Freedom251 › Identity Threat Detection and Response Software
Whiteswan Active Directory ITDR & Protection
Visit Whiteswan Active Directory ITDR & Protection Alternatives
What Whiteswan Active Directory ITDR & Protection is
Whiteswan Active Directory ITDR & Protection adds an in-line identity security layer to on-premises Active Directory. It monitors and enforces identity activity after authentication, using lightweight endpoint agents on Windows and Linux to evaluate activity against Whiteswan’s policy engine. Its stated threat coverage includes DCSync, Pass-the-Ticket, Golden Ticket creation, unauthorized LDAP queries, lateral movement, privilege abuse, and directory attacks. The product also offers automated response and covers human and machine identities.
Whiteswan’s platform discovers and maps on-premises service accounts, which the policy engine then governs. Active Directory activity shares a decision engine with Whiteswan’s other identity surfaces and adds to a unified audit trail. Whiteswan says deployment does not require changes to the Active Directory schema, forest trusts, or domain controller configuration. It works alongside identity infrastructure including Okta, Microsoft, and AWS.
Whiteswan says policy decisions, audit logs, and credentials are encrypted in transit and at rest, with keys managed separately from protected data. The company describes its controls as designed and internally tested against SOC 2 Type II and ISO 27001 criteria, but says these are not independent certifications. Pricing is available by quote. The product page invites organizations to scope a pilot, and Premium Support is provided to all users.
Who it suits
It suits enterprise security teams monitoring on-premises Active Directory, including organizations in banking, healthcare, manufacturing, insurance, and government. Managed service providers may also find the multi-tenant console relevant to their work.
What it does well
- Detects listed threats including DCSync and Golden Ticket creation.
- Provides automated response and covers human and machine identities.
- Governs discovered on-premises service accounts through its policy engine.
- Does not require changes to key Active Directory configurations.
- Encrypts policy decisions, audit logs, and credentials in transit and at rest.
What to know first
- Pricing is available only by request.
- The stated SOC 2 and ISO controls are not independent certifications.
Getting started
- Visit the Whiteswan Active Directory ITDR & Protection website.
- Contact Whiteswan to request a quote.
- Scope a pilot with Whiteswan for your identity infrastructure.
- Deploy lightweight endpoint agents on Windows and Linux.
Verdict
Choose Whiteswan Active Directory ITDR & Protection if your organization needs in-line monitoring and enforcement for on-premises identity activity, including service-account governance and response to listed directory threats. It is also positioned for managed service providers through a multi-tenant console. Buyers seeking a published price or independently certified SOC 2 Type II or ISO 27001 status should look elsewhere.
Questions
What does Whiteswan Active Directory ITDR & Protection cost?
Whiteswan provides pricing on request. The contact page directs prospective buyers to request a quote.
Which platforms does it support?
The Active Directory surface uses lightweight on-premises endpoint agents for Windows and Linux.
What threats does it address?
The listed threats include DCSync, Pass-the-Ticket, Golden Ticket creation, unauthorized LDAP queries, and lateral movement. The product also lists privilege abuse and directory attack detection.
Does it require changes to Active Directory?
Whiteswan says it does not require changes to the Active Directory schema, forest trusts, or domain controller configuration.
Does it offer a trial?
The product page invites organizations to scope a pilot. It does not state a trial duration.
Are its SOC 2 and ISO 27001 controls independent certifications?
No. Whiteswan says its controls are designed and internally tested against those criteria, and clarifies that they are not independent certifications.
Facts from Whiteswan Active Directory ITDR & Protection's own pages
- Certifications
- Whiteswan says its controls are designed and internally tested against SOC 2 Type II and ISO 27001 criteria, and that these are not independent certifications. · whiteswansecurity.com, 9 Oct 2026
- Compliance status
- The vendor says its controls are designed and tested against SOC 2 Type II and ISO 27001 criteria, and clarifies these are not formal third-party certifications. · whiteswansecurity.com, 9 Oct 2026
- Data handling
- Whiteswan says it processes access decisions and audit metadata rather than the underlying application data, while residency, retention, and deletion terms are set in the customer agreement. · whiteswansecurity.com, 9 Oct 2026
- Deployment
- The Active Directory surface uses lightweight on-premises endpoint agents for Windows and Linux. · whiteswansecurity.com, 9 Oct 2026
- Deployment requirement
- The product does not require changes to the Active Directory schema, forest trusts, or domain controller configuration. · whiteswansecurity.com, 9 Oct 2026
- Directory changes
- Whiteswan says it does not require changes to the Active Directory schema, forest trusts, or domain controller configuration. · whiteswansecurity.com, 9 Oct 2026
- Endpoint agents
- Lightweight endpoint agents evaluate identity activity against Whiteswan’s policy engine in-line on Windows and Linux. · whiteswansecurity.com, 9 Oct 2026
- Headquarters
- San Jose, California, United States · whiteswansecurity.com, 28 Sept 2026
- Integrations
- Whiteswan says it works alongside identity infrastructure including Okta, Microsoft, and AWS. · whiteswansecurity.com, 9 Oct 2026
- Intended customers
- The vendor describes the platform as an enterprise identity security product and lists industries including banking, healthcare, manufacturing, insurance, and government. · whiteswansecurity.com, 9 Oct 2026
- Intended users
- Whiteswan presents the platform for enterprise security teams and also describes a multi-tenant console for managed service providers. · whiteswansecurity.com, 9 Oct 2026
- Pricing
- The contact page offers quote requests and pricing inquiries but does not state a price or named plan. · whiteswansecurity.com, 9 Oct 2026
- Product scope
- Whiteswan describes Active Directory protection as an in-line identity security layer for monitoring and enforcing on-premises identity activity after authentication. · whiteswansecurity.com, 9 Oct 2026
- Purpose
- Whiteswan’s Active Directory surface provides in-line inspection and enforcement of on-prem identity activity after authentication. · whiteswansecurity.com, 9 Oct 2026
- Sales and trial
- The product page invites organizations to scope a pilot, while the contact page directs prospective buyers to request a quote; neither page states a trial duration or public price. · whiteswansecurity.com, 9 Oct 2026
- Security
- Whiteswan says policy decisions, audit logs, and credentials are encrypted in transit and at rest, with keys managed separately from the protected data. · whiteswansecurity.com, 9 Oct 2026
- Security controls
- The company says policy decisions, audit logs, and credentials are encrypted in transit and at rest, with keys managed separately from the data. · whiteswansecurity.com, 9 Oct 2026
- Service accounts
- The platform says it discovers and maps on-premises service accounts and governs them through its policy engine. · whiteswansecurity.com, 9 Oct 2026
- Support
- The contact page describes Premium Support as a service provided to all users and offers meetings scoped to a customer’s identity infrastructure. · whiteswansecurity.com, 9 Oct 2026
- Threat coverage
- The platform page lists DCSync, Pass-the-Ticket, Golden Ticket creation, unauthorized LDAP queries, and lateral movement among the Active Directory threats it addresses. · whiteswansecurity.com, 9 Oct 2026
- Unified policy and audit
- Active Directory activity uses the same decision engine as the platform’s other identity surfaces and contributes to a unified audit trail. · whiteswansecurity.com, 9 Oct 2026