Commvault Advances Identity Resilience, Enabling Customers to Identify and Manage Hidden Risks in Identity Systems Before Attackers Exploit Them

Commvault (NASDAQ: CVLT) announced new identity resilience capabilities designed to help organizations identify risks and restore trusted access.

Rhea-AI Summary

Commvault (NASDAQ: CVLT) announced new identity resilience capabilities designed to help organizations identify risks and restore trusted access.

Cross-provider identity auditing will track changes to identities, permissions and access configurations across Active Directory, Entra ID and Okta. Identity attack intelligence will identify Tier 0 assets—the most privileged identity assets—and who controls them. AI-guided recommendations are designed to help address risky access and support rollback and recovery of trusted configurations.

Identity attack intelligence and cross-provider identity auditing are planned for early access in the coming quarters as part of Commvault IDRecover.

Key Terms

identity providers, non-human identities

2 terms

identity providers technical

"80%1 of large enterprises using multiple identity providers"

A service that creates, verifies and vouches for digital identities so people or systems can prove who they are online. Identity providers perform authentication (confirming a user is who they claim to be), often issuing tokens or credentials that other services accept for single-sign-on or permission checks, and may connect to identity documents, biometric checks, or third-party verification for stronger assurance. They do not themselves decide what a user is allowed to do (authorization) except when combined with the relying service’s rules, and different providers use standards such as SAML, OAuth or OpenID Connect to interoperate.

non-human identities technical

"complexity across human and non-human identities"

Non-human identities are legal or digital identities assigned to machines, software agents, Internet-of-Things devices, or automated accounts so they can act, communicate, and be tracked separately from people. For investors this matters because these identities affect who is legally responsible, how transactions are authenticated, and how automated systems impact revenue or liability — think of them like a licensed driver’s license or bank account for a robot or software agent.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

New capabilities will alert organizations to identity risks across Active Directory, Entra ID, and Okta, identify Tier 0 exposure, and provide a guided path to remediation

TINTON FALLS, N.J. , Oct. 28, 2026 /PRNewswire/ -- Commvault (NASDAQ: CVLT), delivering continuous recovery for the AI era, today announced new identity resilience capabilities that will help organizations discover changes across a wide range of identity environments, understand their Tier 0 exposure, and quickly remediate associated risks.

Identity systems are a prime target for attackers because they can offer fast access to critical enterprise resources. With 80%¹ of large enterprises using multiple identity providers, including Active Directory, Entra ID, and Okta, organizations face growing complexity across human and non-human identities, permissions, and policies.

Commvault's latest capabilities give identity, IT, and security teams more awareness, control, and response capabilities that take identity resilience to the next level, including:

• Continuously detecting changes across identity providers: Cross-provider identity auditing will give administrators visibility into a broad range of changes affecting identities, permissions and the configurations that govern access across Active Directory, Entra ID, and Okta environments.
• Uncovering Tier 0 exposures: Identity attack intelligence capabilities will identify an organization's most privileged identity assets and reveal who has control over them. By having a complete view – a Tier 0 inventory – teams can uncover hidden risks that otherwise could give attackers control of critical identity systems.
• Guiding remediation and recovery: AI-guided recommendations help teams understand why exposure exists and how to address risky access, while supporting rollback of unwanted changes and recovery of trusted identity configurations.

"Attackers don't need to compromise every system. They just need to compromise the identities that control them," said Pranay Ahlawat, Chief Technology & AI Officer, Commvault. "As AI agents and non-human identities proliferate, this risk is only growing. Our goal is simple: help customers understand who controls their most critical identity infrastructure, identify dangerous changes, and restore trusted access when things go wrong."

"Identity threat detection and response leads identity security priorities and resilience ranks next, yet only 47% of organizations have a completed identity recovery plan," says Emanuel Figueroa, Senior Research Analyst for Identity and Access Management Security, IDC. "Breaking the kill chain ends the attack, but not its aftermath: changed permissions, group memberships, policies, and trust relationships can persist after access is revoked. Access controls can't by themselves return a directory to a verified state, so recovery is becoming a distinct buying criterion. Commvault's extension of recovery across Active Directory, Entra ID, and Okta shows data-protection vendors are moving to meet it."

Global Availability
Identity attack intelligence and cross-provider identity auditing are planned for early access in the coming quarters. They will be offered as part of Commvault IDRecover – a portfolio of innovations that help organizations uncover identity risk, monitor and detect suspicious changes, and rapidly restore trusted access when identity systems are compromised.

Learn More in Nashville at SHIFT 2026
Learn more about this announcement at SHIFT 2026, where attendees will explore the new rules of resilience in the age of AI and learn how recovery, visibility, and cyber resilience can help organizations adopt AI with confidence. SHIFT 2026 will be the boldest event in the company's history, enabling attendees to explore and immerse themselves in the new rules of resilience – and it all starts with AI. You can register for your place here.

About Commvault
Commvault (NASDAQ: CVLT) delivers continuous recovery for the AI era. We help organizations stay ready for constant disruption by returning critical data, applications, identities, and AI systems to a clean, trusted state. Our purpose-built recovery solutions span cloud-native and hybrid environments, leveraging AI to enable resilience at enterprise scale.

¹ Strata. (2025). The State of Multi-Cloud Identity Survey – Insights and Trends for 2025. https://www.strata.io/wp-content/uploads/2024/10/State-of-Multi-Cloud-Identity-Survey_Strata-Identity_20241023.pdf 

View original content to download multimedia:https://www.prnewswire.com/news-releases/commvault-advances-identity-resilience-enabling-customers-to-identify-and-manage-hidden-risks-in-identity-systems-before-attackers-exploit-them-302921448.html

SOURCE COMMVAULT

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

When will Commvault's new identity resilience capabilities be available?

Identity attack intelligence and cross-provider identity auditing are planned for early access in the coming quarters. Both will be offered as part of Commvault IDRecover.