Introduction

Forestall ISPM (Identity Security Posture Management) finds the misconfigurations, excessive privileges and attack paths that let an attacker take over your identity infrastructure. It is installed on a single Windows server, needs no agents, and scans five providers:

• Active Directory, including local accounts, Group Policy, AD Certificate Services and file shares (Credential Discovery)

• Azure: Entra ID, Azure Resource Management, Microsoft Teams and SharePoint Online

• AWS: IAM, Organizations and IAM Identity Center

• GCP: Google Cloud IAM and resources, and Google Workspace

• GitHub: GitHub Enterprise Cloud and Enterprise Server

Findings from all providers are combined into issues, attack paths, unified identities, compliance reports and trends.

For what is new in each version, see the Release Notes.

Forestall ISPM - Identity Security Posture ManagementNavigating the InterfaceGlossaryArchitectureRequirementsInstallationUpdate