Netwrix PingCastle

Helps organizations find Active Directory and Entra ID misconfigurations and security gaps, then gives a risk score and remediation guidance to strengthen identity security.

Suggest a correction

Overview

Scans Active Directory and Entra ID to assess security, detect 170+ hybrid identity risks mapped to MITRE and ANSSI controls, score and prioritize risk, and provide remediation guidance. The free Community edition runs manual scans; scheduled assessments, remediation tracking and multi-domain coverage are in the paid Enterprise edition.
More product details

Who it is for

Organization Types
  • Business
  • Government
  • Individual
Use Cases
  • Risk analysis

Product

Solution Kind
Application

Before you choose

Check before choosing

  • The Community edition is for personal use auditing your own environment and excludes technical support and commercial-use rights; auditing other organizations requires a commercial license.

Working without a connection

  • No internet connection is required, but network connectivity to the domain (for example LDAP, ADWS and SMB) is still needed; the machine-readable report can be RSA-encrypted for transfer such as by email.

Features

Continuous Monitoring

Scheduled AD risk assessment scans in the paid version track risk trends

Enterprise evaluates the maturity score continuously

Not included
  • Free edition runs manual scans only

Categories: Identity Threat Detection and Response

Remediation Management

Provides remediation guidance with actionable steps to fix identified risks

Enterprise edition adds risk remediation tracking

Categories: Identity Threat Detection and Response

Vulnerability Assessment

Assesses Active Directory and Entra ID for misconfigurations and other risk indicators

Categories: Vulnerability Management

Vulnerability Scanning

Scans Active Directory automatically and generates detailed risk reports exposing weaknesses

Detects 170+ hybrid identity risks, including misconfigurations and outdated settings

Not included
  • Free edition runs manual scans; scheduled scans are in the paid version

Categories: Vulnerability Management

Vulnerability/Threat Prioritization

Provides a risk score to focus effort on the most critical security issues

Helps prioritize remediation, aligned with MITRE and ANSSI frameworks

Categories: Vulnerability Management

Risk Assessment

Runs Active Directory and Entra ID security risk assessments producing a risk score and report

Categories: Vulnerability Management

Pricing

Community EditionFree option

Plan details & limits

Business Model
  • Free

Technical details

Deployment

Client OS
  • Platform
    Windows
    Limitations
    • Requires .NET Framework 2 for report generation and .NET Framework 3 for the reporting program (OpenXML).
    Minimum version
    Windows 2000
Delivery Models
  • On premises
  • Cloud (SaaS)
Offline Scope
  • Full workflow

Editions · Enterprise Edition

Edition name
Enterprise Edition
Edition scope
For companies securing their own environment; adds scheduled assessments, risk remediation tracking, multi-domain coverage, centralized reporting, continuous maturity evaluation, KPIs and history.

Editions · Community Edition

Edition name
Community Edition
Edition scope
Free for personal use to audit your own environment, with manual scans; no technical support or commercial-use rights.

Editions · For Service Providers

Edition name
For Service Providers
Edition scope
For audit companies auditing other organizations; requires a commercial license and adds commercial use, a licensed report header, Maturity Level evaluation, extra charts, support and beta access.

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with Netwrix PingCastle.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights