Modules

Buy only what you need.

Every module is a separately-licensed package. Ed25519-signed license files; no phone-home; entitlement enforced at scanner registration time.

Modules

Buy only what you need.

Every module is separately licensed. License keys are validated at scanner registration time — Ed25519 signed, offline-verifiable, no phone-home.

Shipping v0.0.1

AD Vulnerability Discovery

31 scanners across account lifecycle, password policy, Kerberos, delegation, ACL surface, AD CS, and inventory. Live + offline.

  • Live LDAPS ingestion via ldap3
  • Offline JSON snapshot for consulting
  • Reverse-engineered priv-group registry
  • 4 ESC scanners (ESC1/2/3/8)
Preview 1 scanner

Entra Vulnerability Discovery

First scanner: privileged-without-MFA. CA drift, dormant guests, app-consent risk, PIM coverage in development.

  • msgraph-sdk integration
  • Priv-account classification reuses AD config
  • Same risk model, same reports
Roadmap

Okta & Ping

Connectors scaffolded. Scanner suite buildout follows customer demand.

Shipping

Environment Discovery

Probes the target and writes a customer-config seed. Cuts new-tenant setup from hours to minutes.

Roadmap

Investigation

Targeted deep-dives on a single user, group, or computer: every relationship, every membership, every cert, every ACL.

Roadmap

Audit & Reporting

Scheduled scans, drift reports, regulatory packs (SOX, PCI-DSS, HIPAA, ISO 27001, NIS2).

Ready to see what's hiding in your AD?

Spin it up against the synthetic snapshot in two minutes. Open the live HTML report. Decide if you want it pointed at your real environment.