Alternatives to Quest Change Auditor
Compare Quest Change Auditor alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Quest Change Auditor in 2026. Compare features, ratings, user reviews, pricing, and more from Quest Change Auditor competitors and alternatives in order to make an informed decision for your business.
-
1
ThreatLocker
ThreatLocker
ThreatLocker is a Zero Trust Platform that prevents cyber threats by blocking unknown applications, enforcing least privilege, and controlling what can run across your environment. Using Allowlisting, Ringfencing, Network Control, and more, ThreatLocker stops ransomware, zero-day attacks, and unauthorized activity before execution, rather than relying on detection after the fact. Built for modern IT and cybersecurity teams, the platform delivers centralized visibility and policy management across endpoints, users, and applications. ThreatLocker reduces attack surface, limits lateral movement, and supports compliance with detailed audit logs. With fast deployment, a large built-in application library, and streamlined approvals, organizations can strengthen security while minimizing operational overhead and maintaining business continuity. -
2
ADAudit Plus helps keep your Windows Server ecosystem secure and compliant by providing full visibility into all activities. ADAudit Plus provides a clear picture of all changes made to your AD resources including AD objects and their attributes, group policy, and more. AD auditing helps detect and respond to insider threat, privilege misuse, and other indicators of compromise, and in short, strengthens your organization's security posture. Gain granular visibility into everything that resides in AD, including objects such as users, computers, groups, OUs, GPOs, schema, and sites, along with their attributes. Audit user management actions including creation, deletion, password resets, and permission changes, along with details on who did what, when, and from where. Keep track of when users are added or removed from security and distribution groups to ensure that users have the bare minimum privileges.
-
3
Cerberus FTP Server
Redwood Software
Cerberus FTP Server provides a secure and reliable file transfer solution for the demanding IT professional in any industry. Supporting SFTP and SCP, FTP/S, and HTTP/S, Cerberus is able to authenticate against Active Directory and LDAP, run as a Windows service, has native x64 support, includes a robust set of integrity and security features and offers an easy-to-use manager for controlling user access to files and file operations. - FTP/S, SCP, SFTP, HTTPS - SAML SSO - Active Directory & LDAP - Secure SSL Encryption - Two-Factor Authentication - IP Auto-Banning and Geoblocking - HIPAA Compliant - FIPS 140-3 Validated - Advanced Reporting - Comprehensive Auditing - Web File Transfer Client - Email Notifications - Event Support & Automation - File Retention Policies -Unlimited Connections -Virtual Directories -Users & Groups -Detailed Logs -Full IPv6 Support -FTP with TLS/SSL -SOAP control API -Web Administration -SSH2 SFTP and SCP -Public Key Authentication -
4
Acronis Cyber Protect
Acronis
Managing cyber protection in a constantly evolving threat landscape is a challenge. Safeguard your data from any threat with Acronis Cyber Protect (includes all features of Acronis Cyber Backup) – the only cyber protection solution that natively integrates data protection and cybersecurity. - Eliminate gaps in your defenses with integrated backup and anti-ransomware technologies. - Safeguard every bit of data against new and evolving cyberthreats with advanced MI-based protection against malware. - Streamline endpoint protection with integrated and automated URL filtering, vulnerability assessments, patch management and moreStarting Price: $85 -
5
SecurEnds
SecurEnds
SecurEnds cloud software enables the world’s most forward-thinking companies to automate: User Access Reviews, Access Certifications, Entitlement Audits, Access Requests, and Identity Analytics. Load employee data from a Human Resources Management System (e.g., ADP, Workday, Ultipro, Paycom) using built-in SecurEnds connectors or files. Use built-in connectors and flex connectors to pull identities across enterprise applications (e.g., Active Directory, Salesforce, Oracle), databases (e.g., SQL Server, MySQL, PostreSQL), and cloud applications (e.g., AWS, Azure, Jira). Perform user access reviews by role or attribute as frequently as needed. Application owners can use delta campaigns to track any changes since the last campaign. Send remediation tickets directly to application owners to perform access updates. Auditors can also be granted access to review dashboards and remediations. -
6
CPTRAX for Windows
Visual Click Software
Server File Activity Tracking - Audit who is creating, accessing, moving, and deleting your files and folders. Track file permission changes. Real-time alerts about critical file activities. Malicious activity containment (Ransomware, mass file deletes, etc.) Workstation File Activity Tracking - Audit who is copying files to USB or other removable drives. Track who is uploading files from a browser or via FTP. Block files from being created on USB/removable device. Email alerts when a removable device is connected. Active Directory Auditing - Keep audit logs and get real-time alerts of important Active Directory changes without dealing with SACLs or Windows Event Logs. Server Authentication Auditing - Track authentications into Windows Servers and Citrix sessions. Review all failed logon attempts. Workstation Logon/Logoff Tracking - Get visibility on workstation logons/logoffs, including locks, unlocks and password changes. Review all failed logon attempts. -
7
Netwrix Auditor
Netwrix
