Make sure your servers, databases and directory are built securely
Build reviews and Active Directory audits that check the foundations your estate runs on.
Trusted by companies of all shapes and sizes
What are build reviews and Active Directory audits?
A build review checks how a server, workstation or database server has been configured against good-practice hardening standards. It looks at patching, services, accounts, permissions and logging, to find settings that give an attacker an easy way in or a way to move further.
An Active Directory audit examines the identity system at the heart of most networks, covering privileged accounts, group policy, trust relationships and common misconfigurations. Findings are reported in the Rootshell Platform with prioritised remediation advice.
The benefits of build review and Active Directory audit for your business
Check the foundations, so every system starts from a secure baseline.
Identify potential vulnerabilities
Find insecure defaults, missing patches, excessive permissions and weak account settings across servers, workstations and databases.
Proactive defence
Harden your standard builds so every new system starts from a secure baseline.
Limit the damage
See how an attacker who gains a foothold could escalate privileges through your directory, and where to stop them.
Better visibility and control
Compare configurations against recognised standards and track improvements over time.
Stay compliant
Provide evidence of secure configuration for frameworks that require hardened systems and controlled access.
Stay ahead of threats with our build review and Active Directory audit
Get Started
On-demand build review results at the click of a button
The Rootshell Platform is a neutral, centralised hub for managing vulnerabilities and protecting against threats, providing you with a single source of cyber security truth.
Recognised industry leader in penetration testing as a service (PTaaS)
Comprehensive build review and Active Directory audit tailored to your needs
Elevate your security with a customisable, all-in-one solution tailored to your unique objectives, risk appetite, and budget.
Build your package:
- Penetration Tests
- Managed Vulnerability Scanning (MVS)
- Attack Surface Management (ASM)
- Red Team Assessments
- We help you choose the services that best fit your needs
- Solutions tailored to meet your team’s objectives, risk appetite, and budget
Plus receive your results an data through The Rootshell Platform
Ready to get started?
Discover your needs
Dive into a personalised demo
Seamless onboarding
Reasons to work with us
For build review and Active Directory audit, Rootshell combines accredited testers with the Rootshell Platform, so every finding is easy to track and fix.
All your results in one place
Findings, retests and fixes sit in the Rootshell Platform alongside your other testing and scanner results, so progress is easy to track.
Accredited, experienced testers
Delivered by experienced testers. Rootshell is CREST registered, Cyber Scheme accredited, ISO 27001 certified, an IASME Cyber Essentials Plus certification body, and NCSC CHECK scheme accredited.
Recognised standards
Builds are compared with recognised hardening guidance, such as CIS Benchmarks and vendor security baselines.
Clear reports, clear next steps
Clear, prioritised findings with practical fix advice, and retesting to confirm that fixes have worked.
How we deliver it
Scope, access and timing are agreed with you before the review starts, and delivery can be remote or on site where it allows.
Talk to our team about build review and Active Directory audit
Book a demo
Don’t just take our word for it, hear what our customers think
Build review and AD audit compared with infrastructure penetration test
| Build review and AD audit | Infrastructure penetration test | |
|---|---|---|
| Method | Checks configuration against hardening guidance | Tests what can be reached from outside or inside |
| Scope | Servers, workstations, databases and Active Directory | Networks and exposed services |
| Typical findings | Weak settings, excess privileges, missing patches | Reachable weaknesses and attack routes |
| Used together | Fixes the foundations | Shows how weaknesses chain together |
Common questions about build review and Active Directory audit
What is a build review?
A build review checks how a server, workstation or database is configured against security hardening guidance, to find weak settings before they are used against you.
What does an Active Directory audit check?
It looks at how your directory is set up, including privileged accounts, delegation, password settings and trust relationships, because weaknesses there can affect the whole estate.
Is it disruptive?
These reviews are usually done with agreed access to review settings. We confirm the approach and any constraints when we scope the work.
How often should we do it?
After major changes, and on a regular cycle. Continuous Testing can include regular re-checks, with results tracked in the Rootshell Platform.
Last reviewed: 5 November 2026. Written and reviewed by the Rootshell R&D team. Rootshell was founded six years ago and is founder-led, drawing on more than 30 years of industry experience from previous successful businesses. We deliver thousands of testing days every year. CREST registered, Cyber Scheme accredited, ISO 27001 certified, an IASME Cyber Essentials Plus certification body, and NCSC CHECK scheme accredited.
Related testing services
Most clients combine more than one test. These pair well with build review and active directory audit.
