Professional PKI Services — Coming Soon
InsecurePlanet is preparing a future portfolio of enterprise PKI advisory, assessment, and training-related services. Service offerings are currently being finalized and are not yet available for client engagements.
InsecurePlanet is completing business formation, legal documentation, service agreements, insurance planning, and operational readiness before accepting consulting engagements. The service descriptions below represent planned future offerings and are provided for informational purposes only.
ADCS Health Check
Full ESC vulnerability assessment for your Active Directory Certificate Services deployment
A comprehensive review of your ADCS environment covering all known ESC attack paths (ESC1–ESC13), certificate template ACLs, CA configuration hardening, and enrollment endpoint exposure. Delivered as a prioritized remediation report with detection queries and fix guidance.
- ESC1–ESC13 vulnerability enumeration
- Certificate template ACL audit
- CA hardening gap analysis
- Web Enrollment / CES exposure review
- Prioritized remediation roadmap
PKI Architecture Review
Design review and hardening guidance for enterprise PKI trust hierarchies
Expert review of your PKI hierarchy design — Root CA placement, Issuing CA configuration, CDP/OCSP infrastructure, certificate policy, and key protection. Includes recommendations for two-tier vs. three-tier hierarchy, HSM integration, and offline Root CA procedures.
- Trust hierarchy design assessment
- Root CA offline procedure review
- CDP/OCSP infrastructure analysis
- Key protection and HSM guidance
- Certificate policy documentation review
Certificate Template Review
Deep audit of all certificate templates for misconfiguration and abuse potential
Systematic review of every certificate template in your ADCS environment. Identifies dangerous EKU combinations, overly permissive enrollment rights, enrollee-supplied Subject settings, and manager approval bypass conditions. Each finding includes a severity rating and specific remediation steps.
- Full template inventory and classification
- EKU and key usage analysis
- Enrollment rights and ACL review
- Subject supply and SAN configuration audit
- Template hardening recommendations
Remediation and Implementation Support
Guided implementation of PKI hardening recommendations and security controls
Hands-on support for implementing PKI and ADCS security recommendations. Covers certificate template hardening, CA configuration changes, enrollment endpoint lockdown, and verification testing to confirm fixes are effective.
- Template hardening implementation
- CA configuration remediation
- Enrollment endpoint lockdown
- Fix verification and testing
- Post-remediation documentation
PKI Migration Planning
Planning and guidance for PKI migrations, upgrades, and trust hierarchy changes
Structured planning support for enterprise PKI migrations — including CA server upgrades, trust hierarchy redesigns, certificate profile migrations, and cross-forest trust changes. Includes risk assessment and rollback planning.
- Migration scope and risk assessment
- Trust hierarchy redesign guidance
- Certificate profile migration plan
- Rollback and contingency planning
- Post-migration validation checklist
Service Updates Coming Soon
Subscribe to receive future updates when InsecurePlanet professional PKI services become available.
Subscribe for UpdatesADCS Security Checklist
Run through our free ADCS checklist to understand your current exposure while services are being finalized.
Download free checklistPKI Toolbox
50+ free PKI and ADCS tools, scripts, and references available now — no engagement required.
Explore the ToolboxInsecurePlanet content is currently provided for educational and informational purposes. Professional consulting services, assessments, contracts, and client engagements are not currently available.