Netwrix Auditor is an IT audit software solution designed to provide visibility into user activity and system changes across IT environments. It helps organizations track who is accessing data, what actions are being taken, and when those actions occur. The platform monitors systems such as Active Directory, file servers, Microsoft 365, databases, and network devices. It provides real-time alerts to notify teams of suspicious activity or potential security risks. Netwrix Auditor also helps identify excessive permissions and other vulnerabilities that could lead to data breaches. The solution includes built-in reports that support compliance with standards like HIPAA, PCI, and SOX. It simplifies audit processes by automating data collection and reporting tasks. By centralizing audit data, it helps organizations improve security and respond to incidents faster. -
8
SentinelOne Singularity
SentinelOne
One intelligent platform. Unprecedented speed. Infinite scale. Singularity™ enables unfettered visibility, industry-leading detection, and autonomous response. Discover the power of AI-powered, enterprise-wide cybersecurity. The world’s leading enterprises use the Singularity platform to prevent, detect, and respond to cyber attacks at machine-speed, greater scale, and higher accuracy across endpoint, cloud, and identity. SentinelOne delivers cutting-edge security with this platform by offering protection against malware, exploits, and scripts. SentinelOne cloud-based platform has been perfected to be innovative compliant with security industry standards, and high-performance whether the work environment is Windows, Mac or Linux. Thanks to constant updating, threat hunting, and behavior AI, the platform is ready for any threat.Starting Price: $45 per user per year -
9
Quest Identity Defense
Quest Software
Quest Identity Defense, formerly Security Guardian, is an agentic AI-powered identity security solution for protecting hybrid Active Directory and Microsoft Entra ID environments. The platform continuously monitors human and non-human identities to identify risks, anomalous behavior, privilege exposures, and vulnerabilities involving critical Tier 0 assets. Identity posture management benchmarks AD and Entra ID configurations against industry best practices and provides remediation guidance for discovered security weaknesses. Proactive object protection prevents unauthorized or risky changes to critical objects, while Shields Up and agentic AI capabilities can automatically contain active attacks and block lateral movement. Deep monitoring and human-readable auditing provide information about who changed an identity asset, what was changed, when and where the change occurred, and which workstation was involved. -
10
FolSec
FolSec
FolSec is a comprehensive data access management and security platform designed to protect enterprise file systems across on-premises and cloud environments. It provides centralized visibility and control over NTFS permissions, Active Directory groups, user access, and file activities. The platform enables organizations to discover sensitive data, create meaningful access matrices, identify excessive or unauthorized permissions, manage access requests, and review user privileges. Its audit and anomaly detection capabilities monitor who accessed, modified, moved, or deleted data and can detect suspicious behavior, insider threats, mass file operations, and ransomware activity. FolSec also includes file analysis, stale and duplicate file detection, permission backup and recovery, automated response actions, Active Directory reporting and management, and secure file sharing with expiration, password, download, IP, and two-factor authentication controls. -
11
DomainTools
DomainTools
Connect indicators from your network with nearly every active domain and IP address on the Internet. Learn how this data can inform risk assessments, help profile attackers, guide online fraud investigations, and map cyber activity to attacker infrastructure. Gain insight that is necessary to make the right decision about the risk level of threats to your organization. DomainTools Iris is a proprietary threat intelligence and investigation platform that combines enterprise-grade domain and DNS-based intelligence with an intuitive web interface. -
12
Cygna Auditor
Cygna Labs
Audit and roll back AD changes, enforce entitlements, and improve compliance reporting. Request a demo. Pinpoint changes and instantly roll back unwanted changes to Active Directory to recover from errors with minimal effort. Audit, alert and report on Windows file system and NetApp access faster and with greater detail than native auditing. Get real-time auditing, analysis, and alerts for Microsoft Exchange, and report on changes made to SQL Server. Cygna Auditor provides centralized real-time change auditing for Active Directory, file systems, Exchange, SQL and NetApp; offers the ability to restore Active Directory objects or attributes; and helps to establish and enforce entitlements across the Windows infrastructure. Through simpler administration, IT organizations can mitigate the risks of unwanted changes and better understand user activity to meet compliance requirements. -
13
Netwrix Threat Manager
Netwrix
Netwrix Threat Manager is a threat detection platform designed to identify and stop cyber threats across IT environments in real time. It uses machine learning and behavioral analytics to detect suspicious activity and potential attacks. The platform monitors systems such as Active Directory, Entra ID, and file systems to provide comprehensive visibility. It helps security teams identify threats like ransomware, insider risks, and unauthorized access attempts. Netwrix Threat Manager correlates events into clear attack chains to simplify investigations. It also enables automated responses to contain threats quickly and reduce damage. The platform includes deception techniques like honeytokens to expose attackers early. By combining detection and response, it helps organizations strengthen their security posture. -
