Lead Product Manager

Netwrix Auditor earns recognition on two 2026 Capterra shortlists. Netwrix Auditor has been included in the 2026 Capterra Shortlist for both Cybersecurity Software and Compliance Software, while also securing a place in the 2026 Software Advice FrontRunners for Cybersecurity Software. These distinctions are supported by more than 200 verified reviews, an overall rating of 4.5 out of 5, and 95% positive feedback. Professionals at over 13,000 organizations, including more than 120 Fortune 500 companies, rely on Auditor to consolidate visibility across hybrid IT environments and generate audit-ready evidence in real time. Most IT teams understand reasonably well what is taking place across their environments. Demonstrating that knowledge during an audit, however, can be far more difficult. Records of configuration changes, access activity, and user actions are often scattered across separate logs and disconnected systems. When auditors request evidence, teams may therefore spend hours searching through records and manually assembling the required information. This disconnect between what actually occurred and what can be demonstrated is a recurring challenge for IT and security teams during every audit cycle. Netwrix Auditor was designed specifically to close that gap. This year, recognition based on the experiences of its users provided further evidence of its value. Earned through real reviews. Both rankings are based on verified user ratings and therefore reflect actual customer experience. What users are saying. Boris M. Said that In general, it is an excellent tool for monitoring within IT, adding to zero trust concepts, including supervision of RDP connections, monitoring of SQL instructions in critical databases and access and use of user files. Corey C. Said that Netwrix is useful for real time auditing and getting notifications when certain pre-defined rules have been met. These comments come directly from IT professionals describing their practical experience of gaining deeper visibility into their environments. The problem it solves. Rather than requiring teams to reconstruct activity from fragmented logs, Netwrix Auditor provides a unified visibility layer across Active Directory, file servers, SharePoint, Exchange, databases, and other systems. It records who made a change, what was changed, when the activity occurred, and where it originated. Automated reporting and near real-time alerts further reduce the need for time-consuming manual searches through logs. The same centralized visibility makes audit trails easier to search and compliance evidence easier to understand, including for stakeholders without deep technical expertise. This can make the difference between entering an audit fully prepared and having to assemble evidence under pressure. Get Netwrix Auditor demo.

Netwrix expands Microsoft Cloud Security for AI agent identities. Netwrix has expanded Netwrix PingCastle and Netwrix Threat Manager with new capabilities designed to strengthen identity security across Microsoft cloud environments. The latest releases add visibility into AI agent identities, expand Microsoft Entra ID coverage to more than 100 risk checks, and introduce threat detection for Azure Files, helping organizations identify and respond to emerging identity and cloud security risks. Organizations are deploying AI agents faster than they can govern them. Each agent is an identity holding real permissions inside the enterprise environment, yet most exist outside any inventory, ownership, or review process. A Cloud Security Alliance survey found that fewer than a quarter of organizations have a formally adopted policy for creating or removing the identities their AI systems run on, and more than 16% don't track when a new one is created at all. Security Products & Services The consequences are measurable: in its 2026 Data and Identity Security Report, Netwrix found a 43% breach rate among organizations where AI had significantly expanded the number of identities needing access, compared with 11% where it hadn't. Netwrix PingCastle extends its Microsoft Entra ID coverage to 102 risk checks, extending the tool's trusted Active Directory posture assessment into the cloud identity plane. Security teams and administrators can now assess identity risk across both on-premises AD and Entra ID with the same fast, prioritized approach that has made PingCastle a community favorite. Netwrix Threat Manager adds new visibility into AI agent identities in Microsoft Entra ID, giving security teams an inventory of the agents operating in their environment and the access they hold. That inventory is the missing foundation for most organizations: the Netwrix report found only 19% of organizations fully govern non-human identities such as service accounts and AI agents. Threat Manager already provides visibility and monitoring for another critical non-human identity category, service accounts, through actionable risk insights, abnormal-behavior detection, and attack context for faster triage; this release extends that coverage to AI agents. The latest Netwrix Threat Manager release also adds new threat detection for Azure Files, protecting file shares against ransomware, abnormal behavior, and high-risk changes such as the creation of open access. Agent-specific threat detection is planned for a subsequent release, building on the visibility foundation delivered today. Machine Learning & Artificial Intelligence The new capabilities complement Microsoft's native tooling with independent assessment and visibility across the Microsoft identity plane. "Earlier this year, we gave organizations visibility into what AI agents can access. This release goes a layer deeper: which agents exist at all," said Jeff Warren, CPO at Netwrix. "Our research found fewer than one in five organizations fully govern non-human identities, and agents are the fastest-growing category. You can't review access for an identity you don't know you have." These releases advance Netwrix's strategy to unify identity and data security. PingCastle's assessment engine already powers more than 200 checks within the company's 1Secure(TM) platform, reflecting the same independent posture assessment approach now extended deeper into the Microsoft identity plane. Netwrix PingCastle 4.0 and Netwrix Threat Manager 3.3 are available now.

