Rubrik has acquired identity orchestration company Strata.io and introduced two new Identity Resilience capabilities aimed at keeping authentication systems running during cyberattacks and recovering identity infrastructure without reintroducing attacker persistence.
The first capability, Identity Continuity, is powered by the Strata acquisition. It automatically fails over to a secondary Identity Provider (IdP) when the primary provider is compromised or goes down, keeping users authenticated and critical applications accessible throughout an incident. Strata specializes in unifying fragmented Identity and Access Management (IAM) infrastructures across multi-cloud, hybrid, and on-premises environments.
The second, Identity Roll Forward, was developed in-house by the Rubrik team. It allows organizations to surgically reconstruct Active Directory by using Rubrik intelligence and third-party signals to identify, isolate, and reverse unauthorized changes while keeping legitimate modifications intact. The approach eliminates what Rubrik describes as an impossible choice that organizations face during IdP compromises: rolling back to a clean state and losing legitimate business progress, or staying compromised with attacker backdoors in place.
“When an IdP is compromised, organizations face an impossible choice: roll back to a past clean state and lose legitimate business progress or stay compromised and leave the attacker’s backdoors intact,” said Anneka Gupta, Chief Product Officer at Rubrik. “Now, Rubrik eliminates this trade-off.”
Strata CEO and co-founder Eric Olden co-authored the SAML identity federation standard, the widely used standard for authorization and authentication that enables seamless navigation between secure websites without repeated logins.
The acquisition reflects growing concern about identity-based threats. Data from Rubrik Zero Labs found that 90 percent of IT and security leaders cite identity-based threats as their top concern. A compromised identity provider can lock out an entire organization, making the ability to maintain authentication continuity during incidents a pressing need for enterprises.
Terms of the acquisition were not disclosed. Both Identity Roll Forward and Identity Continuity are in private preview.
Sources: Business Wire, Rubrik
–
By the ID Tech Editorial Team
