Obsidian ITDR (Identity Threat Detection and Response) is a SaaS-focused identity security solution designed to detect, investigate, and respond to identity-based threats across SaaS environments. The platform provides out-of-the-box detection rules mapped to the MITRE ATT&CK framework, supplemented by ML-based detection rules developed from incident response data. Detection rules can be customized with automated backtesting to fit specific environments. For incident response, the product offers tailored remediation steps and human-readable SaaS log search capabilities, allowing analysts to pivot on IP address, user, geolocation, and event type for triage. It integrates with SIEM and SOAR platforms to automate response workflows. The solution includes anti-phishing capabilities targeting spear phishing and Adversary-in-The-Middle (AiTM) attacks, preventing users from submitting credentials to phishing sites and providing context around phishing attempts to identify high-risk users and applications. Obsidian ITDR also covers non-human identities (NHI), offering a normalized view of NHI activity across connected applications. AI-powered models detect anomalous events such as access to new data or resources and unusual infrastructure usage, alerting when non-human identities behave atypically.