Quest Software Flags Rising Identity Threat Risks as ITDR Adoption Grows but Recovery Readiness Lags

New updates have been reported about Quest Software.

Quest Software has released its annual State of ITDR report, positioning the company at the center of escalating identity security risks as AI-driven attacks and non-human identities reshape threat surfaces. Based on responses from 650 senior IT and security leaders, the survey shows that while 57% of organizations now have an Identity Threat Detection and Response practice—up from 48% last year—and 92% report benefits from ITDR, more than three-quarters are failing to exercise disaster recovery plans within the recommended six months and nearly a quarter never test them at all.

For Quest, these findings directly validate demand for its portfolio that secures Active Directory and Entra ID, where identity systems increasingly determine how quickly enterprises can respond and recover when compromised. The report highlights rising AI-led attack techniques such as model theft, automated campaigns, and data poisoning, alongside an estimated 82-to-1 ratio of machine identities to human accounts, which is stretching visibility, governance, and response capabilities across on-premises, hybrid, and cloud environments. Quest’s Chief Product and Technology Officer Michael Laudon warned that organizations are over-relying on preventive controls and underinvesting in response and recovery, an area Quest targets by automating recovery up to 90% faster and improving mean time to response by 44%, which can translate into millions saved in downtime. The survey’s alignment with the National Institute of Standards and Technology Cybersecurity Framework, and Gartner’s 2025 guidance to extend ITDR discipline, reinforces Quest’s strategic positioning; Gartner cited Quest as an example vendor in multiple identity control categories. With more than 45,000 customers, including over 90% of the Fortune 500, Quest is using these findings to underscore the business case for modern ITDR programs and to support ongoing investment in AI-ready data, secure identity infrastructure, and resilience-focused cybersecurity offerings.