netwrix/pingcastle

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2937 stars · 351 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PingCastle is a C# tool that assesses the security posture of Active Directory and Entra ID environments, producing risk scores, health check reports, and trust maps in minutes. It follows an '80% of the issues in 20% of the time' methodology and supports consolidation dashboards for multi-domain estates.

Use cases

• audit active directory security risks
• score the security of my AD domain
• map domain trusts across the forest
• assess Entra ID security posture
• generate a compliance report for auditors
• find privileged account and delegation misconfigurations
• consolidate health check reports across multiple domains

When to choose

• you need a fast, free AD security assessment without deploying agents
• you want maturity scoring and prioritized remediation guidance for management
• you manage many domains and need trust cartography and consolidated dashboards

When to avoid

• you need continuous real-time AD monitoring rather than point-in-time assessment
• your environment is not Windows/Active Directory based
• you require an exhaustive, exhaustive-scope audit rather than a prioritized risk overview

Facets

cli-tool · maturity active

security vulnerability-scanning monitoring security developer-tools windows dotnet cli active-directory entra-id risk-assessment maturity-model audit compliance penetration-testing reporting-tool reporting devops

Member repositories

For agents

markdown · JSON · MCP: product_card(name="netwrix/pingcastle")