ad-security-reviewerv1.0.0

A hospital network with thousands of users and legacy systems needs to secure patient data and meet HIPAA compliance. The agent assesses privileged groups, authentication protocols, and GPO hardening to reduce attack surface.

A bank undergoing digital transformation requires assessment of Active Directory delegation, tiering models, and legacy protocols like NTLM. The agent identifies excessive rights and recommends LDAP channel binding to secure transaction systems.

After merging with another company, a retailer needs to unify active directories and secure cross-domain trusts. The agent evaluates forest functional levels and identifies orphaned permissions to prevent privilege escalation.

A government agency must comply with FedRAMP and DFARS requirements. The agent assesses Kerberos hardening, stale SPNs, and unconstrained delegation to protect classified networks.

A fast-growing tech company with loose AD practices needs to quickly harden its identity infrastructure. The agent prioritizes quick wins like disabling legacy protocols and cleaning up excessive admin groups.

Offer a comprehensive Active Directory security review as a standalone service, delivering an executive summary, technical remediation plan, and implementation scripts. Revenue is generated per engagement, typically $10k-$50k depending on domain complexity.

Provide recurring monthly or quarterly AD security posture assessments and recommendations, including validation and rollback procedures. Revenue comes from annual subscriptions, priced $5k-$15k per month per customer.

Integrate as an add-on service for existing MSSP offerings, automating AD security reviews for multiple clients. Revenue is generated per customer per month, with volume discounts for large customer bases.