Forrester Total Economic Impact of Semperis

Forrester Finds Semperis Delivers $9.5M Three-Year Value

Forrester analysts interviewed Semperis customers across healthcare, financial services, consulting, and energy sectors to determine the quantifiable outcomes of using Semperis’ identity resilience platform. The Forrester Total Economic Impact of Semperis study uncovered economic benefits totaling $9.5M, including reduced time to recover the AD forest, reduced likelihood of a successful AD attack, time savings in managing object- and group-level recovery, and time savings in monitoring the hybrid AD environment.

Get the report

Semperis customers save time and reduce risk in protecting identity systems

The Forrester Total Economic Impact of Semperis study determined the quantifiable benefits of using the Semperis identity resilience platform, including savings in time to recover the AD forest, continuously monitor the hybrid AD environment, and manage object- and group-level recovery. The study also found that organizations using Semperis identity threat prevention, detection, and response solutions reduce the likelihood of a successful AD attack by 25%. Forrester analysts projected total quantifiable benefits over 3 years of $9.5M for customers using the Semperis ITDR platform.

Get the report

90%

faster AD forest recovery

25%

reduction in the likelihood of a successful AD attack

90%

faster object- and group-level recovery

40%

reduction in time spent monitoring the hybrid AD environment

DSP gives us immediate knowledge if [a threat] is lying dormant. It gives us protection, so that if something happens in our AD environment, we can just roll back the change. For example, if a threat actor gets into our Active Directory and makes 18 changes, Semperis can just roll all 18 right back for us and we don’t have to do any recovery. It’s a holy-grail product.
CISO US healthcare organization

Semperis customers save time and reduce risk

Forrester Total Economic Impact of Semperis quantifiable benefits

Forrester analysts interviewed IT and security leaders from Semperis customer organizations across healthcare, consulting, financial services, and energy sectors to uncover the economic benefits organizations had gained from using Semperis’ identity resilience platform. Before investing in Semperis, organizations said they encountered challenges including operational inefficiencies that put them at heightened risk of a successful AD-related cyberattack. After investing in Semperis, customers reported gains in security posture and operational efficiencies that totaled $9.5M in total value over three years, including:

Improved business continuity due to faster AD attack recovery yielding $3.9 million in savings
Improved business continuity through a reduction in the likelihood of a successful hybrid AD attack worth $1.2 million
Object- and group-level remediation savings worth $4.3 million
Hybrid AD environment monitoring efficiencies that save $109,000

We initially went with Semperis because they are the market leader in the space, but their solution has actually delivered value to our organization. Their patented technology for malware or wiper attack recovery of AD along with our newfound full visibility into our AD environment has delivered great results.
Technical Architect, AD Global consulting firm

If you don’t learn from what happens to someone in your industry, then you’re sticking your head in the sand. So, we got up and said, ‘What can we do differently?’ and Semperis was part of a total package we put together to help solve that problem. It doesn’t mean that bad things aren’t going to happen, but instead of being down for weeks, we’re down for hours.
CISO US healthcare organization

We chose Semperis because it simplifies the remediation process. With DSP, we no longer need subject-matter experts to be the gatekeeper of fixing issues when they arise.
Manager, Identity Management and Engineering US healthcare organization

DSP is a solution that is actively watching our Active Directory environment on our behalf. In many ways, it allows us to set it and forget it. It protects our IT teams from having to wear multiple hats and allows them to focus on other things.
CISO US healthcare organization

In the event of a ransomware attack, [Semperis] ensures we can easily recover our AD in hours versus weeks or months. … To know that we have a viable alternative when the worst of the worst happens allows us to sleep better at night.
CISO US healthcare organization

How Semperis addresses key security and recovery challenges

Before investing in Semperis, the Forrester study participants described challenges include disparate security tools, cumbersome manual processes, and lack of visibility into threats across the hybrid AD environment, leading to an increased risk of a successful AD-related cyberattack. After Semperis, organizations saw measurable improvement in AD recovery time, time savings in identifying and addressing emerging threats, and reduced disruptions because of operational errors, among other benefits.

Challenges Before Semperis

Benefits After Semperis

Lack of visibility into malicious changes in the hybrid AD environment

The ability to analyze log data, authentication attempts, and changes to AD and Entra ID configurations in real time with DSP helped the interviewees’ organizations identify potential threats before they escalated to full-blown attacks

Arduous and time-consuming AD attack recovery effort and cumbersome domain controller backup and management

Investing in Semperis’ Active Directory Forest Recovery (ADFR) solution enabled swift AD recovery, minimizing the financial impact of the attack by mitigating prolonged disruptions to business operation

Significant remediation effort and subsequent end-user downtime resulting from object- and group-level incidents

Semperis Directory Services Protector (DSP) detected and automatically reversed unwanted changes to objects and groups in the AD and Entra ID environments quickly and with minimal human intervention from IT teams

Inefficiencies in monitoring AD and Entra ID for malicious or unauthorized changes

Significant IT team time savings in monitoring AD and Entra ID with DSP, including real-time alerting, automated rollback of malicious changes, and scanning the environment for security indicators to close security gaps and prevent attacks

Forrester findings validate Semperis experts’ experience with helping customers secure and recover AD

Forrester Total Economic Impact of Semperis recovery time

Proven gains in AD security and recovery

“We’ve been collecting evidence in customer POCs of reduced time to recover an AD forest with ADFR for years, so we were not surprised that Forrester’s findings validated the 90% time savings in forest recovery,” said Sean Deuby, Semperis principal technologist, about the Forrester report findings. “The new Forrester Total Economic Impact (TEI) Report of Semperis gives organizations quantifiable metrics they can use to prove the value of being able to continuously monitor hybrid identity environments for emerging threats, automatically roll back malicious or unintentional changes, and reduce Active Directory recovery time.”

Read the blog

Frequently asked questions about the Forrester Total Economic Impact of Semperis study

Who participated in the study?

Forrester analysts interviewed six Semperis customers across a range of industry sectors, including healthcare, energy, financial services, and consulting, to understand the benefits of investing in Semperis’ identity threat prevention, detection, and response solutions. Forrester aggregated the interviewees’ experiences and combined the results into a single composite organization that is in a highly regulated industry with sensitive data and has 50,000 employees and revenue of $10 billion per year.

What identity threat detection and response (ITDR) solutions did the customers use before investing in Semperis?

Customers who participated in the study said they used a mix of identity threat detection, response, and prevention tools and used traditional enterprise backup and/or traditional AD recovery solutions, such as a bare-metal recovery approach, to back up their data.

What was the objective of the Forrester TEI of Semperis study?

To understand the benefits of organizations’ investment in Semperis solutions, Forrester constructed a framework based on information gathered during the customer interviews.

The objective of the framework was to identify benefit, flexibility, and risk factors that affected the investment decision. Forrester took a multistep approach to evaluate the impact that Semperis can have on an organization, including a due diligence process that entailed information-gathering with Semperis stakeholders, interviews with customers, design of a composite organization based on the characteristics of the participating companies, a financial model framework that organizations can use to evaluate the benefits of investing in Semperis, and a case study.