Best Breach and Attack Simulation (BAS) Software

How Many Breach and Attack Simulation (BAS) Software Products Does G2 Track?

Total Products under this Category: 57

Category Stats (Sep 2026)

  • Average Rating: 4.56/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Pentera (+0.73%) - Among all products in this category, Pentera recorded the largest rating increase compared to last month

Last updated: September 26, 2026

How Does G2 Rank Breach and Attack Simulation (BAS) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 1,300+ Authentic Reviews
  • 57+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Breach and Attack Simulation (BAS) Software

G2 Grid® for Breach and Attack Simulation (BAS) Software plotting products by satisfaction and market presence

Highlighted products: Picus Security, Cymulate, Adaptive Security, Pentera, Sophos PhishThreat, HTB CTF & Threat Range, vPenTest, and Right-Hand Cybersecurity.

Underlying data: [Grid® JSON](https://www.g2.com/categories/breach-and-attack-simulation-bas/grids.json?focus%5B%5D=picus-security&focus%5B%5D=cymulate&focus%5B%5D=adaptive-security&focus%5B%5D=pentera&focus%5B%5D=sophos-phishthreat&focus%5B%5D=htb-ctf-threat-range&focus%5B%5D=vpentest&focus%5B%5D=right-hand-cybersecurity)

Picus Security

Picus Security helps enterprise security teams reduce cyber risk with the Picus Autonomous Exposure Validation Platform. Picus proves what attackers can actually exploit in your environment and what your security controls stop, turning every exposure into a defensible decision: patch, mitigate, monitor, or accept. The platform validates attack surfaces, exposures, and security controls as one continuous loop, uniting breach and attack simulation, automated penetration testing, and exposure validation. With techniques mapped to MITRE ATT&CK, teams prioritize by real exploitation risk instead of severity scores, prove their EDR, SIEM, and firewall controls work, and report measurable risk reduction to leadership. Picus pioneered Breach and Attack Simulation in 2013 and works with security teams across financial services, healthcare, energy, and technology.

Average Rating: 4.8/5.0

Total Reviews: 229

Who Is the Company Behind Picus Security?

  • Seller: Picus Security
  • Company Website:
  • Year Founded: 2013
  • HQ Location: San Francisco, California
  • Twitter: @PicusSecurity
    2,916 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    317 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Cyber Security Specialist, Cyber Security Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 38% Large, 37% Medium

What Do G2 Reviewers Say About Picus Security?

AI-generated summary from verified user reviews

Pros
  • Users commend Picus Security for its realistic attack simulations that enhance defenses and confidence in cybersecurity resilience.
  • Users find Picus Security incredibly easy to use, ensuring rapid identification of security gaps with professional support.
  • Users commend Picus Security for its continuous proactive validation of security controls, enhancing defense and resilience against attacks.
  • Users highlight the actionable insights from Picus Security, enhancing defense optimization and improving overall security posture.
  • Users value the seamless integration with existing tools, enhancing security through tailored recommendations and real-time updates.
Cons
  • Users experience reporting limitations with Picus Security, leading to extra work in finalizing reports and occasional issues.
  • Users experience integration issues, particularly with third-party tools, impacting the initial setup and validation process.
  • Users find the steep learning curve of Picus Security challenging, requiring time and training for effective utilization.
  • Users find the complex setup process of Picus Security to be challenging, requiring extra configuration effort initially.
  • Users find the limited customization in Picus Security's reports and dashboards restrictive for their specific needs.

What Are Recent G2 Reviews of Picus Security?

What Are G2 Users Discussing About Picus Security?

Cymulate

Designed for security teams to continuously validate threats and build exposure-informed defenses, the Cymulate Platform combines advanced attack simulation with an agentic cyber defense engineering control plane to continuously prove, prioritize and adapt security controls for the latest threats. With a daily feed of threat intelligence and a comprehensive attack library, Cymulate is a SaaS offering that applies AI to tailor offensive testing to the environment while integrating with security stack to push updates for immediate prevention and detection. Core use cases include threat validation, control validation & tuning, detection engineering, and vulnerability validation and prioritization.

Average Rating: 4.9/5.0

Total Reviews: 176

Who Is the Company Behind Cymulate?

