AUDIT & REMEDIATE
// HARDEN // DETECT

Password Policy & Account Hygiene Auditor

Paste Get-ADDefaultDomainPasswordPolicy, fine-grained PSO output, or Get-ADUser flag exports to find weak password controls, stale krbtgt, PASSWD_NOTREQD accounts, excessive DA count, and adminCount drift — all offline.

Paste AD password policy or account data

Run the collection commands below, paste the output, and get a scored audit with remediation steps. Nothing leaves your browser.