Autonomous exposure validation

See what an attacker could achieve in your Active Directory environment.

PrismVector validates attack paths and helps prioritize the fixes that interrupt them. Review concrete evidence with optional analysis from Praeven Intelligence, using a local model or your own AI provider.

Early access

Request a private demo Review capabilities

Illustrative attack path

Follow the path to privileged access.

Initial footholdThe starting point inside the network
SMB relayAuthentication redirected to gain access
Service accountAn identity that opens the next step
Certificate servicesMisconfigurations that expand access
Domain privilegeA path to control of the domain

Validated attack paths

Establish what an authorized attacker can achieve, with evidence behind each validated path.

Deterministic execution

A consistent, explainable planning engine operates within your assessment scope and rules of engagement.

Customer-controlled deployment

Run on-premises and assess offline to keep assessment data and credential evidence in your environment.

Praeven Intelligence

Understand the findings. Explore your next steps.

Praeven Intelligence adds optional AI-assisted analysis to PrismVector’s assessment evidence. Interpret attack paths, examine how findings connect, and explore remediation priorities with a local model or your own AI provider.

Local AI

Keep AI-assisted analysis inside your environment with a self-hosted model. Support restricted and offline assessments without sending advisor requests to an external provider.

Bring your own AI

Connect your preferred provider through a supported API using your own API key. Advisor requests are sent to the external provider you configure.

Run without AI

Discover and validate attack paths using the deterministic engine alone. An AI model is optional and is not required to execute an assessment.

The deterministic planning engine controls assessment execution. Praeven Intelligence assists with analysis; it cannot override scope or safety policies.

Exposure-driven remediation

Find the fixes that interrupt multiple attack paths.

Individual weaknesses can combine into access to critical systems. PrismVector connects those findings and highlights shared controls and choke points, helping your team focus on changes that address multiple routes to compromise.

Connect exposure to impact

Trace how credentials, permissions, and trust relationships lead toward domain compromise and other critical assets.

Prioritize corrective action

Use validated paths and affected assets to decide which controls to strengthen and which exposures to address first.

Verify the result

Use targeted validation to check whether a previously working path is closed, then compare assessments to identify changes in exposure.

Continuous threat exposure management

Make validation part of your security program.

PrismVector supports continuous threat exposure management (CTEM) for Active Directory environments. Scheduled reassessments, drift analysis, and targeted validation connect discovery to remediation and follow-up.

Discover
Identify hosts, identities, credentials, permissions, trust relationships, and misconfigurations within the authorized scope.
Environment context
Map
Construct an attack graph that connects exposures to potential routes toward critical assets.
Attack-path intelligence
Validate
Follow authorized attack paths with a deterministic planner that updates its next action based on assessment results.
Concrete evidence
Prioritize
Identify remediation opportunities using validated access, business impact, and controls shared across paths.
Remediation priorities
Reassess
Validate fixes, compare runs, and detect changes that introduce or reopen paths to critical assets.
Continuous validation

Assessment controls

Stay in control of the assessment.

Set the assessment scope and rules of engagement before execution. PrismVector records active changes, attempts to restore affected systems, and verifies cleanup so your team can review what happened throughout the run.

Scope and authorization

Explicit targets, protected account exclusions, lockout-aware credential testing, and approval gates constrain active validation.

Reversible-first techniques

Active techniques prioritize reversible changes. Change records, restoration attempts, and cleanup verification make follow-up work visible.

Operator visibility

Mission Control shows assessment progress and validated access. Operators can launch, pause, resume, or abort a run and review its evidence and audit trail.

Product view · lab benchmark

A demonstration run against Game of Active Directory.

A run against Game of Active Directory, the open benchmark forest, reaching Domain Admin in about fifteen minutes with evidence preserved at each step.

PrismVector Attack Story: a nine-step compromise chain against the GOAD benchmark forest, ending in domain compromise via DCSync — Attack Story, GOAD benchmark run. Tap to open at full size.

Current validation scope

Windows and Active Directory exposure.

Identity and trust boundaries

LDAP, users, groups, privileged ACLs, delegation, gMSA and LAPS access, parent-child domains, forest trusts, SID filtering, selective authentication, and cross-domain privilege relationships.

Kerberos and delegation

Kerberoasting and AS-REP exposure, constrained and unconstrained delegation, service relationships, and privilege paths.

Certificate services

Certificate service configurations, vulnerable templates, enrollment relationships, and attack path implications.

Windows and enterprise services

SMB, shares, sessions, domain controllers, MSSQL, SCCM, and related access relationships.

Credential and privilege exposure

Weak or exposed credentials, credential reuse, replication rights, and privilege conditions that expand a validated attack path.

Continuous exposure management

Run history, run comparison, drift detection, incremental workflows, resume behavior, and risk trend outputs.

Evidence and reporting

Turn validated attack paths into a remediation plan.

Review the evidence behind validated access and export technical and executive reports. Give security teams the detail to investigate findings and leadership the context to set priorities.

Inspect the technical evidence

Each validated path can include:

Commands executed and supporting output
The chain of events leading to validated access
Affected assets and credential evidence
Attack graphs, timelines, and assessment audit trails
Change records and cleanup verification results

Communicate what needs to change

Use reporting to explain the findings and track follow-through:

Executive and technical summaries
Business impact and recommended remediation
Priorities based on validated attack paths
Remediation status and reassessment results
Run comparisons, drift analysis, and exposure trends

Assessment data and credential evidence can remain on-premises. Offline operation is supported by the deterministic engine and a local advisor; using an external AI provider sends advisor requests outside your environment.