  • Seller: Cymulate
  • Company Website:
  • Year Founded: 2016
  • HQ Location: Holon, Israel
  • Twitter: @CymulateLtd
    1,079 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    214 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Analyst, Cyber Security Engineer
  • Top Industries: Financial Services, Banking
  • Company Size: 56% Large, 43% Medium

What Do G2 Reviewers Say About Cymulate?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the intuitive and user-friendly design of Cymulate, enhancing accessibility for organizations of all sizes.
  • Users appreciate Cymulate's effective vulnerability identification, enabling actionable insights and continuous threat assessment with ease.
  • Users value the effective continuous security validation offered by Cymulate, enhancing their overall security posture.
  • Users appreciate the helpful and friendly customer support of Cymulate, enhancing their overall experience and effectiveness.
  • Users value Cymulate's extensive customization options, benefiting from dynamic dashboards and a large threat library.
Cons
  • Users note that dynamic reporting and integration stability need improvement for better execution and overall experience.
  • Users note that integration issues hinder Cymulate's effectiveness and call for enhanced compatibility with existing systems.
  • Users find reporting issues time consuming, with delays and a lack of critical data affecting efficiency.
  • Users find the inefficient alert system challenging, affecting real-time notifications and making assessments cumbersome to manage.

What Are Recent G2 Reviews of Cymulate?

Adaptive Security

Adaptive is the human security platform for the AI era. AI has fundamentally changed the threat landscape. Deepfakes make social engineering more convincing, AI-powered phishing scales attacks 100x, and the rapid adoption of AI tools introduces new risks to every organization. Adaptive unifies security awareness training, agentic email security, and AI governance to secure every attack surface where work happens. Adaptive’s platform trains employees against emerging threats, stops sophisticated email attacks, and secures rogue AI usage. The Company’s platform can be deployed in the browser, on device, and in email inboxes. More than 1,000 leading organizations trust Adaptive, including major global brands like PayPal, MLB, and Bose. The Company has raised over $140M from leading AI investors including OpenAI and NVIDIA, and most recently closed an $81M funding round led by Bain Capital Ventures.

Average Rating: 4.9/5.0

Total Reviews: 136

Who Is the Company Behind Adaptive Security?

  • Seller: Adaptive Security
  • Company Website:
  • Year Founded: 2024
  • HQ Location: New York, US
  • LinkedIn® Page: www.linkedin.com
    285 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: IT Manager
  • Top Industries: Computer Software, Financial Services
  • Company Size: 72% Medium, 15% Large

What Do G2 Reviewers Say About Adaptive Security?

AI-generated summary from verified user reviews

Pros
  • Users value the concise and engaging training of Adaptive Security, enhancing employee awareness and participation effectively.
  • Users praise the ease of use of Adaptive Security, enjoying smooth deployment and intuitive integration with existing systems.
  • Users appreciate the excellent customer support from Adaptive Security, noting their responsiveness and helpfulness as key benefits.
  • Users appreciate the easy implementation of Adaptive Security, ensuring a smooth setup and quick integration into daily operations.
  • Users value the dramatic increase in security awareness provided by Adaptive Security, ensuring consistent engagement across teams.
Cons
  • Users feel the limited customization options hinder their ability to edit and manage user information effectively.
  • Users feel group management is underdeveloped, requiring manual training assignments and lacking flexible content customization options.
  • Users find the reporting inadequate, lacking flexibility in data presentation for effective exports and stakeholder reviews.
  • Users find the integration process challenging, especially for those without technical expertise, complicating overall usability.
  • Users find the learning curve steep, making setup challenging for non-technical individuals and first-time admins.

What Are Recent G2 Reviews of Adaptive Security?

Sophos PhishThreat

Sophos Phish Threat is a cloud-based security awareness training and phishing simulation platform designed to educate employees on identifying and responding to phishing attacks. By simulating realistic phishing scenarios and providing interactive training modules, it helps organizations strengthen their human firewall against cyber threats. Key Features and Functionality: - Realistic Phishing Simulations: Offers hundreds of customizable templates that mimic real-world phishing attacks, enabling organizations to test and improve employee vigilance. - Automated Training Modules: Provides over 30 interactive training courses covering security and compliance topics, automatically enrolling users who fall for simulated attacks. - Comprehensive Reporting: Delivers actionable insights through intuitive dashboards, tracking user susceptibility, training progress, and overall organizational risk levels. - Multi-Language Support: Available in nine languages, ensuring accessibility for diverse workforces. - Seamless Integration: Integrates with Sophos Central, allowing unified management alongside other security solutions like email and endpoint protection. Primary Value and Problem Solved: Sophos Phish Threat addresses the critical challenge of human error in cybersecurity by transforming employees into proactive defenders against phishing attacks. By combining realistic simulations with targeted training, it reduces the likelihood of successful phishing attempts, thereby enhancing the organization's overall security posture and minimizing the risk of data breaches and financial loss.

Average Rating: 4.4/5.0

Total Reviews: 25

Who Is the Company Behind Sophos PhishThreat?

