Paramount Defenses is a cyber security company that builds audit and assessment tools for Microsoft Active Directory. Its tools work out exactly who has what effective access in a domain, including who holds privileged access and how an attacker could escalate to it.
The tools are aimed at the security and identity teams of organisations whose identity and access control still rest on Active Directory, from government departments to large enterprises. They help these teams find and lock down excess access before it is abused.
At A Glance
| Vendor | Paramount Defenses |
|---|---|
| Category | Active Directory privileged access assessment and audit |
| Identities covered | Active Directory users, privileged and executive accounts, groups |
| Deployment | Licensed Windows tools for Microsoft Active Directory |
| Customers | United Nations, U.S. Department of Defense, Microsoft, IBM, Nestlé |
| Founded | 2006 |
| Market classification | Identity Threat Detection & Response; also Directory & Identity Infrastructure |
What Paramount Defenses Does
Active Directory sits at the base of IT security for 85%+ of organisations, which makes it central to identity, privileged access and Zero Trust programmes. Access in Active Directory is controlled by millions of security permissions held in access control lists (ACLs), so reading them one by one gives only part of the picture of who can really do what. Paramount Defenses calculates effective permissions instead, the access an identity ends up with once every group membership and ACL entry is taken into account.
The aim is to accurately assess and lock down all access, including privileged access, and to show the escalation routes an attacker could use before they are used.
Products
Gold Finger
Gold Finger is the main privileged access assessment tool, automating analysis of the millions of security permissions in a domain. Its Active Directory Privilege Escalation Path Identifier shows who has which privilege escalation paths to any object in a domain and the ACL permissions that make each path possible. That lets defenders close the routes an attacker would take to domain-wide control.
Gold Finger Mini
Gold Finger Mini answers the narrower privileged access questions an auditor asks most often. It identifies who can:
- Change membership of the Domain Admins group
- Reset passwords for privileged and executive accounts
- Replicate secrets such as users’ password hashes
- Modify privileged access within Active Directory
Active Directory Audit Tools
For teams with a specific question rather than a full assessment, single-purpose tools are sold individually or together with Gold Finger as the Gold Finger suite:
- Active Directory ACL Analyzer
- Active Directory Permissions Analyzer
- Active Directory Effective Permissions Calculator
- Active Directory Effective Access Auditor
- Active Directory Privileged Access Assessor
How It Works
The tools run on Windows against a Microsoft Active Directory domain and read the security permissions held in its ACLs. Rather than reporting raw permissions, they calculate effective permissions to establish which administrative and privileged tasks each identity can perform, work the company reports can be done in minutes.
| Component | What it does |
|---|---|
| Effective access engine | Calculates effective permissions across Active Directory objects, including members and controllers of privileged groups. |
| Escalation path analysis | Maps privilege escalation paths to directory objects and the ACL entries behind them. |
| Licensing | Tools are licensed through an online store on monthly, quarterly or annual terms. |
Identities And Systems Covered
| Human users | Active Directory user accounts and executive accounts. |
|---|---|
| Privileged accounts | Members and controllers of privileged groups such as Domain Admins. |
| Secrets | Identities able to replicate secrets such as password hashes. |
| Directory objects | Any object in an Active Directory domain and its ACLs. |
| Systems | Microsoft Active Directory and Windows Server, plus Windows 11. |
Company Background
| Founded | 14 March 2006. |
|---|---|
| Headquarters | Newport Beach, California, United States. |
| Leadership | Sanjay Tandon, founder and CEO. |
| Ownership | Privately held, with fewer than 100 employees. |
| Technology | Patented technology for effective access assessment. |
Note: This overview is compiled from Paramount Defenses’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.