14
Microsoft Purview Audit
Microsoft
Determine the scope of compromise, and access audit logs to support investigations. Determine the scope of compromise, and access audit logs to support investigations. Get a dynamic bandwidth quota to access your auditing data. Support investigations by providing visibility to events such as when mail items were accessed, replied to, and forwarded, or when and what a user searched for in Exchange Online and SharePoint Online. Create customized audit log retention policies to retain audit records based on the service where the audited activities occur, specific audited activities, or the user who performs an audited activity. Organizations are initially allocated a baseline of 2,000 requests per minute, where this limit will dynamically increase depending on an organization's seat count and licensing subscription. Retain audit log records for up to 10 years with an add-on license.Starting Price: $12 per month -
15
During that time, threats are free to spread throughout the network, causing mounting damage and increasing costs. Respond to attacks and stop the damage in minutes, with powerful delivered-email search and rapid deletion from all inboxes. Identify anomalies that may indicate threats, based on insights gathered from analysis of previously delivered email. Use intelligence gathered from previous threat responses to block future emails from malicious actors, and to identify your most vulnerable users. When email-borne attacks evade security and land in your users’ inboxes, you need to respond quickly and accurately to prevent damage and to limit the spread of the attack. Responding to attacks manually is time-consuming and inefficient, which allows threats to spread and damages to increase.
-
16
Intelligent Threat Detection. Faster Response. 98% of all threats start with Active Directory and nearly always involve the compromise of data stored on enterprise data stores. Our unique combination of detailed auditing, anomaly detection, real time alerting, and real time data discovery and classification allows you to identify, prioritize and investigate threats - fast. Protect Sensitive Data from Rogue Users and Compromised User Accounts. We enable you to detect and investigate threats to your most sensitive data in ways no other vendor can. Bringing together data discovery and classification with threat detection enables you to investigate all events, changes, actions and anomalies with context. End to end visibility of Active Directory, Group Policy, File Servers, Office 365, NetApp, SharePoint, Box, Dropbox and more. Detect and Respond to Security Threats 10x Faster. Investigate threats as they emerge in Active Directory and track movement
-
17
UTMStack
UTMStack
Complete visibility over the entire organization from a centralized management dashboard. All solutions in the stack are fully integrated with each others and report to a central database. This facilitates daily tasks such as monitoring, investigations and incident response. Active and passive vulnerability scanners for early detection, with of the box reports for compliance audits. Track and manage accounts access and permission changes. Get alerted when suspicious activity happens. Remotely manage your environment and respond to attacks right from your dashboard. Keep track of changes and access to classified information. Protect endpoints and servers with advanced threat protection.Starting Price: $25 per device per month -
18
Delinea Cloud Suite
Delinea
Simplify user authentication to servers from any directory service, including Active Directory, LDAP, and cloud directories such as Okta. Enforce the principle of least privilege with just-in-time and just enough privilege to minimize the risk of a security breach. Identify abuse of privilege, thwart attacks, and quickly prove regulatory compliance with a detailed audit trail and video recordings. Delinea’s cloud-based SaaS solution applies zero-trust principles to stop privileged access abuse and reduce security risks. Experience elastic scalability and performance, supporting multi-VPCs, multi-cloud, and multi-directory use cases. Single enterprise identity to securely log in anywhere. A flexible, just-in-time model with privilege elevation. Centrally manage security policies for users, machines, and applications. Apply MFA policies consistently across all your regulated and business-critical systems. Watch privileged sessions in real-time and instantly terminate suspicious sessions. -
19
Specops Password Auditor
Specops Software
Authentication and password security is more important than ever. Our password audit tool scans your Active Directory and identifies password-related vulnerabilities. The collected information generates multiple interactive reports containing user and password policy information. Specops Password Auditor is a read-only program, and available for free download. Analyze your domain password policies, and fine-grained password policies, to see if they enable users to create secure passwords. Generate reports to identify accounts with password vulnerabilities, including expired passwords, identical passwords, blank passwords, and more. In addition to these insights, Specops Password Auditor allows you to measure the effectiveness of your policies against a brute-force attack. For a complete list of the password reports, see the product overview.Starting Price: Free -
20
Delinea Server Suite
Delinea
