ADscan20 seats leftReduce AD pentests from 5 days to ~2. Same coverage, better reports.
Automated enumeration, semi‑guided exploitation (always confirmed), and a MITRE‑mapped, client‑ready report.
Estimate based on pentester benchmarks and early POVs; confirm in your 14-day POV.
Proof
See it in action
Demo: Forest (HTB) domain compromise (~3 min)
Asciinema — deterministic replay recorded in an offline lab. Real‑world timing varies by environment.
Choose your path
Start with a free POV or join our Design Partner program
- ✓Free for 14 days — no card
- ✓Response within 24 hours
- ✓Full features + Word report export
- ✓Setup assistance included
No commitment • Cancel anytime
- ✓90‑day program, direct support
- ✓2 guided POVs (onboarding & review)
- ✓Early access to new features
- ✓Up to 30% discount year 1
Exclusive program • Limited partners only
How it works
See how ADscan integrates into your workflow
Works with Kali/Ubuntu; exports to JSON; report templates for Word.
Read‑only defaults, gated exploits, full action logs, offline mode.
Why teams pick ADscan
Quantifiable benefits that impact your bottom line
*Illustrative. Validate in your POV.
POV: 14‑day path to proof
Your structured path to proving ADscan's value
ROI Calculator
Estimate time saved and incremental margin. Numbers are illustrative; validate in your POV.
Numbers are illustrative; validate in your POV.
Risk‑reversal that makes sense
If the POV doesn't save ≥1 day and surface ≥2 exploitable paths, we extend a second assisted POV at no cost.
Pricing & licensing
Flexible options to fit your team's needs
- ✓Basic scanning features
- ✓Limited report templates
- ✓Community support
- ✓GitHub download
- ✓1 device activation
- ✓All updates & report templates
- ✓Community support
- ✓Activate from CLI
- ✓Tiered volume discounts on named seats
- ✓SSO/SCIM, offline licensing & 7‑day grace
- ✓On‑prem license server option
- ✓Priority support & custom report templates
- ✓PO billing
Security & Compliance
Enterprise-grade security and compliance built-in
FAQ
Common questions about ADscan
How does ADscan reduce AD pentests from 5 days to 2?+
ADscan automates enumeration (saves 1-2 days), provides semi-guided exploitation paths (saves 1-2 days), and automatically generates MITRE-mapped reports (saves 0.5-1 day). The pentester confirms all actions while ADscan handles the heavy lifting.
What's the difference between ADscan and PingCastle/Purple Knight?+
PingCastle and Purple Knight are excellent risk assessment tools for IT teams. ADscan goes further by executing semi-guided exploitation, building complete attack chains, and generating MITRE-mapped evidence ready for consulting deliverables.
How does ADscan differ from Pentera?+
Pentera is an automated GUI-based platform designed for IT teams to run simulations. ADscan is a CLI tool built for pentesters who need granular control over attack vectors, reproducible evidence, and detailed technical reports for client deliverables.
Does ADscan work in air-gapped environments?+
Yes. ADscan supports offline licensing and includes an optional on-premises license server for completely air-gapped deployments. All tools and wordlists are included locally.
What operating systems does ADscan support?+
Currently Linux (Kali, Ubuntu, Debian, Parrot). Docker and Windows support is on the short-term roadmap. Design Partners get early access to new platform versions.
Can ADscan integrate with existing pentest workflows?+
Yes. ADscan exports to JSON for integration with other tools, generates Word reports using your templates, and works alongside BloodHound, NetExec, and other standard AD pentest tools.
How much does ADscan cost for consulting companies?+
PRO seats start at €997/year. Enterprise team packs (5/10/25 seats) include volume discounts, SSO, and priority support. POV Pass available at €249 per 14-day engagement for project testing.
What does the 14-day POV include?+
Full ADscan PRO features, setup assistance, Word report generation, and a debrief session with your team lead. No credit card required. Run in your non-production lab environment.