Blackpoint Cyber Added Identity Threat Response Tools

The update brings automated identity monitoring to Microsoft 365, Google Workspace, and Cisco Duo environments.

Updated on Sept. 23, 2026 in Cybersecurity

Bold flat-color editorial illustration showing a stack of geometric server blocks inside a protective angular shell, symbolizing cloud security. — Blackpoint Cyber has added new identity threat detection and response capabilities to its CompassOne security platform for cloud environments. AI Illustration. Upload story photo >

Live Poll

Do you trust automated security tools to manage account access without disrupting your daily work?

Blackpoint Cyber has integrated new identity threat detection and response capabilities into its CompassOne platform. The update provides automated controls across Microsoft 365, Google Workspace, and Cisco Duo to combat credential-based attacks.

Why it matters

Attackers are increasingly bypassing traditional malware defenses by utilizing stolen credentials and compromised mailboxes. This platform update aims to automate investigation for resource-constrained security teams.

The update introduces nine specific detection signatures, including alerts for device code phishing and anomalous tokens, alongside a historical scanning tool that analyzes up to 180 days of activity.

The players

Blackpoint Cyber

A cybersecurity firm that provides managed detection and response services through its CompassOne platform.

The details

The platform utilizes a Cloud Response policies page to provide visibility into configuration audit trails, allowing administrators to track policy changes in real-time. New automated tools enable bulk blocking of logins from specific countries or commercial VPNs. For Google Workspace, an Auto Logout feature allows for the immediate termination of sessions flagged as compromised.

September 23, 2026: Blackpoint Cyber released the identity threat detection update.

The Tech Race

As attackers move away from malware to focus on identity, managed service platforms are racing to automate the triage of credential abuse. This update aligns Blackpoint Cyber with the broader industry transition toward Identity Threat Detection and Response (ITDR) architectures.

Small and mid-sized businesses using the CompassOne platform can now deploy automated login policies to block traffic from unapproved regions or VPNs. The new visibility tools provide IT teams with audit logs for configuration changes, reducing the manual effort required to investigate suspicious sign-ins.

The takeaway

Blackpoint Cyber is positioning its platform to handle the high volume of automated identity threats that currently overwhelm smaller security teams. Watch for further platform updates regarding the response speed for Microsoft Teams-specific impersonation attacks.