Semperis's Purple Knight is a security assessment tool that scans Active Directory, Microsoft Entra ID, and Okta environments to identify vulnerabilities, misconfigurations, and indicators of exposure and compromise. It performs read-only tests against common attack vectors, covering areas such as Active Directory infrastructure, Group Policy, Kerberos, privileged accounts, and legacy authentication. The tool generates a report with an overall security score, category-based scores to pinpoint weakness concentrations, and prioritized remediation guidance, with findings mapped to frameworks like MITRE ATT&CK and ANSSI. Results can be exported, and the assessment can be run repeatedly to track security posture over time across hybrid directory environments.
