Identity Radar

AI-powered Identity Security Posture Management. Runs air-gapped. No cloud. No API keys.

• Identity Security Posture Management (ISPM) -- Continuous assessment of identity risks across human and non-human identities with an 11-factor risk scoring engine
• Active Directory Tiering Enforcement -- First-class three-tier model (Tier 0/1/2) with automated violation detection and cross-tier access path analysis
• Identity Threat Detection and Response (ITDR) -- Real-time detection of credential attacks including Kerberoasting, DCSync, golden ticket, impossible travel, and password spray
• Air-Gapped AI Analysis -- Local AI model runs entirely on your infrastructure with no external API calls, internet access, or cloud dependencies
• Attack Path Discovery -- Automated privilege escalation path analysis from standard users to Domain Admin with MITRE ATT&CK mapping
• Shadow Admin Detection -- Five detection methods (ACL analysis, delegation chains, nested groups, service ownership, GPO rights) to find hidden admin-equivalent access
• Non-Human Identity Governance -- Complete lifecycle management for service accounts, managed identities, API keys, and bot accounts with ownership tracking and expiry monitoring
• Saudi Regulatory Compliance -- Built-in mapping to NCA ECC, SAMA CSF, and PDPL frameworks with automated audit evidence collection

1. Download IdentityRadar-Setup.exe
2. Right-click and Run as administrator
3. Follow the installation wizard
4. Open http://localhost:3000
5. Sign in with admin@acmefs.sa / admin123

git clone https://github.com/ASHS21/IDR-C.git
cd IDR-C
chmod +x scripts/setup.sh
./scripts/setup.sh
# Open http://localhost:3000

Default credentials: admin@acmefs.sa / admin123

+-------------------------------------------------------------+
|  LAYER 03 -- DYNAMIC (Decisions & Learning)                  |
|  AI risk scoring, remediation plans, anomaly detection,      |
|  attack path narratives, posture simulation                  |
|  Engine: Local AI (Docker Model Runner) or Anthropic API     |
+-------------------------------------------------------------+
|  LAYER 02 -- KINETIC (Actions & Automation)                  |
|  Access reviews, provisioning workflows, policy enforcement, |
|  certification campaigns, escalations, audit logging         |
|  Engine: Next.js API Routes + Cron Workers                   |
+-------------------------------------------------------------+
|  LAYER 01 -- SEMANTIC (Ontology Core)                        |
|  Identity objects, AD tiering model, entitlements,           |
|  group memberships, roles, resources, policies               |
|  Engine: PostgreSQL + Drizzle ORM + NextAuth.js              |
+-------------------------------------------------------------+

Full documentation is available in the docs/ directory:

• Getting Started -- Installation, first login, connecting data sources
• User Guide -- Dashboard features and workflows
• Admin Guide -- User management, integrations, policies
• Reference -- Risk scoring formula, RBAC matrix, configuration
• Compliance -- NCA ECC, SAMA CSF, PDPL mapping
• FAQ -- Common questions and answers

Apache-2.0