Deploy V14 as a read-only domain controller (RODC) agent. It scans password hashes without ever exposing plaintext credentials. A typical mid-sized enterprise (5,000 users) will find its first scan identifies: