PingCastle

What it is

A command-line assessment program that reviews a directory and produces a risk score and report, built around the company's maturity method, which it says finds most critical issues with a fraction of the usual effort. It is now part of Netwrix.

What it helps with

- Scoring the security of an Active Directory domain or Entra ID tenant
- Mapping trust links between interconnected domains
- Merging several domain reports into one view for management
- Running targeted checks against workstations

Who it's for

IT administrators and security teams assessing directories they own or are authorized to audit.

Worth knowing

Use inside your own organization is free, even for for-profit companies and their contracted IT providers. Reselling it or selling PingCastle-based audits to other organizations needs a paid commercial license.

Can it export directory data?
Yes, it can export lists of users or computers.

Are the downloads signed?
Yes, the binaries are digitally signed to prove their origin and integrity.