Alternatives to Certipy
Audit Active Directory Certificate Services configurations. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Certipy
Audit Active Directory Certificate Services configurations.
Also worth comparing
These listings name Certipy as their own alternative, so the relationship runs both ways.
ADRecon
A PowerShell script that gathers Active Directory information and builds an Excel report of the environment.
Certipy audits Active Directory Certificate Services configurations specifically, a narrower focus than ADRecon's broad domain documentation.
Impacket
Python library and tool collection for working with network protocols.
Certipy specialises in auditing Active Directory Certificate Services configurations rather than covering many network protocols.
Similar software
Related functionality, not a direct replacement.
BloodHound Community Edition
Maps attack paths through Active Directory and Entra ID relationships.
SharpHound
A C# collector that gathers Active Directory data for attack path analysis in BloodHound.
PingCastle
Active Directory security assessment tool that scores risky configuration.
Purple Knight
A free Windows tool that assesses Active Directory, Entra ID and Okta for security weaknesses.
NetExec
Assess network services during authorized enterprise security tests.
