Version: Purple Knight 4.2 Community
IMPORTANT: The security indicators are assigned a more granular severity level to better align with the updated Security Posture scoring algorithm previously introduced in Purple Knight.
For more information about Purple Knight scoring method, check out “Purple Knight Scoring Improves Understanding of Identity System Vulnerabilities.”
.zip
225 MB
Aug 2026
a146e980756ba16f2c9060adbc167a7d578909549f193de54582e1d6e3cf18b9
Purple Knight is a standalone utility that queries the Active Directory and Entra ID environment and performs a set of tests against many aspects of Active Directory’s security posture, including AD delegation, account security, AD infrastructure security, Group Policy security, and Kerberos security. Purple Knight does not require any elevated or administrator permissions.
It is designed to give a quick snapshot of your hybrid Active Directory environment as an attacker would see it. Purple Knight does not make changes to Active Directory. Need help? Use the “Contact us” form to submit your question. Thank you for joining the Purple Knight community!
Purple Knight users report an average initial security score of 61%—a barely passing grade. But users who apply the prioritized guidance provided with the assessment can systematically close AD security gaps, reducing the attack surface by up to 45%.
