Attack path
A chain of legitimate permissions, exposures and vulnerabilities that leads an attacker from initial access to a valuable asset.
Updated
Individual findings are often low severity in isolation; an attack path shows how three of them combine into domain compromise. This is why path analysis outranks severity-sorted vulnerability lists for prioritisation.
Cutting the shortest paths first usually collapses large parts of the graph for very little effort. Non-human identities — service accounts, API keys, and increasingly AI agent identities — now sit in the same graph as human accounts and often shorten the path to a critical asset, since they're reviewed far less often.
Related
Identity attack paths
Using BloodHound and Entra ID review to find privilege escalation paths across on-premises Active Directory and cloud identity.
BloodHound
BloodHound for mapping privilege escalation paths across Active Directory, Entra ID and — via OpenGraph — cloud, SaaS and agentic identities.
Identity & Zero Trust
Entra ID hardening, Conditional Access authentication strengths, privileged access management and identity attack-path analysis with BloodHound.
Conditional Access baseline
An Entra ID Conditional Access baseline ordered by blast radius: which policies to ship first, how to stage them, the legacy-policy retirement dates that create silent gaps, and the exclusions that quietly undo them.
Where the credential lives
Two shapes of agent isolation, the one that keeps keys out of the process, and the failure both shapes still miss.
Allegro Group
Security work at Europe's largest e-commerce marketplace: cloud security, identity, governance redesign and internal enablement.