CrowdStrike Named Overall Leader in 2025 KuppingerCole ITDR Leadership Compass

CrowdStrike has been named the Overall Leader in the 2025 KuppingerCole Leadership Compass for Identity Threat Detection and Response (ITDR), positioned furthest to the right. This validates our ongoing mission to secure every identity — human, non-human, and AI agent.

We are recognized as a Leader across all key categories: Product, Innovation, Market, and Overall Ranking. We also achieved near-perfect scores across Discovery, Visibility, Risk Assessment, Detection, Incident Investigation, Response and Remediation, Identity Posture, and Identity Deception.

CrowdStrike's leadership position demonstrates the unmatched strength of our adversary-focused approach to identity security at a time when identity is the front line of cyberattacks. Adversaries are targeting human and non-human identities, SaaS credentials, and now AI agents. Businesses must plan their identity security strategy to account for this risk.

We are committed to innovating to protect organizations from these modern threats and redefining identity security with CrowdStrike Falcon® Next-Gen Identity Security, built on the unified CrowdStrike Falcon® platform and managed from a single console.

“CrowdStrike was recognized as the overall leader in the ITDR Leadership Compass, earning the highest rating for innovation, particularly for its strong integration of identity detections within the Falcon platform,” said Alejandro Leal, Senior Analyst at KuppingerCole. “Platform approaches like CrowdStrike’s, which provide unified visibility across the identity stack, are essential for securing both human and non-human identities as organizations automate and scale.”

The Leader in Identity Security Innovation

CrowdStrike received the highest position in Innovation among all vendors evaluated by KuppingerCole. We believe this is a testament to our cutting-edge capabilities, including advanced AI and ML-driven detections, behavioral analytics, automated identity-centric response actions, and deception-based defenses.

The cloud-native architecture of Falcon Next-Gen Identity Security provides unmatched scalability and speed, allowing organizations to stay ahead of adversaries with minimal on-premises footprint. “Delivered via a single lightweight Falcon sensor, CrowdStrike’s architecture ensures real-time detection and automated response to threats across endpoint, cloud, SaaS, and identity environments,” KuppingerCole said in its report.

KuppingerCole emphasized how Falcon Next-Gen Identity Security provides visibility into identity environments spanning Active Directory, Entra ID, Okta, Ping, and AWS IAM Identity Center, as well as SaaS applications through CrowdStrike Falcon® Shield. Falcon Next-Gen Identity Security also offers a classification framework to distinguish human and non-human identities, including service accounts and AI agents, applying AI-driven behavioral and attribute-based models.

The breadth of CrowdStrike’s detection capabilities is also highlighted: “Falcon Next-Gen Identity Security delivers broad, production-grade coverage across Discovery, Visibility, Posture, Detection and Correlation, Incident Investigation, Automated Response, and Recovery, with deep integrations into XDR, SIEM, SOAR, IdPs, IGA, PAM, and ITSM systems.”

Below is a full list of Falcon Next-Gen Identity Security’s extensive capabilities:

• Comprehensive protection for human, non-human, and AI agents that unifies ITDR, SaaS security, privileged access, and multifactor authentication across hybrid infrastructure (Watch demo: Falcon Next-Gen Identity Security)
• Enhanced protection for non-human identities and AI agents (Watch demo)
• CrowdStrike Falcon® Privileged Access, which uses high-fidelity risk signals to provide just-in-time access to organizations’ critical permissions and resources (Watch demo)
• Agentic AI-powered detection and response (Watch demo: Stop Lateral Movement)
• CrowdStrike Falcon® Adversary OverWatch™ Identity Threat Hunting with expert-driven 24/7 proactive threat detection and mitigation

The Power of the Unified Falcon Platform

CrowdStrike stands apart with its unified platform approach, which tightly integrates identity security with endpoint protection, cloud security, and threat intelligence to deliver holistic visibility and rapid response to identity threats. 

This integrated approach accelerates response times for Falcon Next-Gen Identity Security, delivered through the Falcon platform. CrowdStrike’s projections show up to 85% faster detection of identity attacks and 84% increase in operational efficiency.¹

“CrowdStrike’s unified platform approach simplifies adoption and accelerates outcomes compared to siloed tools, making it the clear choice for organizations looking to consolidate their security operations and identity management,” KuppingerCole states.

The Future of Identity Security

With this latest recognition by KuppingerCole, CrowdStrike solidifies its position as the definitive leader in identity threat detection and response, paralleling our continued industry leadership in endpoint security, cloud security, managed detection and response, threat intelligence, and vulnerability management.

Falcon Next-Gen Identity Security protects identities across the entire attack chain — from initial access and privilege abuse to lateral movement and impact — by combining ITDR with secure privileged access, posture management, and SaaS security. 

Additional Resources

• Download the Complete Guide to Next-Gen Identity Security.
• Read the 2025 KuppingerCole Leadership Compass for Identity Threat Detection and Response.

1. These numbers reflect the median inputs provided by customers during pre- and post-sale motions that compare the value of CrowdStrike with incumbent solutions and are not guaranteed. They are intended to demonstrate potential value compared to incumbent solutions and do not represent promised outcomes. Actual value realized will depend on individual customer module deployment and environment.