IAM X-ray Download
Demo

Run it on real synthetic data in two minutes.

The repo ships a synthetic Active Directory snapshot covering every scanner's edge case. No setup, no real environment needed to evaluate.

1

Install dependencies

cd "IAM ultimate control panel"
uv sync --extra dev
2

Run the scan

uv run iamxray run \
  --config config/examples/customer-config.example.yaml \
  --connector ad-offline \
  --source samples/ad_snapshot \
  --out runs/demo
3

Open the executive summary

open runs/demo/executive-summary.html
open runs/demo/privileged_groups.csv

You'll see roughly 30 findings spanning every scanner family, the discovered priv-group registry (incl. the custom delegated Tier1-Operators), and a Glossary section explaining every finding type in plain language.

The deliverable

Reports your CISO will actually read.

Every run produces an interactive HTML executive summary, a full XLSX, a CSV pair for downstream pipelines, and an archive-grade PDF. Plus a privileged-groups registry CSV your auditor will love.

  • Plain-language glossary on every finding type — share with stakeholders, no decoder ring required.
  • Filter by severity, scanner, search across evidence. Print-ready.
  • Risk score 0–100 with a custom IAM model that knows blast radius beats CVSS.
  • Standalone HTML — no external CDN calls, no telemetry, air-gap ready.
Open the live demo →
IAM X-ray — Executive Summary
corp.acme.local · 28 findings · Generated 2026-04-28
Critical5
High11
Medium9
Low3
CRITICAL
DCSync rights granted to non-DC principal
ad.dcsync_rights · risk score 92 · 1 affected
CRITICAL
Unconstrained delegation on svc.legacy
ad.unconstrained_delegation · risk score 88 · 1 affected
CRITICAL
AD CS template ESC1 — enrollee-supplies-subject
ad.adcs_esc1 · risk score 87 · 2 templates
HIGH
Standard accounts with privileged access
ad.standard_accounts_with_privileged_access · risk score 76 · 7 accounts

Ready to see what's hiding in your AD?

Spin it up against the synthetic snapshot in two minutes. Open the live HTML report. Decide if you want it pointed at your real environment.

See the live demo → Talk to us