Services Protector · Semperis products

Silverfort
6

Flags suspicious Kerberos tickets; forged federation tokens are not addressed on the page reviewed.

Source: Silverfort: ITDR

Higher score: Silverfort

C4Response and recovery15%
Semperis
9

Rolls back malicious changes in AD and Entra ID and sells forest recovery and Okta tenant recovery.

Source: Semperis Directory Services Protector · Semperis products

Silverfort
7

Session termination and MFA challenge as responses; recovery is not part of the product.

Source: Silverfort: ITDR

Higher score: Semperis

C5Posture and attack paths10%
Semperis
9

Free Purple Knight assessment with 218+ indicators across AD, Entra ID and Okta; Forest Druid for Tier 0 attack paths.

Source: Semperis Purple Knight · Semperis products

Silverfort
7

Identity graph and access intelligence map identities and access.

Source: Silverfort platform

Higher score: Semperis

C6Maturity and buying clarity10%
Semperis
7Gap in public material

Free assessment tools; product pricing is not published.

Source: Semperis Purple Knight

Silverfort
6Gap in public material

Established vendor; pricing is not published.

Source: Silverfort platform

Higher score: Semperis

Weighted total

Semperis 6.8 / 10 · Silverfort 7.6 / 10

Higher score: Silverfort

Where each one scores higher

Semperis scores higher on

  • response and recovery (9 vs 7)
  • posture and attack paths (9 vs 7)
  • maturity and buying clarity (7 vs 6)

Silverfort scores higher on

  • detection breadth (8 vs 9)
  • stopping attacks at sign-in (5 vs 9)
  • token and session attacks (4 vs 6)

Pricing, side by side

Semperis

Purple Knight assessment is free. Product pricing not published, contact sales.

Source: Semperis Purple Knight

As published on 2026-09-29.

Visit Semperis

Silverfort

Not published, contact sales.

Source: Silverfort platform

As published on 2026-09-29.

Visit Silverfort

Which should you choose?

Choose Semperis if response and recovery and posture and attack paths matter most. It scores 9 and 9 on them. Rolls back malicious changes in AD and Entra ID and sells forest recovery and Okta tenant recovery.

Choose Silverfort if detection breadth and stopping attacks at sign-in matter most. It scores 9 and 9 on them. Names brute force, password spraying, credential stuffing, Pass-the-Hash, Pass-the-Ticket, Kerberoasting and DCSync.

Questions

Which scores higher overall, Semperis or Silverfort?

On our weights for ITDR, Silverfort scores 7.6 / 10 and Semperis 6.8 / 10. Totals are the weighted average of six criterion scores; the weights are listed on the ITDR page.

Where does Semperis score higher than Silverfort?

On response and recovery; posture and attack paths; and maturity and buying clarity.

Where does Silverfort score higher than Semperis?

On detection breadth; stopping attacks at sign-in; and token and session attacks.

Related

Sources