Darktrace Identity is a behavioral AI solution that monitors and detects identity-based threats across enterprise environments. The product uses self-learning AI to establish baseline identity behavior and detect anomalies in real time across Active Directory (on-premises and cloud), Azure AD/Entra ID, Okta, SSO platforms, VPNs, and SaaS applications. The solution monitors user and service account activity to identify unusual login patterns, privilege escalation, lateral movement, and credential misuse. It operates through four stages: learning baseline identity behavior, detecting anomalies in real time, investigating using Cyber AI Analyst, and responding with automated actions such as logging out compromised users or disabling accounts. Darktrace Identity correlates identity signals with network and cloud behavior to provide visibility into account takeovers and insider threats. The product supports Zero Trust strategies through dynamic behavioral analytics and integrates with the broader Darktrace platform. Cyberseer offers this as a managed service with analyst-led monitoring, alert triage, threat hunting, and integration with SIEM, SOAR, and case management platforms. The service includes weekly threat insight reports and response recommendations.