- Home
- Breach and Attack Simulation Software
- Infection Monkey
Infection Monkey
What it is
Infection Monkey is a free, open-source breach and attack simulation tool for examining an organization's resilience to perimeter breaches and internal server infection. Monkey Agent scans systems and simulates attack techniques, while Monkey Island Server provides a web interface for managing the exercise. The tool maps visible machines, accessible services, and possible routes through the network, then reports security issues the agents discover or exploit. It supports on-premises environments, containers, and public and private clouds. The documented AWS integration uses Systems Manager to run Infection Monkey on EC2 instances. Plugins can be installed, updated, removed, or uploaded through the interface. Internet access is not required; when available, it is used for update checks and to check whether machines can reach the internet. The FAQ says sensitive data such as passwords, SSH keys, and hashes is stored encrypted in the Island database and sent to agents over HTTPS. On first launch, users create credentials for access to the server. The FAQ also says the tool avoids exploits or attacks that may affect target systems.
For and against
For
- Maps visible machines, services, and possible routes.
- Reports security issues agents discover or exploit.
- Can operate without internet access.
- Plugins can be managed through its web interface.
Against
- Monkey Island runs on x86-64 processors.
- First launch requires creating server credentials.
- Internet access, when available, is used for update checks.
The verdict
Infection Monkey provides a network-focused simulation with mapping and reporting, and it can run without internet access. Its documented architecture and platform requirements are important considerations for deployment.
Who it suits
It suits organizations seeking to validate security controls and identify possible network security gaps. Its documented environments include on-premises, containers, and public and private clouds.
Plans and prices
Free
Open-source breach and attack simulation tool
Read 5 Oct 2026 · techdocs.akamai.com
On the record
- Account security
- On first launch, users create credentials, after which the Monkey Island server is accessible only with those credentials.techdocs.akamai.com · read 5 Oct 2026
- Architecture
- It consists of Monkey Agent, which scans and simulates attack techniques, and Monkey Island Server, a C&C web server with a user GUI.techdocs.akamai.com · read 5 Oct 2026
- AWS integration
- The documented integration uses AWS Systems Manager to execute Infection Monkey on EC2 instances.techdocs.akamai.com · read 5 Oct 2026
- Credential protection
- The FAQ says sensitive data such as passwords, SSH keys, and hashes are stored encrypted in the Island database and sent to agents over HTTPS.techdocs.akamai.com · read 5 Oct 2026
- Intended users
- Akamai describes the tool as a way for organizations to validate security controls and identify how attackers might exploit network security gaps.akamai.com · read 5 Oct 2026
- Internet access
- Internet access is not required for operation; when available, it is used to check for updates and whether machines can reach the internet.techdocs.akamai.com · read 5 Oct 2026
- Network map
- The product maps visible network machines, accessible services, and potential propagation routes.techdocs.akamai.com · read 5 Oct 2026
- Platform requirements
- The documented Monkey Island runs on x86-64 processors, with Linux and Windows operating systems listed as supported.techdocs.akamai.com · read 5 Oct 2026
- Plugin support
- Plugins extend functionality and can be installed, updated, removed, or uploaded through the Monkey Island interface.techdocs.akamai.com · read 5 Oct 2026
- Purpose
- Infection Monkey is an open-source breach and attack simulation tool for testing data center resilience to perimeter breaches and internal server infection.techdocs.akamai.com · read 5 Oct 2026
- Safe operation
- The FAQ says the product avoids exploits or attacks that may impact victim systems, including EternalBlue.techdocs.akamai.com · read 5 Oct 2026
- Security report
- Its report presents security issues discovered or exploited by the agents.techdocs.akamai.com · read 5 Oct 2026
- Support
- The project offers a public Slack workspace, support email, and GitHub issue reporting.techdocs.akamai.com · read 5 Oct 2026
- Supported environments
- Akamai says the product supports on-premises environments, containers, and public and private clouds.akamai.com · read 5 Oct 2026
