Deploy in minutes with Windows Installer or PowerShell. Read-only assessment—no system modifications, ever.
IdentityHealthCheck runs entirely in your environment. No cloud data transfer required.
IdentityHealthCheck uses read-only API permissions only. No write operations, no configuration changes, no data modifications. Safe for production environments.
The fastest way to run your first assessment. Single command deployment.
Download and run the Windows installer:
Open IdentityHealthCheck from the Start Menu or run Launch-IdentityHealthCheck.bat.
The setup wizard will guide you through connector configuration.
Add credentials for your identity platforms. Start with Active Directory or Entra ID for immediate value.
Click "Start Assessment" and receive your comprehensive report in ~28 minutes. Reports are saved locally—no cloud upload.
A valid license key is required after the trial period. View pricing or request a trial.
Native Windows installation with GUI setup wizard. Ideal for Windows-only environments.
Download from your customer portal or request access:
Customer Portal Request Access
Right-click IdentityHealthCheck-Setup.exe and select
"Run as administrator". Follow the setup wizard.
Your license key was provided via email. Enter it during setup or in Settings after installation.
For scheduled assessments, install as a Windows Service:
Command-line interface for automation, scripting, and CI/CD integration.
Lightweight, cross-platform deployment using Python. Perfect for SMEs wanting maximum flexibility with zero licensing costs.
Python is completely free and open source. No container licensing, no subscription fees for runtime. Runs on any platform—Windows, Linux, or macOS—with minimal resource requirements.
Download Python from python.org or use your package manager:
Use Windows Task Scheduler or cron for regular assessments:
For the simplest setup, download our all-in-one Python installer which bundles Python and all dependencies. Single click deployment—no command line required. Request the bundled installer.
Docker and Kubernetes deployment options are on our roadmap for organisations requiring containerised infrastructure.
Single container and Docker Compose deployments for development and testing environments.
Helm charts and K8s manifests for enterprise-scale orchestrated deployments.
Interested in container deployments? Register your interest and we'll notify you when these options become available.
Configure read-only access to your identity platforms.
Requires: Domain User account with read access to AD objects. No special permissions needed—standard user is sufficient.
Requires: App Registration with Microsoft Graph API permissions (Directory.Read.All, AuditLog.Read.All). Global Reader role recommended.
Setup GuideRequires: IAM User or Role with ReadOnlyAccess policy. Cross-account access supported via IAM roles.
Setup GuideRequires: API Token with Read-only Admin scope. Created in Okta Admin Console → Security → API.
Setup GuideRequires: Service Account with Viewer role on organisation/projects. Workspace Admin SDK access for Workspace assessment.
Setup GuideRun your first assessment and understand your results.
Choose which identity platforms to assess. Start with one (e.g., Active Directory) for fastest results.
Click "Start Assessment" or run Invoke-IHCAssessment.
Typical scan time: 15-45 minutes depending on environment size.
Your report includes:
Download in PDF (executive), HTML (interactive), JSON/CSV (integration), or DOCX (documentation) formats.
Symptom: "Connection timed out" when scanning AD or Entra ID.
Solution: Verify network connectivity to domain controllers or Microsoft Graph API. Check firewall rules allow LDAPS (636) and HTTPS (443).
Symptom: "Access denied" or "Insufficient permissions" errors.
Solution: Verify the service account has required read permissions. For Entra ID, ensure API permissions are granted admin consent.
Symptom: "Invalid license" or "License expired" message.
Solution: Check license key for typos. Ensure system clock is accurate (NTP sync). Contact support if issue persists.
For detailed troubleshooting, API reference, and advanced configuration, visit our documentation portal.
Need help with installation? Our team is here to assist.
Deploy IdentityHealthCheck today and get your first security assessment in under an hour.