Where lateral movement becomes domain compromise

Deep, identity-focused testing of the systems that decide who can access what — on-premises Active Directory, Entra ID, and the IAM model tying them together.

3

Named Engagements

IAM

Reference Prefix

05/09

Testing Discipline

Post-Exploitation

Kill-Chain Stage

Active Directory & Identity Testing

Each engagement carries its own reference code for scoping — combine across disciplines to cover your full attack surface.

01 NET 02 CLD 03 INF 04 WRL 05 IAM 06 SEC 07 RDY 08 CTS 09 PAS

IAM-01

Active Directory Security Assessment

Assesses AD configuration, trust relationships, and privilege structures for exploitable weaknesses.

IAM-02

Entra ID Security Assessment

Assesses cloud identity configuration, conditional access, and privileged access design.

IAM-03

Identity & Access Management (IAM) Assessment

Assesses the end-to-end IAM model for gaps between on-prem and cloud identity.

← 04 / WRL Wireless & Remote Access Testing 06 / SEC → Social Engineering Services

Need help with active directory & identity testing?

Tell us where active directory & identity testing sits in your current programme — we'll scope the right service, or the full register.

Request a Scoping Call