Easily consolidate complex and disparate identities for Linux and Unix within Microsoft Active Directory. Minimize the risk of a breach and reduce lateral movement with a flexible, just-in-time privilege elevation model. Advanced session recording, auditing, and compliance reporting aid forensic analysis into abuse of privilege. Centralize discovery, management, and user administration for Linux and UNIX systems to enable rapid identity consolidation into Active Directory. Privileged Access Management best practices are easy to follow with the Server Suite. The results are higher levels of identity assurance and a significantly reduced attack surface with fewer identity silos, redundant identities, and local accounts. Manage privileged user and service accounts from Windows and Linux in Active Directory. Just-in-time, fine-grained access control with RBAC and our patented Zones technology. Complete audit trail for security review, corrective action, and compliance reporting. -
21
AuthLite
AuthLite
AuthLite secures your Windows enterprise network authentication and stays within your budget. Unlike all competing multi-factor authentication solutions, the unique AuthLite technology teaches your Active Directory how to natively understand two-factor authentication. With AuthLite, you can keep using all your existing software, with added two-factor authentication security placed exactly where you need it. AuthLite eliminates the "Pass the Hash" (PtH) attack vector against your administrative accounts by limiting the privileges assigned to a user. Require two-factor logon before granting the domain admins group SID. AuthLite works with your existing RDP servers and software. No changes are needed to RDP client machine software or drivers. Even when you are offline, your account logon is still protected with two-factor authentication. AuthLite uses the strong cryptographic HMAC/SHA1 Challenge/response feature of the YubiKey token to support cached/offline logon.Starting Price: $500 per year -
22
Quest Identity Recovery
Quest Software
Quest Identity Recovery, previously known as On Demand Recovery, is a SaaS-based backup and recovery solution for Microsoft Entra ID, Active Directory, and Microsoft 365 identities. The platform backs up users, groups, attributes, policies, roles, licenses, MFA information, group memberships, application attributes, and other identity objects, including cloud-only data. Difference reporting compares backups with live Entra ID and on-premises Active Directory environments to identify modifications, unwanted changes, and deleted objects. Administrators can search for affected objects and selectively restore individual users or attributes, or recover multiple users, groups, memberships, applications, and devices in bulk without PowerShell. A centralized recovery dashboard integrates with Quest Recovery Manager for Active Directory to coordinate recovery across hybrid identity environments. Identity Recovery is designed to reduce downtime, reverse accidental or malicious identity changes, -
23
CyFIR Investigator
CyFIR
CyFIR digital security and forensic analysis solutions provide unparalleled endpoint visibility, scalability, and speed to resolution. Cyber resilient organizations suffer little to no damage in the event of a breach. CyFIR cyber risk solutions identify, analyze, and resolve active or potential threats 31x faster than traditional EDR tools. We live in a post-breach world where data breaches are more frequent and more aggressive in their capacity to do harm. Attack surfaces are expanding beyond the walls of an organization to encompass thousands of connected devices and computer endpoints located throughout remote facilities, cloud and SaaS providers, controlled foreign assets, and other locations. -
24
Dynacop
Forty2 LLC
Dynacop is multi-factor authentication software that secures Windows console and RDP sign-ins while blocking malicious IPs. It adds a second verification layer by requiring a six-digit code from a mobile device after password entry, preventing unauthorized access from stolen credentials. The software supports shared accounts by enabling identity verification via a TOTP authenticator app, with audit logs tracking who accessed shared admin accounts. Dynacop Shield blocks attackers by analyzing failed login attempts, escalating block durations from 15 minutes to 24 hours for repeat offenders, with persistent attackers blocked longer. Installation is simple, requiring no Active Directory. Admins run the installer, register the machine, and invite users to enroll via TOTP apps like Google Authenticator. Compatible with Windows 10, 11, and Server 2012+, it works on domain and non-domain machines.Starting Price: $2/month/user -
25
CryptoSentry
SentryBay
CryptoSentry stops ransomware. Once installed on your employees’ devices, it will constantly monitor for suspicious encryption activity. Ransomware is the fastest growing cyber threat in recent years and it will affect your business unless you take action to stop the encryption of files before you are targeted. News headlines are frequently dominated by the damaging consequences of the latest ransomware attack from WannaCry, Petya and CryptoWall to CryptoLocker and Locky, and other less known variants which have had a significant impact on productivity and finance. Because ransomware is an attack on the availability of data, our CryptoSentry solution is designed to prevent it from getting access to data so it can encrypt files. Once installed on your employees’ devices, it will constantly monitor for suspicious encryption activity. If its algorithms determine a threat, it will proactively prevent file encryption. -
26
Radware Cloud Native Protector
Radware
