Bill for the fix, not just the finding.
The free tier already hands your client a report of what is exposed. PRO adds the half you get paid for: the exact remediation command on the exact object, evidence for every attack path, conformance mapping, and your firm's name on the cover instead of ours. Free for 30 days.
What you get
Security Assessment Report
Posture score, findings, and every attack path with its own graph and narrative.
AD Hardening Playbook
The exact native command per finding, ordered into a 30-day plan.
AD Control Coverage Report
What was tested and what it found, mapped to ENS, NIS2, ISO 27001, DORA and PCI DSS controls.
MITRE ATT&CK Navigator bundle
Interactive HTML view plus the JSON layer for MITRE's own Navigator.
One command, adscan deliver, about 90 seconds from a finished workspace. All four carry your branding, not ours.
Why it comes back
A finding is a one-off. The cycle around it is not: an audit date, a board cycle, a contract renewal. The report is what a client asks you for. The remediation and the pre-audit pass are what they keep you for.
Spain is the clearest worked example. A system certified under the ENS has to be audited at least every two years, indefinitely (art. 31.1), and the CCN registry currently lists 3,823 of them. The audit standard then bars the certifying auditor from doing consultancy on the system it audits (ITS de Auditoría, IV.2), so readiness, remediation and the pre-audit pass have to come from a different supplier. Art. 2.3 pulls in private companies serving the public sector and their supply chain, which makes the addressable list a good deal wider than the public sector itself.
ADscan does not issue conformity certificates and will not: that channel is accredited and closed. PRO is built for the work on either side of the audit, which is the part that comes back.
The deal
Thirty days, free, no card. Use it on real client engagements. In exchange: your feedback, and a short testimonial if it earns one.
We are paying in access because feedback from someone billing AD work is worth more to us than licence revenue while PRO is pre-1.0. That stops being true once it is priced.
Request access
Request PRO beta access
Tell us your next engagement. We reply same day.
No card · Reply same day
Where this goes next
PRO is the entry rung. Two things sit above it, and they are bought by different people.
Your client
Wants the validation on a schedule rather than once, with drift tracked between runs. That is the Enterprise platform, and it is a different conversation from this one.
See a platform demoYour firm
Wants AD validation as a recurring line under your own brand, not a tool you re-buy per engagement. That is the partner programme.
Become a partnerSomeone else's firm
Should be running this and isn't. Refer them and earn on their first deal.
Champion referral