Compare Active Directory checks and security rules across Community, Professional, Enterprise, and MSP. Community is free forever; paid editions include PDF, CSV, and JSON assessment reports.
| Feature | Community | Professional | Enterprise | MSP |
|---|---|---|---|---|
| Edition overview | Seven essential AD checks — domain admin exposure, password hygiene, inactive accounts, service account risk, password policy gaps, delegation issues, and high-level domain health — with PDF reporting. Company name entered at scan time. Perfect for a first assessment or internal baseline. | Full rule catalog across a domain tree — delegation, attack paths, trust exposure, and complete privileged hygiene coverage. PDF, CSV, and JSON reports. | Forest-wide and cross-domain analysis, trust relationships, multi-domain correlation, and priority support for complex environments. PDF, CSV, and JSON reports. | Built for consultants and MSPs — commercial use, multi-customer scope, and the full forest-wide feature set under a partner license. PDF, CSV, and JSON reports. |
| Founding Customer price | Free Forever | $249 / 2 Years | $1,199 / 2 Years | Contact Us |
| Standard price | Free Forever | $249 / Year | $1,199 / Year | Contact Us |
| Status | Download | Join Waitlist | Join Waitlist | Join Waitlist |
| Scan Scope | Single AD Domain | One AD Domain Tree | Entire AD Forest | Multi-Customer |
| Number of Rules | 7 | 30 | 30+ | 30+ |
| PDF Reports | ✓ | ✓ | ✓ | ✓ |
| CSV Report | — | ✓ | ✓ | ✓ |
| JSON Report | — | ✓ | ✓ | ✓ |
| Deployment | Offline | Offline | Offline | Offline |
| Licensing | None | License File | License File | License File |
| Community checks | ||||
| Domain Admin exposure | ✓ | ✓ | ✓ | ✓ |
| Password never expires | ✓ | ✓ | ✓ | ✓ |
| Inactive privileged accounts | ✓ | ✓ | ✓ | ✓ |
| Service accounts with admin rights | ✓ | ✓ | ✓ | ✓ |
| Empty password policy findings | ✓ | ✓ | ✓ | ✓ |
| Basic delegation issues | ✓ | ✓ | ✓ | ✓ |
| High-level AD health | ✓ | ✓ | ✓ | ✓ |
| Advanced security checks | ||||
| Nested Privileged Groups | — | ✓ | ✓ | ✓ |
| Shadow Administrators | — | ✓ | ✓ | ✓ |
| AdminCount Exposure | — | ✓ | ✓ | ✓ |
| Stale Privileged Accounts | — | ✓ | ✓ | ✓ |
| KRBTGT Age Review | — | ✓ | ✓ | ✓ |
| Privilege Concentration Analysis | — | ✓ | ✓ | ✓ |
| Unconstrained Delegation | — | ✓ | ✓ | ✓ |
| Constrained Delegation Review | — | ✓ | ✓ | ✓ |
| Resource-Based Constrained Delegation | — | ✓ | ✓ | ✓ |
| Service Accounts with SPNs | — | ✓ | ✓ | ✓ |
| Sensitive Accounts Not Protected | — | ✓ | ✓ | ✓ |
| Excessive Group Nesting | — | ✓ | ✓ | ✓ |
| Privileged Users Outside Approved Groups | — | ✓ | ✓ | ✓ |
| Privileged Interactive Logons | — | ✓ | ✓ | ✓ |
| Dormant Service Accounts | — | ✓ | ✓ | ✓ |
| Excessive Delegated Permissions | — | ✓ | ✓ | ✓ |
| Cross-Domain Privileged Memberships | — | ✓ | ✓ | ✓ |
| Trust Relationship Exposure | — | ✓ | ✓ | ✓ |
| Privileged OU Delegation | — | ✓ | ✓ | ✓ |
| Sensitive Group Exposure | — | ✓ | ✓ | ✓ |
| Protected Users Analysis | — | ✓ | ✓ | ✓ |
| Reversible Password Storage | — | ✓ | ✓ | ✓ |
| SID History Review | — | ✓ | ✓ | ✓ |
| Dormant Privileged Groups | — | ✓ | ✓ | ✓ |
| Privileged Group Sprawl | — | ✓ | ✓ | ✓ |
| Attack Path Indicators | — | ✓ | ✓ | ✓ |
Early adopters receive:
Limited availability
Same EXE for all editions. Paid editions use a signed license.json. No activation server, no phone-home, no machine binding. Company name is embedded into reports.