Running workloads in the public cloud exposes them to cloud-native threats that differ from threats facing on-premise environments. Detect and stop malicious activity within your cloud environment. Radware provides comprehensive Cloud Threat Detection and Response (CTDR) capabilities so organizations not only detect suspicious activities in their cloud environments but also correlate them into streamlined attack storylines by displaying the step-by-step progression of attack activities so they can be stopped before they develop into a full data breach. Radware detects suspicious activity in your cloud environment using dedicated Malicious Behavior Indicators (MBIs) which are custom-tailored to the threats facing cloud environments. Moreover, Radware not only detects but correlates individual events across time, threat surfaces, and resources into unified attack storylines. It displays the step-by-step progression of attacks so they can be stopped before they develop into a breach. -
27
Cyble
Cyble
Cyble is a leading AI-native cybersecurity platform that delivers intelligence-driven defense to help organizations stay ahead of evolving cyber threats. Powered by its Gen 3 Agentic AI, Cyble offers autonomous threat detection, real-time incident response, and proactive defense mechanisms. The platform provides comprehensive capabilities including attack surface management, vulnerability management, brand protection, and dark web monitoring. Trusted by governments and enterprises worldwide, Cyble combines unmatched visibility with scalable technology to keep security teams ahead of adversaries. With advanced AI that can predict threats months in advance, Cyble helps reduce response times and minimize risks. The company also offers extensive research, threat intelligence reports, and personalized demos to support customer success. -
28
HUMAN Sightline Cyberfraud Defense
HUMAN Security
HUMAN Sightline Cyberfraud Defense is a fraud prevention and traffic governance platform designed to distinguish legitimate humans, bots, AI agents, and malicious activity across web, mobile, and API environments. The platform analyzes behavior across entire sessions and authentication stages rather than relying only on isolated requests or individual checkpoints. It is designed to detect and mitigate threats such as account takeover, fake accounts, scraping, compromised accounts, transaction abuse, and data contamination. Layered AI models continuously learn from detection and mitigation events to adapt to changing attacker techniques and traffic patterns. Security teams can use investigation and reporting capabilities to examine threat networks, understand attacker tactics, and respond more quickly to suspicious activity. -
29
AD Bridge
BeyondTrust
Extend Microsoft® Active Directory authentication, single sign-on capabilities, and group policy configuration management to Unix & Linux systems with AD Bridge. Consistent tools across the enterprise. Provide a single familiar toolset to manage both Windows and Unix/Linux systems. Streamline compliance processes. Provide thorough audit details to audit and compliance teams and manage group policies centrally. Extend security policies. Expand single sign-on (SSO) and file sharing, and control access to non-Windows systems. BeyondTrust AD Bridge centralizes authentication for Unix and Linux environments by extending Active Directory’s Kerberos authentication and single sign-on capabilities to these platforms. By extending group policy to non-Windows platforms, BeyondTrust provides centralized configuration management, reducing the risk and complexity of managing a heterogeneous environment. Extend native group policy management tools to include settings for Unix and Linux. -
30
Darktrace / IDENTITY
Darktrace
Darktrace / IDENTITY is an AI-native identity threat defense solution that unifies proactive risk management, real-time detection, investigation, and autonomous response across IT environments. It integrates with single sign-on and Active Directory to provide end-to-end visibility into user activity, monitoring access and post-authentication behavior across cloud, SaaS, hybrid, and on-premises systems. Self-Learning AI makes millions of calculations from real-time data to establish normal patterns for users, devices, applications, service accounts, and other identities, then identifies subtle deviations that may indicate account takeover, credential theft, session-token misuse, insider threats, lateral movement, or data exfiltration. Peer Group Analysis highlights behavior that differs from comparable users, while Credential Theft Monitoring combines human expertise with AI speed and scale. -
31
Netwrix Threat Prevention
Netwrix
Netwrix Threat Prevention Software is a real-time security solution designed to stop cyber threats before they cause damage. It monitors environments continuously to detect and block suspicious activities as they happen. The platform helps prevent insider threats by identifying unusual behavior and access anomalies. It provides real-time threat blocking to stop unauthorized changes to critical systems and assets. Netwrix Threat Prevention delivers actionable alerts with context, helping teams understand and respond quickly. It reduces the risk of attacker persistence by cutting off escalation paths immediately. The solution strengthens security by proactively preventing breaches rather than reacting after incidents occur. By combining detection and prevention, it helps organizations maintain a secure and resilient IT environment. -
32
Fasoo RiskView
Fasoo
Flag suspicious files and user activities that indicate sufficient risk for intervention by business management. This user and entity behavior analytics (UEBA) solution applies sophisticated rule-based modeling to data sources to establish normal patterns of behavior and help determine suspicious activities. Analysis can reduce the possibility of insider threats since they are difficult to detect due to privileged users having specific knowledge of security controls and methods to bypass them. Detect event anomalies, such as logins with user IDs of former employees, a given user logging in from multiple locations simultaneously, or unauthorized users retaining an excessive number of sensitive files. Monitor file-based risks, such as unauthorized users’ attempts to decrypt confidential files. Monitor user-based risks, such as decrypting files more frequently than usual, printing more files than usual after regular business hours, or sending files to external recipients more than usual. -
