Active Directory security assessment
Vulnerabilities in Active Directory, Entra ID and Okta can give attackers virtually unlimited access to your organisation's network and resources. Semperis created Purple Knight-a free AD, Entra ID and Okta security assessment tool-to help you discover indicators of exposure (IoE) and indicators of compromise (IoC) in your hybrid AD environment. Download Purple Knight and dramatically reduce your AD attack surface today.
Purple Knight Version 4.3 Community
Prevent common attacks on Active Directory
Security auditing of AD, Entra ID and Okta
Exposure Indicators and Commitment Indicators
Community-driven AD threat intelligence
Priority AD security guidance from Semperis experts
MITRE ATT&CK correlation
Discover security vulnerabilities in AD, Entra ID and Okta in a matter of minutes.
Unleash Purple Knight
With an Active Directory security audit, detect threats before attackers do.
Find security holes in AD, Entra ID and Okta with Purple Knight. Perform a comprehensive set of tests against the most common and effective attack vectors to find risky configurations and security vulnerabilities.


Identify and prioritise Active Directory security gaps for remediation.
Gain visibility into the security posture of your hybrid AD with the Purple Knight report. View your AD, Entra ID and Okta security audit scores in five categories, and get prescriptive guidance from identity security experts to help you prioritise remediation efforts.
Address AD, Entra ID and Okta security threats that attackers can exploit.
Use Purple Knight's prioritised and expert guidance to systematically address AD, Entra ID and Okta misconfigurations and unpatched vulnerabilities, for example, administrator accounts with old passwords and enabled administrator accounts that are inactive.


Validate the hybrid AD security posture over time.
Periodically run Purple Knight's AD security audit to prevent configuration errors that can accumulate over time and degrade the security of the hybrid AD environment if left unchecked.