DOMAINator is a fully automated Active Directory penetration testing platform. You connect a VPN to a client's network, enter the target IP, and the system executes a real attack chain — credential harvesting, relay attacks, privilege escalation, and lateral movement. It tests every known escalation path, not just the first one it finds. You get a full penetration test report with evidence, attack paths, and remediation — not a vulnerability scan.

A typical infrastructure pentest means one person sitting in your office for 3–5 days, finding 1–2 attack paths to Domain Admin, writing it up, and delivering a report 2 weeks later. They stop at the first win. They test what they know and have time for. DOMAINator tests every escalation gate systematically — in minutes, not days. It cross-references every credential, every access, every misconfiguration to find paths a human would miss or not have time to explore. And it costs a fraction of what a single engagement costs.

AI scanners suggest theoretical vulnerabilities. They don't exploit anything. They can't relay a credential, escalate privileges, or move laterally through an Active Directory environment. DOMAINator performs real exploitation with real tools — it harvests actual credentials, gains real shells, and achieves actual Domain Admin access. The report shows proof, not predictions.

In a traditional retest, the pentester comes back, opens your previous report, and tries to recreate only the findings you fixed. That's it. DOMAINator's rescan runs the entire attack chain again from scratch. It re-tests everything — including new attack paths that may have appeared since the fixes, regressions, and misconfigurations the original scan didn't need because it already had DA. It's not a checklist re-check — it's a full test.

Your data never leaves the scan environment. Credentials and hashes found during the scan are used only within the attack chain and stored encrypted in your report. Reports are retained for a limited time based on your plan, then permanently deleted. We don't share data with third parties. Zero data is sent to any AI service.

Yes, absolutely. DOMAINator executes real attacks against real infrastructure. You must have written authorization from the network owner before running any scan. Every scan requires you to confirm authorization. Unauthorized use is illegal and a violation of our terms of service.

Three things: 1) An account on DOMAINator. 2) A VPN configuration file (.ovpn) that connects to the target network. 3) The IP address of a Domain Controller. Upload the VPN, enter the target, and hit scan. The platform handles everything else — from reconnaissance to the final report.

Most scans complete in 15–45 minutes depending on the environment. You can watch the entire attack chain live in real-time through the terminal view. Every action is logged and visible — nothing happens behind a black box.

The CISO plans (Warband and Legion) are built for security teams. You get a command dashboard to manage multiple pentesters, monitor all scans across your team, view aggregate analytics, and control scan policies. Each team member gets their own credentials — they run scans, you see everything.

Yes. All plans are month-to-month unless you choose annual billing (which saves 17%). Cancel anytime — no contracts, no hidden fees, no cancellation penalties. Your scans and reports remain accessible until the end of your billing period.