Start free on one domain, or turn an AD engagement into a living, reachability-scored portal — forest-wide collection, continuous drift, and the pentest-portal delivery. Every tier is read-only and self-contained; upgrades unlock in-app after you sign in.
Switch to annual and get 2 months free on every paid tier. Annual billing — 2 months free: pay for ten months, use twelve.
One domain · 7-day retention
Start freeOne domain · 90-day retention
Get startedUnlimited domains (one forest) · 365-day retention
Get startedHybrid AD + Entra · unlimited retention
Get startedMulti-tenant · everything unlimited
Contact salesAll paid tiers unlock in-app after you sign in with Ferrum ID — no card details are ever entered on this page.
Every tier is read-only, no-exploit, and no-secrets by construction — the collector runs inside your trust boundary and reaches the DC over private LDAPS, so your Domain Controller is never exposed. Ethical by design: no ads, no dark patterns, no selling data.
Yes. The Free tier maps one domain with the full reachability-scored explorer and a 7-day snapshot window. No card required — sign in with Ferrum ID and start mapping.
Annual is ten times the monthly price — two months free. Flip the toggle above to reveal the $990 / $2,990 / $5,990 annual figures for each paid tier.
Bastion never writes to the directory and ships zero offensive capability. It detects conditions; it never exploits them. No credential material is ever collected.
No. The collector runs inside your trust boundary. The only traffic that crosses it is a single outbound 443 — and in air-gapped mode there is none at all.
Forest. It turns an AD assessment into a living, reachability-scored subscription instead of a static PDF appendix — the delivery model the whole product was built around.
Any time, in-app. Each tier is additive: you keep everything from the tier below and add the next set of capabilities and a longer retention window.
Sign in with Ferrum ID and map your attack surface — free on one domain.
