Active Directory Vulnerability Assessment System (AD VAS)

The Authority runs a hybrid Microsoft environment and are looking for a vulnerability scanning solution that can scan our onsite and Azure active directory configuration and group policy, identify configuration issues and vulnerabilities that could be leveraged in an attack, offer direction remediation advice. The system must also backup and restore our active directory, including SID identities etc. and provide alerts to any potentially malicious activity.\r \r Note the initial term is 3 years with the potential for extending for up to 24 months. \r \r Note: a standstill period was observed from 10th October 2022 - 20th October 2022.