Audit sécurité
Security audit
The state of the security of your directory, your workstations, your network and your applications, with the fixes to apply.
Audit sécurité installs on your device (Windows) and opens with your Etrebil account, the same one as for the web applications.
Security Audit reviews Active Directory (password policy, privileged groups, Kerberos delegation, inactive accounts), workstations (antivirus, firewall, BitLocker, User Account Control, updates), the network (open ports, shares, exposed remote desktop) and applications (end-of-life .NET, vulnerable packages, unsigned programs).
Each finding receives a severity and counts toward a score from 0 to 100. An assistant prepares the PowerShell fix scripts, which you review before running them yourself; reports export to PDF or Excel, and the history to CSV or JSON.
Audit sécurité is in preparation. It will join the Etrebil subscription catalogue when it is released.
Every feature of Audit sécurité
43 features in 8 areas
Security scans
- Runs a scan of Active Directory for a domain that you specify: policies and privileged accounts.
- Runs a scan of a workstation, by default the one the application runs on: Windows Defender, firewall and BitLocker.
- Runs a scan of a network described by its address range: open ports and SSL/TLS encryption.
- Runs a scan of the applications in a folder: vulnerable packages and known flaws (CVE).
- Runs all four scans with a single click using the Quick Scan.
- Shows the progress of a scan live, with the percentage and the current step.
- Notifies you as soon as a scan finishes.
Findings
- Classifies each finding by severity: critical, high, medium or low.
- Describes each finding: title, explanation, category and affected item.
- Associates a CVE identifier and a CVSS score when they exist.
- Distinguishes fixed findings from those that remain to be handled.
- Marks a finding as fixed by adding your remediation notes.
- Alerts you live, with a notification, when a new vulnerability is detected.
Dashboard
- Calculates an overall security score from 0 to 100.
- Counts the critical, high, medium and low findings.
- Breaks the findings down by severity on a chart.
- Lists the recent vulnerabilities that are still open.
- Updates on demand, and automatically at the end of a scan.
Remediation assistant
- Guides the fix in four steps: selecting findings, previewing the script, validating, then exporting.
- Prepares for each finding a PowerShell fix script, to be reviewed before use.
- Shows the script in a preview and moves from one finding to the next.
- Exports the script displayed, or all the selected scripts at once.
- Leaves the execution to you: the application displays the instructions and runs nothing on your behalf.
- Marks as fixed one finding or all those in the selection, with your notes.
Reports
- Produces a security report in PDF or Excel format.
- Gives the report a title and chooses the period: week, month, quarter or the whole history.
- Filters the report by severity and by scan type.
- Includes or excludes the findings that are already fixed.
- Generates the report and downloads it directly, or downloads the last generated one again.
Scan history
- Keeps the list of scan sessions with their type, status and date.
- Filters the sessions by scan type and by status.
- Shows the vulnerabilities detected during a chosen session.
- Exports a session to CSV for a spreadsheet.
- Exports a session to JSON for another tool.
On your devices
- Runs on Windows, in a single window with one module for each type of scan.
- Signs in with your Etrebil account, which carries the license, and offers access to your space from the window.
- Reports that a new version is available.
Good to know
- The scans are carried out by an audit service separate from the application, which is not delivered with it; the desktop application controls it and displays its results.
- The application expects this service on port 5012 of your computer: as long as it is not installed, no scan starts.
- The product page announces finer checks (Kerberos, inactive accounts, shares, exposed remote desktop, end of life, unsigned programs): they depend on the service and could not be verified here.
- The score trend curve on the dashboard currently shows illustrative values, not your actual history.
- The Reports screen is still written in English.
- The generated reports stay in the service's cache for one hour: store them in a safe place after downloading.