- Home
- Breach and Attack Simulation Software
- Picus Security Platform
Picus Security Platform
Wilmington, Delaware, USA
What it is
Picus Security Platform helps security teams validate attack surfaces, exposures, and controls so they can prioritize risks and remediation. It simulates attacks against technologies such as EDR, SIEM, firewalls, WAFs, and email gateways, then supports remediation and retesting. The platform combines automated penetration testing, breach and attack simulation, and exposure validation. Its threat library lists more than 30,000 TTPs and thousands of threat scenarios, with critical new simulations added under a 24-hour SLA. Picus AI Threat Builder can convert inputs such as a blog URL, PDF, CVE ID, or threat actor name into an ATT&CK-mapped simulation. Picus says it integrates with more than 75 security technologies across EDR, SIEM, NGFW, WAF, and email. Delivery options include SaaS, on-premises, and fully air-gapped deployment, with yearly subscription licensing and unlimited simulations. Pricing is available on request, and a 14-day free trial is listed as free. That trial includes one simulation agent, a ransomware-only threat library, and vendor-specific recommendations for one technology. After it ends, recurring simulations stop and simulation results become inaccessible.
For and against
For
- Threat library lists more than 30,000 TTPs
- Integrates with more than 75 security technologies
- Supports on-premises and air-gapped deployment
- AI Threat Builder creates ATT&CK-mapped simulations
- 14-day trial includes one simulation agent
Against
- Pricing is available on request
- Trial library is limited to ransomware
- Trial recommendations cover one technology
- Results are inaccessible when the trial ends
The verdict
Picus combines attack simulation and exposure validation with multiple deployment options and broad integrations. The trial has clear scope limits, and simulation results are no longer available after it ends.
Who it suits
Picus is aimed at security teams that need to validate controls and exposures, prioritize risks, and focus remediation on critical gaps. Its deployment options include SaaS, on-premises, and fully air-gapped environments.
Plans and prices
Free Trial
14 days · one simulation agent · ransomware-only threat library · vendor-specific recommendations for one technology
Read 30 Sep 2026 · picussecurity.com
On the record
- AI threat builder
- Picus AI Threat Builder turns threat intelligence inputs such as a blog URL, PDF, CVE ID, or threat actor name into an ATT&CK-mapped simulation.picussecurity.com · read 30 Sep 2026
- Autonomous testing
- Picus describes its platform as combining automated penetration testing, breach and attack simulation, and exposure validation capabilities.picussecurity.com · read 30 Sep 2026
- Breach and attack simulation
- Picus simulates attacks against controls such as EDR, SIEM, firewalls, WAFs, and email gateways, then supports remediation and retesting.picussecurity.com · read 30 Sep 2026
- Compliance
- Picus states that it holds ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 22301, and ISO/IEC 20000-1 certificates and a SOC 2 Type 2 report.picussecurity.com · read 30 Sep 2026
- Deployment and licensing
- The platform is delivered as SaaS, with on-premises and fully air-gapped deployment options, and is licensed as a yearly subscription with unlimited simulations.picussecurity.com · read 30 Sep 2026
- Integrations
- Picus says it integrates with more than 75 security technologies across EDR, SIEM, NGFW, WAF, and email.picussecurity.com · read 30 Sep 2026
- Intended users
- Picus says its platform helps security teams validate controls, prioritize exposures, and focus remediation on critical gaps.picussecurity.com · read 30 Sep 2026
- Purpose
- The Picus platform validates attack surfaces, exposures, and security controls so teams can prioritize and address risks.picussecurity.com · read 30 Sep 2026
- Support
- The free trial page says trial users can access Picus's knowledge base and ticket portal and request help with a guided proof of concept.picussecurity.com · read 30 Sep 2026
- Threat library
- The Breach and Attack Simulation page states that its threat library contains more than 30,000 TTPs and thousands of threat scenarios.picussecurity.com · read 30 Sep 2026
- Threat updates
- Picus says critical new threat simulations are added under a 24-hour SLA.picussecurity.com · read 30 Sep 2026
- Trial limitation
- When the free trial ends, recurring simulations stop and the user can no longer access simulation results.picussecurity.com · read 30 Sep 2026
