IAM X-rayDownload the demo
Download

Download the demo.

The same installer for everyone. Without a licence it opens on the sign in screen. Start the free trial or sign in with your DNA Technology account to unlock it. Your directory data stays on your machine either way.

Download for WindowsHow buying works

Verify your download: SHA-256 checksum

What changed in this version

Runs on your own machine · scan data never leaves it · no telemetry

What the download is

One build. Three states.

Signed out

The app opens on the sign in screen and does nothing else until you sign in with your DNA Technology account or start the trial. It has not contacted anyone yet.

Free trial, 15 days

Every feature of both modules, so you evaluate the product you would buy. One trial per account, no card, and it ends by itself.

Licensed

Two modules, bought separately or together. Audit and Governance reads: every scanner, every connector, the assessments, the Live Feed, investigation and every report. Automation writes: terminations, transfers, onboarding and Entra single sign on. Buy seats on the DNA Technology marketplace, then sign in from the app.

From download to first report

1
Download
One file, IAMXray.exe. No installer, no Python, no admin rights. Check the SHA-256 against the checksum file if your policy asks for it.
2
Run it
Double click IAMXray.exe. A console window opens and your browser opens the local control panel at http://127.0.0.1:7777. Everything runs on this machine.
3
Sign in or start the trial
Without a licence the app opens on the sign in screen. Sign in with your DNA Technology account, or choose Try it for free to start the 15 day trial on the marketplace and then sign in from the app.
4
Point it at your data
In the trial, load an Active Directory snapshot or export file. With a licence, connect to a domain controller over LDAPS with a read only account, or to Entra ID. Pick the scanners, or run all 37, and watch progress as it runs.
5
Read, investigate, keep
Open the executive summary and the full reports (HTML, XLSX, CSV, PDF). Investigate any account, group or computer. Save a portable .iamx snapshot to archive or to compare runs over time.

What you need

  • Windows 10 or 11, or Windows Server 2016 or later, 64 bit
  • For live Active Directory scans: network reach to a domain controller over LDAPS (TCP 636) and a read only directory account. Needs a licence.
  • For the Entra and GCP assessments and the SSO module: a read only Graph or Google Cloud identity as described in the setup runbooks. Needs a licence.
  • Internet access to dnatechnology.ca when you sign in, and once per billing period after that to collect a fresh licence file. Choose manual delivery instead and the app never opens a connection: download the file from your account on any machine and import it.

Updates

Run IAMXray.exe update to fetch the latest build. The app downloads a signed manifest from this site, checks the signature and the SHA-256 of the new file, and only then replaces itself. A file that fails either check is never installed.

Prefer the command line?

The same executable is a full CLI. From PowerShell:

# launch the local control panel (default)
IAMXray.exe

# sign in with your DNA Technology account
IAMXray.exe license signin

# run headless against a domain
IAMXray.exe run -c config.yaml --connector ad-live `
  --bind-dn "DOM\svc-iamxray-ro" --credential-ref env:IAMXRAY_PASS `
  --out runs/today

# collect a portable snapshot, analyse it anywhere
IAMXray.exe snapshot --connector ad-live --bind-dn ... --out site.iamx
IAMXray.exe run --connector snapshot --source site.iamx -c config.yaml

# update to the latest signed build
IAMXray.exe update

Download the demo, then decide.

Load an Active Directory export, read the report, and buy seats on the DNA Technology marketplace when you want the live parts.

Download the demoBuy on the DNA Technology marketplace