For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Mobile US PressList your app
Vendor dashboard

Best Breach and Attack Simulation Software in 2026

Updated

In short: Cymulate Platform is ranked #1 of 18 as of 4 October 2026, ahead of OpenAEV and SafeBreach Validate. The best-ranked option with a free plan is OpenAEV.

Breach and attack simulation software is used to exercise security defenses through simulated attack activity. Compare attack simulation modes and included attack surfaces to understand the breadth of exercises, then look at custom scenarios and the scenario library for ways to shape them. MITRE ATT&CK mapping, continuous scheduling and deployment model are also listed comparison points, along with the free plan and paid-from details. This ranked selection includes Keysight Eggplant Test, OpenAEV and Atomic Red Team, as well as Infection Monkey and PurpleSharp. Weigh the available approaches and operational fit against the security exercises you need to run.

18 breach and attack simulation software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

18ranked
2free plans on this page
4 Oct 2026last checked

Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score

  1. 1 Cymulate Platform No phone app RecognisedPhone appDocumentedFree plan 7.4 Attack simulation modes: agentlessIncluded attack surfaces: Endpoint Security; Email Gateway; Web Gateway; Web Application Firewall; Phishing Awareness; Lateral Movement; Data Exfiltration; Full Kill Chain; APT; Immediate Threat IntelligenceMITRE ATT&CK mapping: Yes
  2. 2 OpenAEV No phone app RecognisedPhone appDocumentedFree plan 7.4Free Attack simulation modes: hybridIncluded attack surfaces: endpoints, asset groups, people, teams, network hosts, email, phishing landing pages, SMS, phone-based social engineering, media pressure, tabletop exercisesMITRE ATT&CK mapping: Yes
  3. 3 SafeBreach Validate No phone app RecognisedPhone appDocumentedFree plan 7.3 Attack simulation modes: hybridIncluded attack surfaces: endpoint, network, cloud, web, application, emailMITRE ATT&CK mapping: Yes
  4. 4 Picus Security Platform No phone app RecognisedPhone appDocumentedFree plan 7.3 Attack simulation modes: hybridIncluded attack surfaces: network, endpoint, email, web application, data exfiltration, URL filteringMITRE ATT&CK mapping: Yes
  5. 5 SCYTHE No phone app RecognisedPhone appDocumentedFree plan 7.1 Included attack surfaces: Windows, macOS, Linux, cloud, OT/ICSMITRE ATT&CK mapping: Yes
  6. 6 Pentera Platform No phone app RecognisedPhone appDocumentedFree plan 7.1 Attack simulation modes: agentlessIncluded attack surfaces: internal networks, cloud environments, external attack surface, web applications, endpoints, servers, services, and network devicesMITRE ATT&CK mapping: Yes
  7. 7 BlackNoise BAS No phone app RecognisedPhone appDocumentedFree plan 6.6 Attack simulation modes: agentlessIncluded attack surfaces: network, Windows, Linux, macOS, AWS, Microsoft Azure, Google CloudMITRE ATT&CK mapping: Yes
  8. 8 Atomic Red Team No phone app RecognisedPhone appDocumentedFree plan 6.6Free Included attack surfaces: Windows, Linux, macOS, cloud infrastructure, containers, SaaS, Azure AD, Google Workspace, Office 365, and IaaS providersMITRE ATT&CK mapping: Yes
  9. 9 FourCore ATTACK No phone app RecognisedPhone appDocumentedFree plan 6.5 Attack simulation modes: agent-basedIncluded attack surfaces: endpoint, email, WAF, network segmentation, SIEM, EDR, XDR, firewall, DLPMITRE ATT&CK mapping: Yes
  10. 10 AttackIQ Platform No phone app RecognisedPhone appDocumentedFree plan 6.2
  11. 11 Skyhawk Security BAS No phone app RecognisedPhone appDocumentedFree plan 6.2 Attack simulation modes: agentlessIncluded attack surfaces: cloud architecture, cloud security controls, identities and permissions, vulnerabilities, attack paths, high-value cloud assetsMITRE ATT&CK mapping: Yes
  12. 12 Cymrix No phone app RecognisedPhone appDocumentedFree plan 5.9 Attack simulation modes: agent-basedIncluded attack surfaces: Network; Windows Active Directory; IoT devicesMITRE ATT&CK mapping: Yes
