Read-only is free forever. Writing to AD is licensed.
Every report, every dashboard, unlimited domains and objects in your forest, on-demand exports, and viewing any diff — including a full preview of what restoring a snapshot would do to AD — cost nothing and stay that way. The line is what happens next: a scheduled export actually firing on its own, and a restore actually writing selected changes back to Active Directory, are the two actions that check for a free evaluation key. Nothing else does.
SysFlint AD
Freeno card, no seat count, no per-object pricing
One installer on one domain-joined machine, auditing as many domains and as many accounts as your forest contains.
- Every report — disabled, stale, privileged, and password-policy reporting
- Unlimited users, computers, groups, and objects
- Unlimited domains across the forest
- Report history, run-over-run comparison, and viewing any diff (including a restore preview against live AD)
- On-demand CSV and PDF export
- Custom branding
- Product updates
What it does not include
Listed here rather than discovered later. If any of these are requirements, a commercial auditing platform is a more honest recommendation.
- Scheduled, unattended exports need a free evaluation key — building and downloading an export by hand stays free
- Applying a diff back to AD (a restore) needs a free evaluation key — viewing the diff first does not
- No contractual support SLA — questions are answered on a best-effort basis
- No real-time change alerting; this is point-in-time reporting, diffed between runs
- No auditing outside Active Directory — no file servers, Exchange, or cloud directories
- No hosted or cloud version; it runs on your hardware by design
Scheduled exports and applying a diff to AD
The two things above that need a license, in one place, with a way to actually get one.
Every other action stays free with nothing to unlock. These two check for a small, offline-verified license file — free to generate, no payment involved yet, tied to the machine running SysFlint AD.
Get a free evaluation keyWhy is almost all of it free?
Because the alternative most teams pick is nothing. Active Directory account hygiene is a problem almost everyone has and almost nobody has a budget line for — so it gets done with a script once a year, or not at all. A license quote is not what stands between most teams and a monthly privileged-access report, so reporting, unlimited domains, and viewing every diff carry no gate at all.
The two things that do need a key — a schedule running unattended, and a write landing in a production directory — are also the two places a mistake is expensive to leave unwatched, so it felt right to ask for a name and a machine ID before those specifically. There is no payment behind that key today: the licensing page issues a free 14-day evaluation to anyone who asks, offline, with no account.
This is also the first product SysFlint has released, and it does one focused job. It has no support contract behind it and does not try to be a change-auditing platform. Charging for it would mean promising things it does not promise.
Frequently asked questions
- Is there a paid tier?
- No tiers, no editions. There is one version of SysFlint AD. Reporting, unlimited domains, and viewing any diff are free with nothing to unlock. Two specific actions — a scheduled export actually running, and applying a diff back to AD — check for a free evaluation key, generated instantly with no payment involved.
- Do I need to create an account or provide an email?
- No account and no registration wall to download and run it. The two licensed actions need a key generated from a machine ID, not an account — see the License panel inside the product.
- Is it free for commercial use?
- Yes — including in enterprises, MSPs, and consultancies auditing client environments. The license terms ship with the installer.
- What is the catch?
- That it does one thing. It reports on Active Directory account state and privileged access, on-premises, on a schedule, and it comes with best-effort rather than contractual support. The licensing is not a catch dressed up as a feature list: it is two specific, clearly-marked actions, generated for free, checked entirely offline.
- Will you start charging for the free evaluation key later?
- Pricing for the two licensed actions is not decided yet, and this page will be updated before that changes. Anything beyond this product entirely would ship as a separate product with its own name, not a paywall added here.
- Is my data used or sold in exchange for it being free?
- No. The product runs entirely inside your network and sends no directory data anywhere — there is no data flowing to SysFlint to monetize, by design. Licensing is checked the same way: offline, against a key file, with no call back to SysFlint from the product itself.
Nothing to sign up for
No account and no sales call to install and start reporting. A free evaluation key, generated instantly, is only needed for scheduled exports and applying a diff back to AD.