37 scanners shipping today. Risk scored evidence, a plain language glossary, and a remediation on every finding. The same findings whether the data came from a live directory or an offline file.
Tier here is the attack relevance the scanner carries in its findings, not a licence tier.
Identity, groups, licensing, conditional access, privileged access and app registrations. Score out of 100, heat map, per policy Conditional Access review, directory and licence analysis, executive PDF, run over run diff. Read only, delegated device code sign in or an app registration.
Organization and folder IAM, primitive roles, external principals, custom roles, service accounts and keys, organization policies, Security Command Center, audit logging, project posture, billing, budgets and Recommender. A missing permission is reported as not assessed, never as a pass.
Account and group creations, deletions, enables, disables, password changes, attribute and membership changes and lockouts from an LDAP poll plus domain controller security events. New objects are checked against your mandatory attribute rules.
A dossier for any user, group or computer: direct and transitive groups, how it is privileged, the ACLs it holds, exposure flags and a blast radius with the reasoning written out. Works offline from a snapshot.
Collect a directory once into a single SQLite file, then scan, investigate or compare it anywhere, including a machine with no network path to the domain.
Every completed run is added to a history. The progression report shows the trend and the accounts added or removed since the last run.
Interactive HTML executive summary with severity, scanner and search filters, full XLSX, CSV evidence, PDF, and the privileged groups registry CSV.
Connectors translate each directory into a common model. Scanners read the model. Reports read scanner output. Adding a check is a single file.
Download the demo, load an export of your directory, and read the report on your own machine. Nothing leaves it. Buy seats when you want live connections, assessments and automation.