Open Source
Security Auditor
419 security checks for Active Directory & Azure Entra ID. Audit your domain in 6.58s. 6.2× faster than PingCastle.
Why ETC Collector
Built for speed & coverage
Everything you need for AD & Azure identity security auditing
Blazing Fast
6.58s full audit — 6.2× faster than PingCastle
- ~20 MB static binary, zero runtime deps
- Concurrent LDAP / Graph API queries
- Goroutine pool with 369+ detectors
Comprehensive Coverage
419 security checks across AD & Azure Entra ID
- 275 Active Directory checks (14 categories)
- 144 Azure Entra ID checks (9 categories)
- ANSSI, CIS, NIST, DISA frameworks
100% Free & Open Source
Apache-2.0 licensed, forever free
- Full source code available on GitHub
- Community contributions welcome
- Pro edition for ADCS & Attack Paths
Attack Path Analysis
Identify privilege escalation vectors
- BFS attack path graph (Pro)
- ADCS ESC1–ESC11 full taxonomy (Pro)
- Delegation & shadow credential abuse
Competitive Benchmarks
Faster. More checks. Still free.
Tested on a real domain — 546 users, 100 computers, Windows Server 2016, ADCS present.
Quick Start
Up & running in one command
Single static binary — no runtime dependencies
# One-liner install curl -fsSL https://get.etcsec.com/install.sh | sudo bash # Run an AD audit etc-collector audit ad --ldap-url ldaps://dc.example.com
Install
One-liner script or grab the binary for your OS
Configure
Set your AD/Azure credentials in config.yaml or via flags
Audit
Run and get structured JSON results in seconds
Pro Edition
Go further with Pro
The community edition is free forever. Pro unlocks advanced detectors, attack path graphs, ADCS full taxonomy, and an AI-native MCP server integration.
Get Pro AccessETCSec SaaS
Multi-tenant platform
Dashboards, historical trending, automated scheduling, and team collaboration — all backed by ETCSec SaaS.
Explore ETCSec SaaS