Compare software

BloodHound Community Edition vs Purple Knight: catalog facts
BloodHound Community EditionPurple Knight

Best for: Maps attack paths through Active Directory and Entra ID relationships

Best for: Administrators auditing the security of a hybrid Active Directory environment

Free + paid options

The Community Edition is free and open source. BloodHound Enterprise is paid.

Free

The Community edition is free to download from Semperis.

Windows, Linux, Web, Self-hosted Windows
  • Turns abstract directory permissions into concrete, visible attack paths
  • Used by defenders to close paths as much as by testers to find them
  • Covers on-premises AD, Entra ID and Okta in one assessment
  • More than 230 indicators of exposure and compromise
All 3 strengths for Purple Knight
  • Covers on-premises AD, Entra ID and Okta in one assessment
  • More than 230 indicators of exposure and compromise
  • Prioritized remediation guidance with MITRE ATT&CK mapping
  • Collection requires directory access and should be run only with authorisation
  • The graph database stack takes real setup effort
  • Closed source
  • Assessment tool only; it does not fix issues itself
All 3 limitations for Purple Knight
  • Closed source
  • Assessment tool only; it does not fix issues itself
  • Windows only
Downloadable app, Self-hosted Downloadable app
Open source Not open source
License not stated License not stated
Not stated if an account is needed Not stated if an account is needed
Not stated if it works offline Not stated if it works offline
Sources for BloodHound Community Edition

Catalog checked September 22, 2026

Sources for Purple Knight

Catalog checked September 23, 2026

“Not stated” means we have not confirmed it. Features can vary by device and plan.