Editions

PrivLens pricing — Active Directory rules by edition

Compare Active Directory checks and security rules across Community, Professional, Enterprise, and MSP. Community currently runs 10 checks and remains free forever. Paid editions include 30+ rules plus CSV and JSON assessment reports with broader scan scope.

Feature Community Professional Enterprise MSP
Founding Customer priceFree Forever$249 / 2 Years$1,199 / 2 YearsContact Us
Standard priceFree Forever$249 / Year$1,199 / YearContact Us
StatusDownloadJoin WaitlistJoin WaitlistJoin Waitlist
Scan ScopeSingle AD DomainOne AD Domain TreeEntire AD ForestMulti-Customer
Number of Rules1030+30+30+
PDF Reports✓✓✓✓
JSON Report—✓✓✓
DeploymentOfflineOfflineOfflineOffline
LicensingNoneLicense FileLicense FileLicense File
Essential checks
Domain Admin exposure✓✓✓✓
Password never expires✓✓✓✓
Inactive privileged accounts✓✓✓✓
Service accounts with admin rights✓✓✓✓
Empty password policy findings✓✓✓✓
Basic delegation issues✓✓✓✓
High-level AD health✓✓✓✓
Advanced security checks
Nested Privileged Groups✓✓✓✓
Shadow Administrators✓✓✓✓
AdminCount Exposure✓✓✓✓
Stale Privileged Accounts—✓✓✓
KRBTGT Age Review—✓✓✓
Privilege Concentration Analysis—✓✓✓
Unconstrained Delegation—✓✓✓
Constrained Delegation Review—✓✓✓
Resource-Based Constrained Delegation—✓✓✓
Service Accounts with SPNs—✓✓✓
Sensitive Accounts Not Protected—✓✓✓
Excessive Group Nesting—✓✓✓
Privileged Users Outside Approved Groups—✓✓✓
Privileged Interactive Logons—✓✓✓
Dormant Service Accounts—✓✓✓
Excessive Delegated Permissions—✓✓✓
Cross-Domain Privileged Memberships—✓✓✓
Trust Relationship Exposure—✓✓✓
Privileged OU Delegation—✓✓✓
Sensitive Group Exposure—✓✓✓
Protected Users Analysis—✓✓✓
Reversible Password Storage—✓✓✓
SID History Review—✓✓✓
Dormant Privileged Groups—✓✓✓
Privileged Group Sprawl—✓✓✓
Attack Path Indicators—✓✓✓

Founding Customer Program

Early adopters receive:

  • 2 years for the price of 1
  • Direct influence on roadmap
  • Priority support

Limited availability

Scope definitions

Single AD Domain
A single Active Directory domain and all objects within it.
One AD Domain Tree
Root domain plus all child domains.
Entire AD Forest
All domain trees and domains in the forest.

Licensing model

Same EXE for all editions. Paid editions use a signed license.json. No activation server, no phone-home, no machine binding. Company name is embedded into reports.