33
QOMPLX
QOMPLX
QOMPLX Identity Threat Detection and Response (ITDR) continuously validates to prevent network takeovers. QOMPLX ITDR uncovers existing Active Directory (AD) misconfigurations and detects attacks in real time. Identity security is essential to network operations. Verify identity in real-time. We verify everyone to prevent privilege escalation and lateral movement. We integrate with your current security stack and use it to augment our analytics resulting in comprehensive visibility. Understand the priority and severity of threats so resources can spend time where it matters most. Real-time detection and prevention stop attackers from bypassing security measures. From Active Directory (AD) security to red teaming and more, our experts are here to support your needs. QOMPLX enables clients to holistically manage and reduce cybersecurity risks. Our analysts will implement our SaaS solutions and monitor your environment. -
34
BeyondTrust Pathfinder
BeyondTrust
BeyondTrust Pathfinder offers a comprehensive identity-centric security platform designed to protect enterprises from privilege-based attacks by delivering visibility, control, and governance across human and non-human identities, credentials, and access paths. At the core is the Pathfinder Platform, which dynamically maps paths to privilege across endpoints, servers, clouds, IdPs, SaaS, and databases, exposing hidden over-privileged accounts, orphaned identities, and attack vectors. Other key components include Identity Security Insights for unified detection and risk-based prioritization of identity threats, Password Safe to discover, vault, manage and audit privileged credentials and session activity, Privileged Remote Access for secure, rule-based access with full session monitoring, Entitle for automating cloud permissions and just-in-time access, Endpoint Privilege Management for enforcing least-privilege on endpoints with application control and file-integrity monitoring. -
35
XyLoc Security Server
Ensure Technologies
The XyLoc® Security Server (XSS) is a server-based software platform, with a web-based GUI, that centrally manages and monitors XyLoc users and protected workstations throughout the enterprise. XSS allows IT managers to easily implement and administer XyLoc across multiple network segments and user groups, and also enables detailed reporting and compliance auditing. Simplifies the administration, reporting, and management of XyLoc user environments. Monitors and logs all log-on, secure walk-away, and return (e.g., walk-up recognition) activities. Integrates seamlessly with XyLoc Single Sign-On for full SSO management and activity reporting. Enables fast, secure access to information in a multi-user, shared computer environment (e.g., “Kiosk Accounts”). Provides compliance reporting (e.g., HIPAA) with encrypted user audit logs. Scales easily to support tens of thousands of users. Supports Active Directory® (AD) with a Schema Extension, and SQL Server® environments. -
36
SQL Compliance Manager
IDERA, an Idera, Inc. company
SQL Compliance Manager helps database administrators to monitor, audit, and alert on SQL Server user activity and data changes. Unlike its competition, it provides quick configuration of audit settings, a broad list of regulatory guideline templates for audit settings and reports, before and after data values for both regulatory compliance and forensic data investigations, differentiation of data access and between regular and privileged users and applications, easy specification of and reporting on sensitive data columns access and changes, and extensive customization of audit settings for databases and servers.Starting Price: $3,036.00 per instance -
37
Falcon Insight
CrowdStrike
Continuous monitoring captures endpoint activity so you know exactly what’s happening - from a threat on a single endpoint to the threat level of the organization. Falcon Insight delivers visibility and in-depth analysis to automatically detect suspicious activity and ensure stealthy attacks - and breaches - are stopped. Falcon Insight accelerates security operations, allowing users to minimize efforts spent handling alerts and reduce time to investigate and respond to attacks. Unravels entire attack in the easy-to-use Incident Workbench enriched with context and threat intelligence data. CrowdScore delivers situational awareness on the current threat level of the organization, and how it’s changing over time. Powerful response actions allow you to contain and investigate compromised systems, including on-the-fly remote access to take immediate action. -
38
The enterprise backup and restoration tool. No IT environment is immune to accidental deletions or modifications; on-premises Active Directory (AD), Azure Active Directory, Microsoft Office 365, and Exchange environments are no exception. RecoveryManager Plus can help you overcome any disaster caused by unwanted changes in your IT environment. Back up your AD, Azure Active Directory, Microsoft Office 365, and Exchange environments from a single console and restore any object, site, or mailbox whenever you need it. Back up all changes made to schema classes and attributes, and instantly restore them when needed. Back up all AD objects like users, groups, GPOs, OUs, Exchange attributes, DNS information, computers, and contacts, and restore them either partially or completely. Perform recovery operations without having to restart your DCs, thus ensuring continuous availability of DCs.s.
