AuthStrike is an identity and authentication security testing tool for controlled simulations, security research, and education purpose only. It helps security teams test Microsoft Entra attack paths such as device-code authentication, token handling, device registration, Microsoft Graph/Outlook access, and supported token-refresh flows.
Real protocols, real infrastructure, built to the spec. Run flows and see every message, token and decision. OAuth 2.0, OIDC, SAML, SCIM, SSF, SPIFFE, OID4VC.
