Users of Purple Knight, the community Active Directory (AD) security vulnerability assessment tool built by Semperis experts, reported an average score of 72 out of 100 on their initial reports—a low C grade—in a 2023 survey of 150+ organizations.
While the average overall score is better this year when compared with the average score of 61% reported in the 2022 survey, the results indicate that organizations are still struggling to identify and address security vulnerabilities that leave their identity environments open to cyberattacks. These results corroborate findings from Microsoft: According to the 2022 Digital Defense Report, 88% of Microsoft customers impacted by cyber incidents had “insecure AD configuration.”
One bright spot in this year’s report: Organizations reported score improvements averaging 40% and up to 64% following remediation efforts using expert guidance provided by Semperis’ AD security experts in the Purple Knight security assessments.
