Commvault Advances Identity Resilience, Enabling Customers to Identify and Manage Hidden Risks in Identity Systems Before Attackers Exploit Them

New capabilities will alert organizations to identity risks across Active Directory, Entra ID, and Okta, identify Tier 0 exposure, and provide a guided path to remediation

TINTON FALLS, N.J. , Oct. 28, 2026 /PRNewswire/ -- Commvault (NASDAQ: CVLT), delivering continuous recovery for the AI era, today announced new identity resilience capabilities that will help organizations discover changes across a wide range of identity environments, understand their Tier 0 exposure, and quickly remediate associated risks.

Identity systems are a prime target for attackers because they can offer fast access to critical enterprise resources. With 80%¹ of large enterprises using multiple identity providers, including Active Directory, Entra ID, and Okta, organizations face growing complexity across human and non-human identities, permissions, and policies.

Commvault's latest capabilities give identity, IT, and security teams more awareness, control, and response capabilities that take identity resilience to the next level, including:

• Continuously detecting changes across identity providers: Cross-provider identity auditing will give administrators visibility into a broad range of changes affecting identities, permissions and the configurations that govern access across Active Directory, Entra ID, and Okta environments.
• Uncovering Tier 0 exposures: Identity attack intelligence capabilities will identify an organization's most privileged identity assets and reveal who has control over them. By having a complete view – a Tier 0 inventory – teams can uncover hidden risks that otherwise could give attackers control of critical identity systems.
• Guiding remediation and recovery: AI-guided recommendations help teams understand why exposure exists and how to address risky access, while supporting rollback of unwanted changes and recovery of trusted identity configurations.

"Attackers don't need to compromise every system. They just need to compromise the identities that control them," said Pranay Ahlawat, Chief Technology & AI Officer, Commvault. "As AI agents and non-human identities proliferate, this risk is only growing. Our goal is simple: help customers understand who controls their most critical identity infrastructure, identify dangerous changes, and restore trusted access when things go wrong."

"Identity threat detection and response leads identity security priorities and resilience ranks next, yet only 47% of organizations have a completed identity recovery plan," says Emanuel Figueroa, Senior Research Analyst for Identity and Access Management Security, IDC. "Breaking the kill chain ends the attack, but not its aftermath: changed permissions, group memberships, policies, and trust relationships can persist after access is revoked. Access controls can't by themselves return a directory to a verified state, so recovery is becoming a distinct buying criterion. Commvault's extension of recovery across Active Directory, Entra ID, and Okta shows data-protection vendors are moving to meet it."

Global Availability
Identity attack intelligence and cross-provider identity auditing are planned for early access in the coming quarters. They will be offered as part of Commvault IDRecover – a portfolio of innovations that help organizations uncover identity risk, monitor and detect suspicious changes, and rapidly restore trusted access when identity systems are compromised.

Learn More in Nashville at SHIFT 2026
Learn more about this announcement at SHIFT 2026, where attendees will explore the new rules of resilience in the age of AI and learn how recovery, visibility, and cyber resilience can help organizations adopt AI with confidence. SHIFT 2026 will be the boldest event in the company's history, enabling attendees to explore and immerse themselves in the new rules of resilience – and it all starts with AI. You can register for your place here.

About Commvault
Commvault (NASDAQ: CVLT) delivers continuous recovery for the AI era. We help organizations stay ready for constant disruption by returning critical data, applications, identities, and AI systems to a clean, trusted state. Our purpose-built recovery solutions span cloud-native and hybrid environments, leveraging AI to enable resilience at enterprise scale.

¹ Strata. (2025). The State of Multi-Cloud Identity Survey – Insights and Trends for 2025. https://www.strata.io/wp-content/uploads/2024/10/State-of-Multi-Cloud-Identity-Survey_Strata-Identity_20241023.pdf 

SOURCE COMMVAULT