  • Seller: Sophos
  • Year Founded: 1985
  • HQ Location: Oxfordshire
  • Twitter: @Sophos
    36,759 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5,550 employees on LinkedIn®
  • Ownership: LSE:SOPH

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 58% Medium, 31% Small

What Are Recent G2 Reviews of Sophos PhishThreat?

What Are G2 Users Discussing About Sophos PhishThreat?

FAQs About Breach and Attack Simulation (BAS) Software

Generated using AI

Last updated: June 3, 2026

Which Breach And Attack Simulation BAS vendors provide strong implementation guidance for team adoption

Based on G2 reviews, these BAS vendors are most often praised for onboarding, setup, and guidance.

Breach And Attack Simulation BAS solutions combining ease of use with advanced integration capabilities

According to verified users, BAS buyers often look for a balance between fast deployment and meaningful integrations with the rest of the security stack. In recent G2 reviews, that combination shows up in mentions of intuitive dashboards, simple setup, and the ability to connect with SIEM, EDR, XDR, firewalls, web application firewalls, and other existing controls. Reviewers value platforms that make simulations easy to run without heavy operational overhead, while still helping teams validate logs, isolate which control blocked an attack, and turn findings into remediation steps. Integration breadth matters most when it improves visibility, reduces manual testing, and supports continuous validation across multiple layers of defense.

Most reliable Breach And Attack Simulation BAS platforms proven by long-term enterprise deployments

Based on G2 reviews, these BAS platforms appear most often in feedback describing dependable use in ongoing programs.

What are the most important features in bas tools

According to verified users, the most important features in bas tools are realistic attack simulation, continuous validation, and clear remediation guidance. Recent reviews also emphasize broad threat libraries, support for MITRE-aligned scenarios, and reporting that helps both technical teams and leadership understand gaps. Buyers repeatedly mention integration with SIEM, EDR, XDR, firewalls, and web security tools as a priority because it helps confirm whether controls are detecting or blocking attacks as expected. Ease of setup and ease of use also matter because teams want to run assessments regularly, not just occasionally. The strongest products help teams find misconfigurations, validate detections, prioritize fixes, and keep security programs proactive instead of reactive.

How do teams use Breach and Attack Simulation (BAS) for remediation guidance

G2 reviewers mention that teams use BAS to move from identifying gaps to fixing them faster. In recent reviews, users describe running attack simulations to expose weak points across endpoint, network, email, web, and broader security controls, then using the resulting guidance to tune configurations, improve detection rules, and prioritize remediation work. Some reviewers specifically value vendor-specific or easy-to-apply recommendations because they reduce guesswork for analysts and administrators. Others highlight retesting after changes to confirm that fixes actually worked. For buyers, the practical value of BAS is not just finding exposure, but making remediation more measurable, repeatable, and aligned with how real attacks would interact with existing defenses.

Pentera

Pentera is the category leader for Automated Security Validation, allowing every organization to test with ease the integrity of all cybersecurity layers, unfolding true, current security exposures at any moment, at any scale. Thousands of security professionals and service providers around the world use Pentera to guide remediation and close security gaps before they are exploited. Its customers include Casey's General Stores, Emeria, LuLu International Exchange, IP Telecom PT, BrewDog, City National Bank, Schmitz Cargobull, and MBC Group. Pentera is backed by leading investors such as K1 Investment Management, Insight Partners, Blackstone, Evolution Equity Partners, and AWZ. Visit https://pentera.io for more information.

Average Rating: 4.6/5.0

Total Reviews: 185

Who Is the Company Behind Pentera?

  • Seller: Pentera
  • Company Website:
  • Year Founded: 2015
  • HQ Location: Boston, MA
  • Twitter: @penterasec
    3,291 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    460 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Government Administration, Banking
  • Company Size: 52% Large, 34% Medium

What Do G2 Reviewers Say About Pentera?

AI-generated summary from verified user reviews

Pros
  • Users find Pentera's ease of use exceptional, thanks to its automation, customizable scenarios, and simple interface.
  • Users value the effective vulnerability scanning and remediation capabilities of Pentera, enhancing overall security posture.
  • Users value the automation capabilities of Pentera, enhancing their security testing and validation processes efficiently.
  • Users value the responsive customer support from Pentera, enhancing their experience and facilitating smooth operations.
  • Users value the realistic attack simulations offered by Pentera, enhancing their security posture through continuous validation.
Cons
  • Users find the reporting inadequate, suggesting it requires improvement for better enterprise-level insights.
  • Users express concern about the lack of a robust RBAC system, limiting proper access control and user rights management.
  • Users desire improvement in handling false positives, though overall satisfaction with Pentera remains high.
  • Users note the limited reporting capabilities of Pentera, especially for enterprise-level assessments and lacking Spanish translation.
  • Users are concerned about the missing features in Pentera, including updates on vulnerabilities and insufficient RBAC options.

