.NET 10 & WPF
A modern, native Windows interface. No browser shell, no runtime zoo to install.
Active Directory under control – and everything that depends on it.
Audit and manage accounts, groups, permissions, tier model, Kerberos, NTLM and Group Policy properly – plus tools for PKI, Exchange, security and compliance – with audit-proof PDF and HTML reports, AES-256 encryption and no cloud dependency. Your data stays with you.
No tool is an island. What holds for one holds for all of them.
A modern, native Windows interface. No browser shell, no runtime zoo to install.
PDF and HTML reports that stand up in an audit – traceable and exportable.
Credentials and configurations are stored encrypted with AES-256 throughout.
On-premises operation. No registration, no telemetry. Your data stays on your network.
Developed in Euskirchen – out of more than 30 years of managed-service practice.
Our software is protected by copyright; parts of the underlying technical concepts are subject to industrial property rights or their examination.
Search by product name, technology or standard – for example “Kerberos”, “DKIM”, “NIST” or “LAPS”.
Automatically detect, warn about and disable inactive user accounts – including password expiry warnings by e-mail.
Detect domain and forest takeover paths in a single run – usable as evidence for BSI, ISO 27001 and GDPR audits.
Time-limited memberships, deprovisioning rules, attestation and drift detection with a hash-chain audit trail.
Migrate users, groups, contacts and entire OUs between domains – backup and restore in a single click.
BSI-compliant rotation for service accounts and privileged accounts – with audit log, SQL Server and gMSA integration.
Roll out tiering in clearly separated phases – based on AD, GPO, Windows LAPS and authentication policy silos.
Analyse, filter, edit and export user attributes – including reconciliation with HR records.
Check for stale accounts, weak policies, unsafe delegations and missing LAPS – aligned with BSI and NIST CSF.
Local administrator rights for a limited time only – with ticket reference and tamper-proof logging.
Verify mandatory and optional AD group memberships – for both computer and user compliance.
Manage managed service accounts conveniently instead of relying on error-prone PowerShell cmdlets.
Read, evaluate and document every member of the local administrators group across the whole network.
Keep service principal names for Kerberos authentication in Active Directory clean and under control.
Discover, analyse and directly apply the hidden registry keys behind group policies.
Control Windows audit policies clearly – with reporting and best-practice recommendations based on international standards.
Automatically identify configuration problems, security risks and compliance violations across your GPO infrastructure.
Back up and restore group policies completely – including links and WMI filters.
Manage AD group memberships and synchronise security filtering between GPOs.
Automatically audit and harden Windows security settings against CIS Benchmark, BSI Grundschutz and NIST CSF.
Systematically audit Active Directory Certificate Services for misconfigurations and attack paths.
Remotely operate a Microsoft certification authority – from request and approval through to revocation, fully auditable.
Back up, restore and migrate AD CS servers – with a graphical interface and command-line support.
Inventory certificates and private keys network-wide – from computer and user stores as well as loose files on disk.
Centrally manage and monitor SSL/TLS certificates from internal and external domains.
Create and convert CSRs for SSL/TLS, S/MIME and code signing, and build certificate chains.
Configure TLS protocols, cipher suites and Schannel settings safely and traceably.
Kerberoasting, AS-REP roasting, unsafe delegations, outdated encryption and krbtgt – benchmarked against CIS and BSI.
Master the three-phase NTLM shutdown and the RC4 Kerberos block coming in April 2026 with confidence.
See first, enforce second: switch off SMB1 and set minimum dialects without breaking a single connection.
Analyse every SMB share in parallel – a weighted overall score from 0 to 100 with concrete recommendations.
ARC sealing and Ed25519 keep legitimate e-mail trustworthy even after forwarding.
Quick status, DNS traffic light and real-time metrics: messages processed, success rate and signing time per domain.
Check SPF, DKIM and DMARC comprehensively – headers and DMARC reports are processed 100 % locally.
Create, analyse and optimise SPF records – for reliable e-mail authentication.
More than 72 queries give you the complete picture of every important configuration aspect of your Exchange system.
Analyse mail flow and spot anomalies – transparency as the foundation for better security.
Query message tracking logs comfortably and follow messages from sender to recipient.
Identify anonymous SMTP connections on Exchange servers and uncover potential security gaps.
Test SMTP connections to Exchange and other mail servers quickly – before the helpdesk phone rings.
Bulk-export Exchange mailboxes to PST – for migrations, archiving and compliance requirements.
Define which autodiscover methods Outlook is allowed to use – without touching the registry by hand.
Open the BSI’s machine-readable OSCAL catalogues, make them searchable and carry them through to audit-proof evidence.
BSI CERT-BUND, CISA KEV and FIRST.org EPSS combined into one priority metric – with asset monitoring and CSAF verification.
Monitor, harden and maintain Windows environments from a single window – servers, clients and domain controllers.
Automatically check installed software against the NIST National Vulnerability Database and detect CVEs.
Prove agentlessly – via the Windows Update Agent API and WinRM – which updates are installed and what is missing.
Analyse Sysmon event logs: real-time endpoint monitoring and forensic analysis of security incidents.
Active connections, listening services, DNS activity and anomalies per process in real time – a basis for NIS2 and ISO 27001.
Generate authentication events in the security log in a controlled way – without real attacks and without cloud services.
Systematically assess, manage and document security controls according to NIST SP 800-53 Revision 5.
Collect evidence for PCI DSS audits automatically and prepare your certification in a targeted way.
Close out departing employees in AD and Exchange in a GDPR-compliant way – automated and verifiable.
Centrally record logons from any number of domains and standalone servers, retain them audit-proof and report anomalies.
Manage Windows servers centrally via PowerShell remoting (WinRM with and without SSL) – the alternative to Server Manager.
Manage Windows scheduled tasks centrally and remotely – instead of laborious one-by-one work over RDP sessions.
Monitor remote desktop sessions across multiple servers and sign users out individually or in bulk.
Manage, back up and restore Windows services – including advanced security settings.
Monitor business-critical services and see what is running – before it stops running.
Monitor event logs in real time – locally and remotely, with intelligent filters and extensive export options.
Centrally manage, analyse and document firewall rules on one or many servers.
Run Node.js servers, Python or PowerShell scripts and your own applications reliably as a Windows service.
Set up WinRM services, HTTPS listeners, certificate bindings and firewall rules without the command line – domain or workgroup.
Manage and automatically monitor Windows DNS servers efficiently – forward and reverse zones at a glance.
Manage the IPv4 routing table graphically instead of via route add or netsh.
A complete NTFS inventory in seconds: MFT, cluster geometry, USN journal and six NTFS special features.
Clean up the component store (WinSxS) and the update cache centrally via WinRM – with a before/after report by e-mail.
No tool found. Try a different term or reset the filter.
Talk to the developer directly – no sales funnel, no webinar gate. Usually an answer within one working day.