Free Active Directory security assessment
Semperis built Purple Knight – a free AD, Entra ID, and Okta assessment tool – to help you discover indicators of exposure (IoEs) and indicators of compromise (IoCs) in your hybrid AD environment. Download Purple Knight and dramatically reduce your AD attack surface today.
Download nowVersion: Purple Knight 5.1 Community- 82,600+ downloads (and counting)
- 232+ IoEs and IoCs
- 45% AD attack surface reduction
How secure is your Active Directory, really?
Our 2025 survey of Purple Knight users found that Active Directory, Entra ID, and Okta vulnerabilities can give attackers virtually unrestricted access to your organization’s network and resources.
Average security score
A barely passing grade
-11
11 points lower
Respondents scored 11 points lower than the average score reported in 2023
+21
21 point increase
Users who apply the prioritized guidance were able to increase their score by an average of 21 points and as much as 61 points
Uncover your AD, Entra ID, and Okta security vulnerabilities in minutes.
Get started with Purple Knight
With an Active Directory security audit, spot threats before attackers do.
Find AD, Entra ID, and Okta security gaps with Purple Knight. Perform a comprehensive set of tests against the most common and effective attack vectors to find risky configurations and security vulnerabilities.
Identify and prioritize Active Directory security gaps for remediation.
Gain visibility into your hybrid AD security posture with the Purple Knight report. See your AD, Entra ID, and Okta security audit scores in five categories, plus get prescriptive guidance from identity security experts to help you prioritize remediation efforts.
Fix AD, Entra ID, and Okta security threats that attackers can exploit.
Use Purple Knight’s prioritized, expert guidance to systematically address AD, Entra ID, and Okta misconfigurations and unpatched vulnerabilities—for example, admin accounts with old passwords and enabled admin accounts that are inactive.
Validate hybrid AD security posture over time.
Run Purple Knight’s AD security audit periodically to guard against misconfigurations that can accumulate over time and degrade hybrid AD environment security if left unchecked.
Avoid common Active Directory attacks
-
AD, Entra ID, and Okta security audit
-
Indicators of Exposure
and Indicators of Compromise -
Community-driven
AD threat intelligence -
Prioritized AD security
guidance from Semperis experts -
MITRE ATT&CK
correlation
What do Purple Knight users say?
Report: The Ongoing Struggle to Secure Hybrid AD and Entra ID Environments.
Despite increased awareness of AD and Entra ID as a primary attack target, organizations continue to struggle to adequately secure their hybrid AD environments. Our 2025 survey, in addition to in-person interviews with IT and security team members, points to continued challenges in adequately securing hybrid AD and Entra ID identity systems across every industry sector.
Resources
Learn how malicious actors are targeting Active Directory. Explore how Purple Knight is helping organizations close security gaps in their AD environments.
See all resourcesTrain the team that defends identity
Finding security gaps is just the start. Semperis and Hack The Box help your team close them—and prepare for what’s next—with hands-on practice using Purple Knight.
