Compare ADscan editions
One Active Directory exposure engine, three ways to run it. Community is the free CLI you download. PRO turns one run into a board-ready report. Enterprise runs it continuously, with a guided demo to start.
| CommunityFree · Open sourceThe CLI for pentesters and researchers. | PROSelf-serve · One-shotOne run, one automated board-ready report. | EnterpriseSpecialist-led · ContinuousThe continuous CTEM platform for your AD. | |
|---|---|---|---|
| Who it is for | Pentesters, red teamers, researchers | Consultants and MSSPs who deliver reports | CISOs of regulated entities |
| How you run it | You run the CLI yourself | You run it, it builds the report | Guided demo, then the web platform |
| Frequency | One-shot, on demand | One-shot, on demand | Continuous, 365 days |
| Report | Raw, scriptable output | Automated board-ready report | Continuous dashboard plus reports |
| Compliance mapping | Not included | DORA, NIS2, ENS | DORA, NIS2, ENS, continuous |
| Support | Community, GitHub issues | PRO support | Direct access to a senior AD pentester |
| Price | Free | Contact us | Contact us |
| Get it on GitHub | Start your AD pentest | Get a Demo |
Both Community and the Enterprise demo are free. They are not the same thing.
A CLI you download from GitHub and run yourself, free forever. There is no time limit and no account. It is the engine, in your hands.
A specialist-led live assessment of your own Active Directory. An ADscan AD specialist connects, runs ADscan, walks you through the platform, and hands you the report the same day.
One is a tool you download. The other is a service we run for you.
Questions, answered.
Which edition should I start with?
If you are a pentester or researcher, start with Community: the free CLI on GitHub. If you are a consultant who delivers reports, PRO turns a run into a board-ready report. If you are a CISO who wants continuous Active Directory exposure validation, book the Enterprise demo.
Community is free and the Enterprise demo is free. What is the difference?
Community is a free tool: a CLI you download and run yourself, forever. The Enterprise demo is a free service: a specialist-led live assessment where we run ADscan in your own AD and hand you the report. One is software you operate; the other is a session we run for you.
Do I have to buy PRO or Enterprise to use ADscan?
No. Community is a complete, free engine. PRO and Enterprise add the automated report layer and the continuous platform for teams that need them, on top of the same engine.
Is PRO a subscription?
PRO is the self-serve, one-shot edition: you run ADscan and get an automated board-ready report. Contact us for current pricing and beta access.
What makes Enterprise continuous?
Enterprise is a CTEM platform: scheduled scans, a dashboard, finding lifecycle and attack-path history. Instead of a single snapshot, it revalidates your exposure year round and tracks whether closed paths stay closed.
Does the data ever leave my environment?
No Active Directory data is uploaded and nothing is processed in a vendor cloud. The engine is open source and runs on-premise inside your perimeter, across all three editions.
Download the CLI, run a pentest, or see your exposure live.
Community is free on GitHub. PRO gives you the report. Enterprise gives you the continuous platform, starting with a guided demo.