Download

Run it on your own machine.

IAM X-ray is self-hosted. One signed executable, no cloud account, no data leaving your network — you point it at your directory and it opens a local control panel in your browser.

Download for Windows All releases & release notes

Verify your download: SHA-256 checksum

Self-hosted · data stays on your host · offline-capable · no telemetry

From download to first report in five steps

Download

Grab IAMXray.exe below. It is a single self-contained file — no installer, no Python, nothing to set up.

Place it where it can see a DC

Copy it to a Windows host or VM that has network line-of-sight to your domain controller over LDAPS (TCP 636). Everything runs locally — your directory data never leaves the machine.

Run it

Double-click IAMXray.exe. A console window opens and your browser launches to http://127.0.0.1:7777 — the local control panel.

Point it at your domain

In the web UI, enter your domain and a read-only service account, pick the scanners (or run all), and start. Live progress streams as it runs.

Review & investigate

Read the executive summary and full reports (HTML / XLSX / CSV). Investigate any account for a 360° dossier — privilege, ACLs, delegation exposure, blast radius. Export a portable .iamx snapshot for archival or diffing.

What you need

Windows 10 / 11 or Windows Server 2016+ (64-bit)
Network line-of-sight to a domain controller over LDAPS (TCP 636)
A read-only Active Directory account for the bind
No install, no admin rights, no Python — single executable

Prefer the command line?

The same executable is a full CLI. From PowerShell:

# launch the web UI (default)
IAMXray.exe

# or run headless against a domain
IAMXray.exe run -c config.yaml --connector ad-live `
  --bind-dn "DOM\svc-iamxray-ro" --credential-ref env:IAMXRAY_PASS `
  --out runs/today

# collect a portable snapshot, analyze it anywhere
IAMXray.exe snapshot --connector ad-live --bind-dn ... --out site.iamx
IAMXray.exe run --connector snapshot --source site.iamx -c config.yaml

Ready to see what's hiding in your AD?

Spin it up against the synthetic snapshot in two minutes. Open the live HTML report. Decide if you want it pointed at your real environment.

See the live demo → Talk to us