Semperis buys MightyID to bolster cloud identity resilience

Semperis has acquired MightyID, a cloud identity resilience specialist, in a move designed to bolster its backup and recovery capabilities for Okta and Ping environments. While the financial details of the transaction remain undisclosed, the acquisition represents a significant strategic pivot for Semperis, broadening its remit beyond its traditional focus on Microsoft-centric systems like Active Directory and Entra ID.

The integration of MightyID's technology allows Semperis to offer comprehensive operational resilience across a more diverse range of hybrid environments. This is increasingly vital as organisations rely on Okta and Ping for critical workforce and customer authentication.

By securing these additional identity providers, Semperis aims to provide a more holistic safety net for enterprise access management.

This expansion comes as identity systems have emerged as primary targets for cybercriminals seeking to compromise account pathways and gain control over infrastructure. Beyond the threat of targeted attacks, the inherent risk of service outages poses a substantial threat to business continuity.

As identity management now functions as the essential gateway between users and business-critical applications, it is increasingly being categorised and protected as vital infrastructure.

Semperis framed the acquisition as an extension of its focus on cyber resilience rather than pure prevention.

"This strategic move furthers our mission to help organisations achieve true cyber resilience," said Mickey Bresman, Chief Executive Officer, Semperis. "Effective defence means resilience- not just prevention - so operations can continue, even under attack. This acquisition advances our leadership in identity-driven security and crisis management, helping organisations ensure mission continuity in the face of modern cyberattacks."

Okta and Ping

MightyID's products focus on backup, restore, migration, and failover for cloud identity platforms. These functions are designed for scenarios where an organisation needs to recover quickly from misconfiguration, malicious changes, administrative error, or service disruption.

The company has been named in Gartner's 2025 Guidance for Workforce Access Management, according to the announcement. Workforce access management typically covers authentication, single sign-on, and policy controls for employees and contractors. Okta and Ping operate in this space, alongside Microsoft's Entra ID and other providers.

By bringing MightyID into the group, Semperis gains more direct coverage of environments that rely on multiple identity providers. Many large organisations use hybrid identity, with Active Directory remaining in place for legacy applications and device management, while cloud identity services handle modern authentication and application access.

Product integration

Semperis said it will integrate MightyID into its identity resilience platform. The combined offering will target organisations managing mixed on-premises and cloud identity estates.

The plan includes continuous exposure management for identity systems. It also includes automated remediation of malicious changes across hybrid environments. Semperis also highlighted recovery functions with fault tolerance during incident response. It also set out a crisis management component focused on returning to normal operations after an attack.

Alex Weinert, Chief Product Officer at Semperis, positioned the move as a response to the growing complexity of identity estates, where multiple systems and suppliers sit behind day-to-day access.

"With MightyID joining Semperis, we're extending our comprehensive identity resilience across the identity fabric - the complex web of IdPs, apps, users, devices, and governance solutions that organisations manage," said Alex Weinert, Chief Product Officer, Semperis. "That means stronger coverage across hybrid identity and multi-cloud environments, on prem or in the cloud, where an outage anywhere can become a business crisis everywhere."

Resilience focus

The acquisition reflects a broader shift in security spending towards operational continuity, particularly for identity services that are central to business access. Organisations often rely on identity providers for single sign-on and conditional access policies. When those systems fail, employees can lose access to core tools, and administrators can struggle to regain control.

Recovery tooling has also drawn more attention as attackers increasingly target identity infrastructure. Compromised credentials can provide durable access, and malicious changes to identity settings can persist even after endpoints are cleaned up. That raises the stakes for rapid restoration of identity services and verification of integrity.

MightyID's leadership said the combination creates a broader option set for customers dealing with hybrid identity estates and multi-cloud requirements.

"Combining MightyID's innovation in protecting cloud identity platforms with Semperis' established expertise in full-lifecycle identity resilience ultimately benefits any organisation that needs to protect their complex, multi-cloud identity environments from attacks," said Chris Steinke, Chief Operating Officer, MightyID. "Given that hybrid AD and Entra ID environments are the infrastructure backbone for 90% of businesses worldwide, this move ensures a seamless, flexible approach to identity resilience that will protect organisations regardless of which cloud identity platform they choose."

Semperis is privately held and based in Hoboken, New Jersey. The company sells identity security and crisis management software and also provides identity forensics and incident response services. It works with customers across more than 40 countries, and it runs the Hybrid Identity Protection conference and podcast.

Semperis said the MightyID acquisition broadens its coverage across Microsoft Active Directory, Entra ID, Okta and Ping, with product integration planned as part of its identity resilience platform.