Modules

One download. Every module.

Sign in unlocks what your licence covers. Nothing is downloaded separately and nothing is installed. Entitlements are signed tokens the app verifies on your machine.

Modules

What ships today.

One download carries every module. The free trial unlocks offline Active Directory files. A licence unlocks the rest; which automation features a tier includes is listed on the marketplace.

Trial and licensed

Active Directory vulnerability discovery

35 AD scanners across Kerberos, delegation, ACLs, AD CS, passwords, lifecycle and inventory. Runs against a live domain over LDAPS or against an offline export or snapshot, with the same findings either way.

  • Discovered privileged group registry, not a fixed list
  • Executive HTML, full XLSX, CSV and PDF reports
  • Run history and trend report across runs
  • Portable .iamx snapshot file for archiving and diffing
Licensed

Entra assessment

27 checks across identity, groups, licensing, conditional access, privileged access and app registrations, each tagged with CIS Microsoft 365 and Microsoft references. Read only, delegated sign in or an app registration.

  • 0 to 100 score, heat map and prioritised gaps
  • Per policy Conditional Access review
  • Directory and licence analysis with reclaimable licences
  • Run over run tracking and an executive PDF
Licensed

GCP assessment

31 read only controls over organization and folder IAM, custom roles, service accounts and keys, organization policies, Security Command Center, audit logging, project posture, billing and budgets.

  • Application Default Credentials or a scoped service account
  • Missing permissions show as not assessed, never as a pass
  • Score, findings, run history and trend
Licensed

Live Feed

Continuous Active Directory change monitoring. An LDAP poll plus domain controller security events give who created, deleted, enabled, disabled, changed or locked which account or group.

  • New objects checked against your mandatory attribute rules
  • Daily, weekly, monthly and yearly statistics
  • Runs as a scheduled task on the collector host
Trial (offline) and licensed

Investigation

One dossier for a user, group or computer: identity facts, direct and transitive groups, how it is privileged, the ACLs it holds, its exposure flags and a blast radius with the reasoning written out.

  • Works offline from a snapshot or live
  • Every fact reproducible from the data
Automation module

Automation

Termination, transfer and onboarding for Active Directory, driven from a form, a single user id or a CSV batch. Every run is planned, previewed, executed and audited.

  • Termination: disable, move OU, strip groups, set description, reset password, manager and failure emails, Entra MFA reset, sign in block and session revoke
  • Transfer: attribute changes with manager verification
  • Onboarding: account and group creation
  • Unattended folder watcher for scheduled runs
Automation module

Entra SSO applications

Search, review and create enterprise applications in Entra from one declarative profile. SAML or OIDC, previewed before any write, audited without secrets, reversible.

  • Claims, group claims and app roles with user and group assignments
  • SCIM provisioning
  • Certificates and client secrets with expiry dates, issue a new secret shown once
  • Graph API permissions found by search, with admin consent
  • Review of any existing app: owners, URLs, credentials, assignments, requested versus granted permissions
Trial (offline) and licensed

Environment discovery and local accounts

Discovery probes a directory and writes a seed configuration with the evidence for each guess. The local accounts scanner enumerates local administrators on Windows and Unix hosts without an agent.

  • Domain, OU layout, privileged OU and naming pattern candidates
  • Windows local Administrators, Unix root and sudo groups
  • Discovery runs on offline files in the trial; the local accounts scan reaches live hosts and needs a licence
Not yet shipping: the Okta connector is wired for authentication but collects no data yet. Ping is not started. We say so here so you do not buy for it.
Licensing

Per seat. Signed in, not keyed in.

One account

Your DNA Technology account is the licence holder. You sign in from inside the app by confirming a short code in your browser. No key to paste.

One seat, one device

A licence is sold per seat on the marketplace. Each device you sign in on takes one seat. Buy as many seats as you have machines.

Move or release

Move a seat to a new device from inside the app: unlimited moves in the first 30 days, then 3 per rolling 30 days. Release any device from your account page.

15 day trial

Every feature of both modules, one trial per account, no card. When it ends the app returns to the sign in screen and nothing you produced is taken away.

See what is hiding in your Active Directory.

Download the demo, load an export of your directory, and read the report on your own machine. Nothing leaves it. Buy seats when you want live connections, assessments and automation.