HEAD-TO-HEAD · FACTS ONLY, NO SCORES

Semperis vs Silverfort: IAM jobs, prices and limits side by side

Short answer

Both document identity threat detection for Active Directory. Semperis adds rollback and recovery of AD forests, Entra tenants and Okta, plus a free Purple Knight assessment; Silverfort adds inline response before authentication completes and MFA for legacy systems. Both cover threat detection. Only Silverfort covers directory and SSO and privileged access.

By The Access Desk · Best IAM Tools · Published 2026-10-08

Desk research from public vendor pages read in September 2026, updated 2026-10-11. Editorial profiles, no scores; we did not run the products.

How do they compare job by job?

Coverage as described on each vendor's own pages, read in September 2026 and updated 11 October 2026. Not a score.
Job	Semperis	Silverfort
J1Directory and SSO	Not in our sources Semperis protects and recovers directories; it is not one. Source: Semperis homepage · Read 29 Sep 2026	Partial Universal MFA for legacy apps, command-line tools and OT with zero agents and zero code changes; Silverfort is not a directory or SSO provider. Source: Silverfort homepage · Read 29 Sep 2026
J2Lifecycle and IGA	Not in our sources	Not in our sources No lifecycle management described on the pages reviewed. Source: Silverfort homepage · Read 29 Sep 2026
J3App coverage	Not in our sources	Not in our sources
J4Privileged access	Not in our sources	Partial Non-human identity protection for AD and cloud service accounts: a behavioral baseline per account and virtual fences. Its Enterprise package adds Privileged Access Security with just-in-time access. Source: Silverfort: non-human identity security · Read 29 Sep 2026 · Source: Silverfort pricing · Read 11 Oct 2026
J5Threat detection	Documented Directory Services Protector watches hundreds of indicators of exposure and compromise across AD and Entra ID and can automatically roll back malicious changes; AD Forest Recovery, Disaster Recovery for Entra Tenant and Recovery for Okta cover recovery. Source: Semperis: Active Directory security · Read 29 Sep 2026 · Source: Semperis homepage · Read 29 Sep 2026	Documented Detects brute force, password spraying, credential stuffing, Pass-the-Hash, Pass-the-Ticket, Kerberoasting and DCSync, and can block, challenge with MFA or terminate the session inline, before authentication completes. Source: Silverfort: identity threat detection and response · Read 29 Sep 2026

Can you run both in one stack?

They overlap on threat detection, so most stacks would use one of them for that job and the other only for the jobs it adds.

What do they cost and how are they deployed?

Semperis

Pricing: Purple Knight assessment is free. Directory Services Protector is listed on Microsoft Marketplace with "Price varies" and no list price; no public price on semperis.com.
Source: Semperis Purple Knight · Read 29 Sep 2026 · Source: Microsoft Marketplace: Semperis Directory Services Protector · Read 11 Oct 2026
Deployment: Directory Services Protector uses the AD replication stream; further deployment detail not in our sources.
Source: Semperis: Active Directory security · Read 29 Sep 2026
Integrations: Covers Active Directory, Entra ID and Okta.
Source: Semperis homepage · Read 29 Sep 2026 · Source: Semperis Purple Knight · Read 29 Sep 2026
Certifications: Not covered in our sources

Silverfort

Pricing: No list price; Silverfort says pricing is based on the size of the organization. Four packages: Core (ISPM, Universal MFA), Plus (adds NHI Security and AI Agent Security), Advanced (adds Authentication Firewall and ITDR), Enterprise (adds Access Intelligence and Privileged Access Security with just-in-time access). Standard support included; Premier support 10% and Diamond 20% of licence cost.
Source: Silverfort pricing · Read 11 Oct 2026
Deployment: Available for on-premises, cloud and hybrid environments; Universal MFA described as needing zero agents.
Source: Silverfort pricing · Read 11 Oct 2026 · Source: Silverfort homepage · Read 29 Sep 2026
Integrations: AI agent discovery through read-only APIs across Entra ID, Okta, AWS, Azure and GCP.
Source: Silverfort: AI agent security · Read 29 Sep 2026
Certifications: Not covered in our sources

What are each one's strengths and limits?

Semperis

Strengths

Recovery for AD forests, Entra tenants and Okta.
Source: Semperis homepage · Read 29 Sep 2026
Free Purple Knight assessment with 218+ indicators across AD, Entra ID and Okta.
Source: Semperis Purple Knight · Read 29 Sep 2026
Forest Druid maps Tier 0 attack paths.
Source: Semperis homepage · Read 29 Sep 2026

Limits

Focused on directory protection, not on sign-in, governance or privileged access.
Source: Semperis homepage · Read 29 Sep 2026
No list price for paid products; the Microsoft Marketplace listing says the price varies.
Source: Microsoft Marketplace: Semperis Directory Services Protector · Read 11 Oct 2026

Silverfort

Strengths

Responds inline, before the authentication completes.
Source: Silverfort: identity threat detection and response · Read 29 Sep 2026
MFA on legacy, command-line and OT systems.
Source: Silverfort homepage · Read 29 Sep 2026
Service account baselines and virtual fences.
Source: Silverfort: non-human identity security · Read 29 Sep 2026

Limits

No lifecycle or governance features described.
Source: Silverfort homepage · Read 29 Sep 2026
No list price, and ITDR comes in the Advanced package and above.
Source: Silverfort pricing · Read 11 Oct 2026

Which should you look at first?

Semperis

Look at Semperis first if you need: the jobs both cover.

Semperis's pages highlight: Recovery for AD forests, Entra tenants and Okta.

Source: Semperis homepage · Read 29 Sep 2026

Silverfort

Look at Silverfort first if you need: the jobs both cover.

Silverfort's pages highlight: Responds inline, before the authentication completes.

Source: Silverfort: identity threat detection and response · Read 29 Sep 2026

Frequently asked questions

Do Semperis and Silverfort publish prices?

Semperis: Purple Knight assessment is free. Directory Services Protector is listed on Microsoft Marketplace with "Price varies" and no list price; no public price on semperis.com. Silverfort: No list price; Silverfort says pricing is based on the size of the organization. Four packages: Core (ISPM, Universal MFA), Plus (adds NHI Security and AI Agent Security), Advanced (adds Authentication Firewall and ITDR), Enterprise (adds Access Intelligence and Privileged Access Security with just-in-time access). Standard support included; Premier support 10% and Diamond 20% of licence cost.

Do Semperis and Silverfort overlap?

They overlap on threat detection, so most stacks would use one of them for that job and the other only for the jobs it adds.

How can I compare more than two IAM tools?

Use the side-by-side tool, which shows up to five vendors' job coverage, prices and limits in one table.