Netwrix extends Identity Security to AI agents in Microsoft Entra ID. Netwrix announced new capabilities across Netwrix PingCastle and Netwrix Threat Manager that extend identity security deeper into the Microsoft cloud, including coverage of AI agents. Organizations are deploying AI agents faster than they can govern them. Each agent is an identity holding real permissions inside the enterprise environment, yet most exist outside any inventory, ownership, or review process. A Cloud Security Alliance survey found that fewer than a quarter of organizations have a formally adopted policy for creating or removing the identities their AI systems run on, and more than 16% don't track when a new one is created at all. The consequences are measurable: in its 2026 Data and Identity Security Report, Netwrix found a 43% breach rate among organizations where AI had significantly expanded the number of identities needing access, compared with 11% where it hadn't. Netwrix PingCastle extends its Microsoft Entra ID coverage to 102 risk checks, extending the tool's trusted Active Directory posture assessment into the cloud identity plane. Security teams and administrators can now assess identity risk across both on-premises AD and Entra ID with the same fast, prioritized approach that has made PingCastle a community favorite. Netwrix Threat Manager adds new visibility into AI agent identities in Microsoft Entra ID, giving security teams an inventory of the agents operating in their environment and the access they hold. That inventory is the missing foundation for most organizations: the Netwrix report found only 19% of organizations fully govern non-human identities such as service accounts and AI agents. Threat Manager already provides visibility and monitoring for another critical non-human identity category, service accounts, through actionable risk insights, abnormal-behavior detection, and attack context for faster triage; this release extends that coverage to AI agents. The latest Netwrix Threat Manager release also adds new threat detection for Azure Files, protecting file shares against ransomware, abnormal behavior, and high-risk changes such as the creation of open access. Agent-specific threat detection is planned for a subsequent release, building on the visibility foundation delivered today. The new capabilities complement Microsoft's native tooling with independent assessment and visibility across the Microsoft identity plane. "Earlier this year, we gave organizations visibility into what AI agents can access. This release goes a layer deeper: which agents exist at all," said Jeff Warren, CPO at Netwrix. "Our research found fewer than one in five organizations fully govern non-human identities, and agents are the fastest-growing category. You can't review access for an identity you don't know you have." These releases advance Netwrix's strategy to unify identity and data security. PingCastle's assessment engine already powers more than 200 checks within the company's 1Secure(TM) platform, reflecting the same independent posture assessment approach now extended deeper into the Microsoft identity plane. Netwrix PingCastle 4.0 and Netwrix Threat Manager 3.3 are available now. David Marshall is the founder of VMblog.com, one of the industry's longest-running independent publications covering modern data center technologies. What began as a focus on virtualization and cloud computing has expanded to cover the full spectrum of enterprise IT, including AI, security, and DevOps, making VMblog a trusted destination for vendor news, technology analysis, and industry commentary.Beyond publishing, David has spent his career at the intersection of technology and business, inventing, marketing, and launching a number of successful software companies and products, and building a reputation as a skilled marketing executive in the enterprise IT space.David is also a published author, having written two well-regarded books on virtualization and served as technical editor for two "For Dummies" titles covering virtualization and cloud computing. He co-founded CloudCow.com, a publication focused on cloud computing, and has been named a VMware vExpert every year since 2009, one of the longest continuous honoree streaks in the program's history.Connect with David on LinkedIn: https://www.linkedin.com/in/davidmarshall/