-
39
Corner Bowl Server Manager
Corner Bowl Software Corporation
SIEM, Log Management, Server Monitoring and Uptime Monitoring Software for Less! Industry leading free and responsive phone and remote session support when you need it the most. Get compliant by centrally storing Event Logs, syslogs and application logs from any system or device. Receive real-time notifications when users login, accounts are locked out and accounts are changed. Satisfy auditing requirements such as JSIG and NIST with our out-of-the-box SIEM and security reports. Monitor server resources such as CPU, memory, disk space, directory size and process specific resource consumption. Restart services, kill processes, remote launch custom scripts and fire SNMP Traps. Generate file and directory user access audit reports. Receive SNMP Traps, monitor SNMP Get values and much more. Get real-time notifications when network performance degrades below acceptable performance thresholds. Monitor web, email, database, FTP, DNS and Active Directive servers. Monitor Docker Containers.Starting Price: $20 one-time fee -
40
WiKID Authentication System
WiKID Systems
Easily meet PCI-DSS 3.2 with our latest release. Use WiKID two-factor authentication for service and privileged accounts instead of sharing passwords and storing them in spreadsheets or vaults. Prevent pass-the-hash attacks and stop attackers from escalating to admin rights! See how to set it up. Our Enterprise version is free for up to 5 users. Perfect for small organizations or large enterprises that need extended testing. This is the complete Enterprise version, not crippleware. Thanks to broad protocol support - RADIUS, LDAP, TACACS+, SAML and native Active Directory WIKID works with all your remote access and privileged access management tools, including Cisco, Checkpoint, Fortinet, pfSense, and all enterprise-class VPN solutions whether IPSec, PPTP or SSL. We've helped hundreds of organizations implement two-factor authentication using standard protocols. Download our eGuide on how to integrate Active Directory for authorization.Starting Price: $2.00/month/user -
41
Trusted Access Manager for Z
Broadcom
Reduce the risk of insider threats, from malicious attacks to inadvertent threats. Trusted Access Manager for Z helps deliver trusted systems and improve business efficiency through comprehensive privileged access management for your mainframe. By eliminating the need for shared credentials, working with existing tools, and producing forensics on all privileged user activity, you stay in complete control over vital mainframe data. Restrict users who have access to a privileged state and timebox the elevation duration to reduce the risk of insider threats. Simplify auditing by eliminating privileged credential sharing and maintaining a complete line of sight into individual privileged user activities. Maintain complete control of when users have access to the most sensitive data in the business, to deliver trusted systems and operate efficiently. Transform your company and build your career with Broadcom training, certifications, and resources. -
42
Cellebrite
Cellebrite
All the functionality you need to conduct in-depth analysis and generate custom reports to reveal the truth. With advanced searching and filtering capabilities, and built-in AI media categorization, investigators easily find Internet History, Downloads, Locations, Recent searches, and more. Obtain user activity from Windows memory, and get registry artifacts including jump list, Windows 10 timeline activity, shellbags, SRUM, and more. Review device history from Windows Volume Shadow Copies. Review history in APFS Snapshots and Time Machine backups, display and search Spotlight metadata and KnowledgeC data, review network connections, recent documents, user activity, and more. Ingest data into Cellebrite Pathfinder, Berla, APOLLO and, ICAC tools such as Project Vic and PhotoDNA. Share your case findings with other stakeholders using customized reporting capabilities. The most complete workstation designed to handle the most rigorous datasets for digital intelligence and eDiscovery. -
43
Cayosoft Guardian
Cayosoft
Your Active Directory (AD) or Azure Active Directory (Azure AD) contain vital user identities that are crucial to ensuring your business operates without interruption. Whether from malicious actions, like cyberattacks and malware, or mistakes, like accidental deletions and misconfigurations, corruption of your Active Directory can stop your business in its tracks and cause costly outages that can last hours, days, or even weeks. Cayosoft Guardian was designed to reduce the complexity of hybrid Active Directory security, by combining threat detection, monitoring, and recovery into one comprehensive solution. Cayosoft Guardian continuously monitors directories and services, allowing you to isolate suspect changes and immediately recover unwanted changes made to both objects and settings. This is done across on-premises AD, hybrid AD, Azure AD, Office 365, Microsoft Teams, and Exchange Online, all from Cayosoft Guardian’s single, unified console. -
44
Netwrix Identity Recovery
Netwrix
Netwrix Identity Recovery is a multi-platform identity recovery solution designed to restore and protect identity systems across Active Directory, Entra ID, and Okta. It enables organizations to quickly recover from accidental changes, cyberattacks, or system failures that impact identity infrastructure. The platform provides granular rollback capabilities to restore specific objects, attributes, or configurations without affecting the entire environment. It offers full visibility into changes with timeline-based tracking to simplify troubleshooting and recovery processes. Netwrix Identity Recovery helps minimize downtime by enabling fast and precise restoration of identity services. It supports automated Active Directory forest recovery to ensure rapid restoration after ransomware or major disruptions. The solution reduces the risk of breaches by reversing unauthorized or harmful changes before they can be exploited. -
