- Home
- Breach and Attack Simulation Software
- Valitrix BAS Platform
Valitrix BAS Platform
London, United Kingdom
What it is
Valitrix BAS Platform is a breach and attack simulation platform that continuously checks security controls against adversary techniques mapped to MITRE ATT&CK. Its library covers more than 200 techniques across all 14 tactical categories, with validation for endpoint, email, network, and SIEM controls. Agent-based simulations are described as controlled and non-destructive, using synthetic payloads intended not to damage or interrupt production. Teams can configure targets, timing windows, scope, and technique categories; Enterprise customers can add exclusions and limit tests to selected network segments or system groups. Results appear in real-time dashboards and exportable reports with ATT&CK mappings. Valitrix names Splunk, Microsoft Sentinel, IBM QRadar, and Elastic among validated SIEMs, and offers Enterprise API workflows including Jira and ServiceNow. Agents collect simulation telemetry and control-response data, not underlying business data. Pricing is on request, with a scoped proof of concept for qualified Enterprise prospects.
For and against
For
- Covers 200+ MITRE ATT&CK techniques
- Validates endpoint, email, network, and SIEM controls
- Configurable testing scope and schedules
- Real-time dashboards and exportable reports
- Supports several named SIEM platforms
Against
- Pricing is available only on request
- Enterprise proof of concept is qualification-based
- Basic tier supports one agent and user
- Enterprise API access is described for Enterprise
The verdict
Valitrix focuses on recurring, ATT&CK-mapped validation across multiple security-control layers. Its configurable simulations and reporting fit enterprise programs, while pricing and some capabilities depend on tier or qualification.
Who it suits
It is aimed at enterprise security teams, CISOs, SOC teams, and security architects in financial services, healthcare, critical infrastructure, and technology. Organizations needing recurring control validation and compliance evidence may find its scope useful.
Plans and prices
Basic
Up to 1 agent · Up to 1 user · 50 threat group attacks · Email support
Read 4 Oct 2026 · valitrix.com
Enterprise
Custom agent count · Up to 10 users · Full Valitrix Attack Library · 24/7 incident response
Read 4 Oct 2026 · valitrix.com
Professional
Up to 4 agents · Up to 3 users · Full Valitrix Attack Library · Priority support
Read 4 Oct 2026 · valitrix.com
On the record
- Attack coverage
- The platform says its library covers 200+ MITRE ATT&CK techniques across all 14 tactical categories.valitrix.com · read 4 Oct 2026
- Compliance
- Valitrix says it supports evidence reporting for ISO 27001, SOC 2, NIST, and Cyber Essentials.valitrix.com · read 4 Oct 2026
- Control layers
- Valitrix validates endpoint, email, network, and SIEM controls.valitrix.com · read 4 Oct 2026
- Data handling
- Valitrix says its agents collect simulation telemetry and control-response data to generate reports, and that it does not collect or retain customers’ underlying business data.valitrix.com · read 4 Oct 2026
- Endpoint platforms
- Valitrix agents support Windows Server 2016 and later, Windows 10/11, Debian, Ubuntu, RHEL, CentOS, and macOS 11 and later.valitrix.com · read 4 Oct 2026
- Integrations
- Valitrix names Splunk, Microsoft Sentinel, IBM QRadar, and Elastic as SIEMs it validates; its FAQ also describes Enterprise API access for workflows including Jira and ServiceNow.valitrix.com · read 4 Oct 2026
- Reports
- Simulation results are mapped to MITRE ATT&CK and can be delivered in real-time dashboards and exportable reports.valitrix.com · read 4 Oct 2026
- Safety
- Valitrix says its simulations are controlled and non-destructive, using synthetic payloads intended not to cause damage or interrupt production.valitrix.com · read 4 Oct 2026
- Scope controls
- Simulation scope, target systems, timing windows, and technique categories are configurable; Enterprise customers can set exclusions and limit testing to selected network segments or system groups.valitrix.com · read 4 Oct 2026
- Support and onboarding
- The Basic tier lists email support, Professional lists priority support, and Enterprise lists 24/7 incident response; Basic and Professional agent installation typically takes a few hours.valitrix.com · read 4 Oct 2026
- Trial
- Valitrix offers a scoped proof-of-concept engagement to qualified Enterprise prospects.valitrix.com · read 4 Oct 2026
- What it does
- Valitrix is a breach and attack simulation platform that continuously tests security controls against adversary techniques mapped to MITRE ATT&CK.valitrix.com · read 4 Oct 2026
- Who it serves
- Valitrix says it serves enterprise customers in financial services, healthcare, critical infrastructure, and technology, including CISOs, SOC teams, and security architects.valitrix.com · read 4 Oct 2026