etcsec.com valid

EtcSec

EtcSec is a SaaS identity security audit platform for Active Directory and Microsoft Entra ID, built on ETC Collector, an open-source collector. The catalogue covers 504 detections (346 Active Directory, 158 Microsoft Entra ID), mapped to MITRE ATT&CK, ANSSI, and NIS2.

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-27T10:18:44.307Z. Cached copy · Source on etcsec.com

# EtcSec
> EtcSec is a SaaS identity security audit platform for Active Directory and Microsoft Entra ID, built on ETC Collector, an open-source collector. The catalogue covers 504 detections (346 Active Directory, 158 Microsoft Entra ID), mapped to MITRE ATT&CK, ANSSI, and NIS2.

## Core Pages
- [Homepage](https://etcsec.com/): Product overview and positioning.
- [Active Directory security audit](https://etcsec.com/active-directory-security-audit): AD audit landing page - Tier 0, Kerberos, delegation, ADCS, privileged access.
- [Microsoft Entra ID security audit](https://etcsec.com/entra-id-security-audit): Entra ID / Azure AD audit landing page - Conditional Access, MFA, PIM, app permissions, external identities.
- [Free audit](https://etcsec.com/audit): Run the 504-detector audit across AD and Entra ID.
- [ETC Collector](https://etcsec.com/collector): Open-source collector - deployment modes, read-only collection, REST API, Community vs Pro.
- [Downloads](https://etcsec.com/downloads): Get ETC Collector Community (Apache 2.0) or Pro.
- [Vulnerability catalogue](https://etcsec.com/vulnerabilities): Every identity security check, filterable by severity - 504 detections (346 AD, 158 Entra ID).
- [Security advisories](https://etcsec.com/security-advisories): Tracked CVE and zero-day advisories for AD, Entra ID, authentication, certificates, and identity infrastructure.
- [Pricing](https://etcsec.com/pricing): SaaS pricing and plans, including MSSP volume tiers.
- [MSSP program](https://etcsec.com/mssp): Multi-tenant management, white-label reports, recurring AD/Entra audits for consultants and channel partners.

## Comparisons
- [PingCastle alternative](https://etcsec.com/pingcastle-alternative): ETC Collector positioned against PingCastle for Active Directory audits.
- [Purple Knight alternative](https://etcsec.com/purple-knight-alternative): ETC Collector positioned against Purple Knight for AD and Entra ID audits.

## Active Directory Attack Techniques
- [Kerberoasting](https://etcsec.com/blog/kerberoasting-service-account-attacks): Requesting service tickets for SPN accounts to crack password hashes offline.
- [AS-REP Roasting](https://etcsec.com/blog/as-rep-roasting-kerberos-preauth): Targeting accounts without Kerberos pre-authentication to recover crackable hashes.
- [Golden Ticket](https://etcsec.com/blog/golden-ticket-attack): Forging Kerberos TGTs with a compromised krbtgt hash for persistent domain-wide access.
- [Silver Ticket](https://etcsec.com/blog/silver-ticket-attack-active-directory): Forging service tickets with a compromised service account hash.
- [ACL abuse & DCSync](https://etcsec.com/blog/acl-abuse-and-dcsync-active-directory): Abusing directory replication rights to extract every password hash in the domain.
- [DCShadow](https://etcsec.com/blog/dcshadow-attack-rogue-domain-controller): Registering a rogue domain controller to push malicious replication changes.
- [Pass-the-Hash](https://etcsec.com/blog/pass-the-hash-active
…

Related sites

Explore similar publishers →

Similar publisher descriptions and documentation. Similarity does not imply affiliation or equivalent capabilities.

Machine-readable: GET /v1/resolve?q=etcsec.com · GET /v1/domain/etcsec.com · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Claim my listing on Agent Web Map for etcsec.com:
1. POST https://agentwebmap.com/v1/sites/etcsec.com/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://etcsec.com/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/etcsec.com/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/etcsec.com).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.