Forestall ISPM (Identity Security Posture Management) finds the misconfigurations, excessive privileges and attack paths that let an attacker take over your identity infrastructure. It is installed on a single Windows server, needs no agents, and scans five providers:
- Active Directory, including local accounts, Group Policy, AD Certificate Services and file shares (Credential Discovery)
- Azure: Entra ID, Azure Resource Management, Microsoft Teams and SharePoint Online
- AWS: IAM, Organizations and IAM Identity Center
- GCP: Google Cloud IAM and resources, and Google Workspace
- GitHub: GitHub Enterprise Cloud and Enterprise Server
Findings from all providers are combined into issues, attack paths, unified identities, compliance reports and trends.
For what is new in each version, see the Release Notes.
Browse the documentation
EdgesWhat each attack path edge means, how it is abused and how to remove it.IssuesSign inEvery issue Forestall checks for, with its impact and how to find and fix it.API ReferenceUse the REST API from scripts and other tools: authentication and every endpoint.Release NotesWhat changed in each version.