Automated pentesting
Claymore Exposure Assessment
Find the weaknesses an attacker would use in your Active Directory, close them, and leave a Claymore Decoy in their place.
- 01
Scan
Claymore tests your directory and certificate services for the weaknesses attackers exploit, on a schedule you set or on demand.
- 02
Fix
Every finding names the exact object, the evidence, and the command that closes it.
- 03
Fortify
Leave a Claymore Decoy where the weakness was. The next attacker who goes looking for it trips an alert.
Why continuous
Your directory changes every day
A pentest is a snapshot
It tells you what was exploitable the week the testers were in. Directories change daily: a new service account, a copied template, a delegated permission nobody revisits.
Exposure Assessment keeps looking
It runs the same discovery an attacker runs, on every client, on a schedule. Every finding comes with the fix, and a decoy to put in its place.
Coverage
What it looks for
Every attack path Claymore Decoys imitate, found for real in your environment.
Active Directory
- Kerberoastable service accounts
- AS-REP roastable accounts
- Unexpected replication (DCSync) rights
- Pre-Windows 2000 computer accounts
- Objects open to Shadow Credentials
- Computers open to delegation abuse (RBCD)
Certificate services
- ESC1 vulnerable templates
- ESC2 vulnerable templates
- ESC3 vulnerable templates
- ESC4 vulnerable templates
- ESC9 vulnerable templates
- ESC13 vulnerable templates
- ESC15 vulnerable templates
Features
From finding to fixed
Read-only by design
The assessment only reads. Nothing is ever written to AD.
Benefit
Safe to run in production, on every client, as often as you like.
Continuous
Scans run on a schedule you choose, from hourly to weekly, or on demand with one click.
Benefit
A misconfiguration introduced on Tuesday is a finding on Tuesday, not at next year’s pentest.
The fix, ready to run
Each finding comes with a hardening command for your team to run, and how to undo it.
Benefit
Remediation starts from a command, not a research project.
Turn the gap into a trap
Deploy a Claymore Decoy straight from a finding, imitating the exact weakness you just closed.
Benefit
The weakness attackers came for is still there. It is just ours now.
Tracks itself
Findings close automatically when a later scan no longer sees them. Accepted risks stay accepted.
Benefit
The list is always the current state of the directory, with no manual upkeep.
Built for partners
Findings are kept per client, and partners review every client from one console.
Benefit
Every client gets a current exposure picture without a separate engagement.
Availability
Included with the Deception Platform
Exposure Assessment runs on the same agent as the Claymore Deception Platform. There is nothing extra to install: switch it on per client from the console. It is available through Claymore partners.
Stop tuning. Start catching.
Claymore is delivered through managed service and security partners. Bring it to your clients, or let us connect you with a partner who already runs it.