45
OSForensics
PassMark Software
Extract forensic data from computers, quicker and easier than ever. Uncover everything hidden inside a PC. Discover relevant data faster through high performance file searching and indexing. Extract passwords, decrypt files and recover deleted files quickly and automatically from Windows, Mac and Linux file systems. Identify evidence and suspicious activity through our hash matching and drive signature analysis features. Identify and analyze all files and even automatically create a timeline of all user activity. 360° Case Management Solution. Manage your entire digital investigation with OSF’s new reporting features. Build custom reports, add narratives and even attach your other tools’ reports to the OSF report. Volatility Workbench is a graphical user interface (GUI) for the Volatility tool. OSForensics courses offered to suit a diverse range of users and skill sets. Write an image concurrently to multiple USB Flash Drives.Starting Price: $799 per user per year -
46
Falcon Identity Threat Detection
CrowdStrike
Falcon Identity Threat Detection lets you see all Service and Privileged accounts on your network and cloud with full credential profiles and weak authentication discovery across every domain. Analyze every domain in your organization for potential vulnerability from stale credentials, and weak or stale passwords, see all service connections and weak authentication protocols in use. Falcon Identity Threat Detection monitors the domain controllers on-premises or in the cloud (via API) to see all authentication traffic. It creates a baseline for all entities and compares behavior against unusual lateral movement, Golden Ticket attacks, Mimikatz traffic patterns and other related threats. It can help you see Escalation of Privilege and anomalous Service Account activity. Falcon Identity Threat Detection reduces the time to detect by viewing live authentication traffic, which expedites finding and resolving incidents. -
47
Sec3
Sec3
Monitor your protocol for suspicious on-chain activity in real time with WatchTower. Receive instant alerts when anomalous behavior is detected, and combine with CircuitBreaker to crush malicious attacks before they gain traction. Automated post-deployment security for smart contracts. Sec3 Pro provides advanced security tools to protect protocols. Led by in-depth research and analysis, our goal is to make development as seamless and secure as possible. Fortify your protocol and launch with confidence using our industry-leading skills and expertise. Our auditors will comb your code for vulnerabilities, and work with you to strengthen it against malicious attacks. No matter where you are in the development cycle, Sec3 can secure your protocol. We’ll work with you to secure your code as you build it, or audit it in its entirety once you’ve completed an MVP. And if you ship further improvements after release, we’ll stay with you to ensure your protocol evolves safely.Starting Price: Free -
48
XYGATE SecurityOne
XYPRO
XYGATE SecurityOne is next-generation risk management and security analytics platform with all the necessary components to ensure your team is ready to face security threats. SecurityOne combines patented contextualization technology, real-time threat detection, integrity monitoring, compliance, privileged access management and much more, through a unified browser-based dashboard, deployable on-premise or in the cloud. SecurityOne strengthens your team with real-time threat and compliance data to ensure they can respond to risks quickly all while saving time, increasing the operational efficiency of your resources, and maximizing the return on your security investment. XYGATE SecurityOne® provides real-time security intelligence and analytics for the HPE integrity NonStop server. XYGATE SecurityOne is designed to actively detect NonStop specific indicators of compromise and alert on suspicious activity. -
49
Quest Migrator Pro for Active Directory
Quest Software
Migrator Pro for Active Directory is a highly secure and customizable Active Directory migration tool that lets you merge, consolidate, or restructure your Active Directory environment. You can keep users, devices, and applications in sync, adapt the tool to your unique requirements, and migrate remote workstations even when they aren’t connected to the corporate network. Migrator Pro for Active Directory (formerly Active Directory Pro) automates the restructuring, consolidation, and separation of Active Directory environments. This Active Directory migration tool synchronizes and migrates objects, settings, properties, workstations,s, and servers within and between AD forests–even if they’re disconnected or are on isolated networks. You can safely migrate during normal business hours as your users can keep working during the migration without interruption. Migrator Pro for Active Directory is highly secure as it does not use RPC or remote registry access. -
50
M365 Manager Plus is an extensive Microsoft 365 tool used for reporting, managing, monitoring, auditing, and creating alerts for critical activities. With its user-friendly interface, you can easily manage Exchange Online, Azure Active Directory, Skype for Business, OneDrive for Business, Microsoft Teams, and other Microsoft 365 services all from one place. M365 Manager Plus provides exhaustive preconfigured reports on Microsoft 365 and helps you perform complex tasks including bulk user management, bulk mailbox management, secure delegation, and more. Monitor Microsoft 365 services around the clock, and receive instant email notifications about service outages. M365 Manager Plus eases compliance management with built-in compliance reports and offers advanced auditing and alerting features to keep your Microsoft 365 setup secure.Starting Price: $345 per year
