Enterprise identity protection and cyber resilience startup Semperis Ltd. today announced the expansion of Forest Druid, its community-driven attack path management tool, to include support for Microsoft Entra ID, the service previously known as Azure AD.

The additional support, coming after the company added support for Okta Inc. to its Purple Knight tool in August, is designed to save time for cybersecurity teams in identifying and closing risky attack paths across hybrid identity systems. Semperis says the addition of Entra ID support in Forest Druid underscores its mission to help organizations address emerging threats against on-premises Active Directory and cloud identity systems.

Forest Druid varies from conventional AD attack path management tools that require defenders to scrutinize countless possible attack paths. Instead, Forest Druid accelerates attack path analysis by focusing on Tier 0 assets — accounts, groups and other assets that have direct or indirect administrative control of an AD or Entra ID environment. With access to Tier 0 assets, attackers can seize control of the entire network.

“As more organizations are embracing cloud identity systems such as Entra ID and Okta — often using them in conjunction with on-prem AD — the attack surface expands, giving malicious actors more opportunities to breach the environment and deploy malware,” said Ran Harel, associate vice president of security products at Semperis. “Forest Druid helps defenders visually map risky access to privileged accounts. By identifying the true Tier 0 perimeter and prioritizing sensitive accounts for remediation, cybersecurity teams save valuable time and resources in safeguarding the identity system.”

Along with support for Entra ID, Forest Druid has also had several upgrades, including new settings to control data collection from on-premises and cloud identity systems and new controls to improve the defense perimeter relationship graph, a map of objects with privileged relationships to Tier 0 assets.

Semperis is a venture capital-backed startup that last raised $200 million in funding in May 2022. Investors in the company include Kohlberg Kravis Roberts & Co. LP, Ten Eleven Ventures LLC, Paladin Capital Group LLC, Atrium Health Strategic Fund LLC and Tech Pioneers Fund LP.

Image: Semperis