  13. 13 MITRE Caldera No phone app RecognisedPhone appDocumentedFree plan 5.8 Attack simulation modes: agent-basedIncluded attack surfaces: hosts, networks, endpoint security, OT environmentsMITRE ATT&CK mapping: Yes
  14. 14 Infection Monkey No phone app RecognisedPhone appDocumentedFree plan 5.5 Attack simulation modes: agent-basedIncluded attack surfaces: local networks; internal servers; on-premises data centers; cloud-based data centers; open services
  15. 15 Valitrix BAS Platform No phone app RecognisedPhone appDocumentedFree plan 5.5 Attack simulation modes: agent-basedIncluded attack surfaces: endpoint, email, network, SIEMMITRE ATT&CK mapping: Yes
  16. 16 Stratus Red Team No phone app RecognisedPhone appDocumentedFree plan 5.4 Attack simulation modes: agentlessIncluded attack surfaces: AWS, Azure, GCP, Kubernetes, Amazon EKS, Entra IDMITRE ATT&CK mapping: Yes
  17. 17 PurpleSharp No phone app RecognisedPhone appDocumentedFree plan 5.0 Included attack surfaces: execution, persistence, privilege escalation, credential access, lateral movement, discovery, defense evasionMITRE ATT&CK mapping: Yes
  18. 18 ShadowBreach No phone app RecognisedPhone appDocumentedFree plan 4.9
Compare all 18 in a table
#AppScoreFree planFromFree planPaid fromAttack simulation modesIncluded attack surfaces
1Cymulate Platform7.4No———agentlessEndpoint Security; Email Gateway; Web Gateway; Web Application Firewall; Phishing Awareness; Lateral Movement; Data Exfiltration; Full Kill Chain; APT; Immediate Threat Intelligence
2OpenAEV7.4Free planFreeYes—hybridendpoints, asset groups, people, teams, network hosts, email, phishing landing pages, SMS, phone-based social engineering, media pressure, tabletop exercises
3SafeBreach Validate7.3No———hybridendpoint, network, cloud, web, application, email
4Picus Security Platform7.3No—No—hybridnetwork, endpoint, email, web application, data exfiltration, URL filtering
5SCYTHE7.1No—No——Windows, macOS, Linux, cloud, OT/ICS
6Pentera Platform7.1No———agentlessinternal networks, cloud environments, external attack surface, web applications, endpoints, servers, services, and network devices
7BlackNoise BAS6.6No———agentlessnetwork, Windows, Linux, macOS, AWS, Microsoft Azure, Google Cloud
8Atomic Red Team6.6Free planFreeYes——Windows, Linux, macOS, cloud infrastructure, containers, SaaS, Azure AD, Google Workspace, Office 365, and IaaS providers
9FourCore ATTACK6.5No———agent-basedendpoint, email, WAF, network segmentation, SIEM, EDR, XDR, firewall, DLP
10AttackIQ Platform6.2No—————
11Skyhawk Security BAS6.2No—No—agentlesscloud architecture, cloud security controls, identities and permissions, vulnerabilities, attack paths, high-value cloud assets
12Cymrix5.9No—No—agent-basedNetwork; Windows Active Directory; IoT devices
13MITRE Caldera5.8No———agent-basedhosts, networks, endpoint security, OT environments
14Infection Monkey5.5No—Yes—agent-basedlocal networks; internal servers; on-premises data centers; cloud-based data centers; open services
15Valitrix BAS Platform5.5No—No—agent-basedendpoint, email, network, SIEM
16Stratus Red Team5.4No———agentlessAWS, Azure, GCP, Kubernetes, Amazon EKS, Entra ID
17PurpleSharp5.0No—Yes——execution, persistence, privilege escalation, credential access, lateral movement, discovery, defense evasion
18ShadowBreach4.9No—————

Is your app on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

#1 open#2 open#3 open#4 open#5 openClaim your listing — free

Questions about this list

Which breach and attack simulation software is ranked first on Samsung Mobile US Press?

Cymulate Platform is ranked #1 of 18 with a score of 7.4. OpenAEV is second and SafeBreach Validate third.

How many of these have a free plan?

2 of the 18 on this page publish a free plan on their own pricing pages.

How is this list ranked?

Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.

More in IT & Infrastructure

All IT & infrastructure lists
IT Asset Management Software 108Residential Proxy Services 73IT Automation Software 59Website Monitoring Software 54IT Knowledge Base Software 49Patch Management Software 40Competitor Price Monitoring Software 39CMDB Software 38IT Vendor Management Software 38IT Problem Management Software 36Application Deployment Software 35DNS Monitoring Software 35