What Are Recent G2 Reviews of Pentera?

HTB CTF & Threat Range

Hack The Box is the leading cyber readiness platform for the human-AI cyber workforce, helping organizations develop and measure the capabilities of the people and AI agents responsible for modern defense. The Capture The Flag platform delivers threat-informed challenges and real-world simulations that build and validate offensive, defensive and AI-enabled cyber capabilities. Trusted by the Fortune 500, government agencies, managed security service providers (MSSPs) and Frontier Labs, Hack The Box supports more than 800 enterprise customers and a global community of over 4 million cybersecurity professionals. For more information, visit hackthebox.com

Average Rating: 4.7/5.0

Total Reviews: 22

Who Is the Company Behind HTB CTF & Threat Range?

  • Seller: Hack The Box
  • Company Website:
  • Year Founded: 2017
  • HQ Location: Folkestone, GB
  • Twitter: @hackthebox_eu
    246,095 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2,313 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 45% Large, 36% Small

What Are Recent G2 Reviews of HTB CTF & Threat Range?

vPenTest

Vonahi Security is building the future of offensive cybersecurity by delivering automated, high-quality penetration testing through its SaaS platform, vPenTest. Designed to replicate the tools, techniques, and methodologies of experienced consultants, vPenTest brings the benefits of manual network penetration testing into an easy-to-use, automated solution. Traditionally, penetration testing has been a manual, time consuming, and expensive process that many organizations only perform once or twice a year. This often leaves businesses exposed to emerging threats between assessments. vPenTest addresses this gap by offering fast, consistent, and on-demand testing that helps organizations evaluate their real-time cybersecurity risk more effectively. Powered by a proprietary framework that evolves through continuous research and real-world insights, vPenTest stays aligned with the latest attack techniques and industry best practices. The platform is backed by over 13 years of offensive security expertise, with the team holding certifications such as CISSP, OSCP, OSCE, CEH, and more. Their knowledge is built directly into the platform, ensuring each test is conducted with depth, consistency, and accuracy—without the delays or variability of manual testing.
 vPenTest enables organizations to run internal and external network penetration tests as often as needed monthly, quarterly, or prior to audits or insurance reviews. The automated reports provide actionable insights that make it easy to prioritize remediation and demonstrate progress toward compliance. Today, over 22,000 organizations rely on vPenTest to strengthen their security posture and reduce risk. This includes managed service providers, managed security service providers, financial institutions, compliance-driven organizations, and internal IT teams. Whether you're working to meet regulatory requirements, secure cyber insurance coverage, or proactively defend against evolving threats, vPenTest makes network penetration testing easy, affordable, and scalable.

Average Rating: 4.6/5.0

Total Reviews: 245

Who Is the Company Behind vPenTest?

  • Seller: Kaseya
  • Company Website:
  • Year Founded: 2000
  • HQ Location: Miami, FL
  • Twitter: @KaseyaCorp
    17,411 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5,483 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 69% Small, 24% Medium

What Do G2 Reviewers Say About vPenTest?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of vPenTest, praising its intuitive interface and smooth setup process.
  • Users praise the detailed and reliable technical reports from vPenTest, enhancing their remediation efforts effectively.
  • Users appreciate the user-friendly interface of vPenTest, enhancing their efficiency in conducting penetration tests.
  • Users commend the easy setup of vPenTest, finding it a smooth experience for managing security solutions effectively.
  • Users highlight the ease of implementation of vPenTest, appreciating its quick setup and seamless integration into workflows.
Cons
  • Users find the limited scope of vPenTest frustrating, as it doesn't cover all necessary pentesting aspects.
  • Users find the setup process complex, highlighting challenges with initial configuration and integration with existing systems.
  • Users find the lack of detail in vPenTest confusing, complicating communication and understanding of findings.
  • Users find the inadequate reporting of vPenTest restricts customization and leads to repetitive findings over time.
  • Users find vPenTest to be expensive, especially for smaller organizations facing pricing and contract challenges.

What Are Recent G2 Reviews of vPenTest?

Right-Hand Cybersecurity

Right-Hand is a Human Risk Management company supporting organizations across North America and APAC, working with teams across a wide range of industries including finance, education, retail, healthcare, and manufacturing. The platform is built to help security leaders understand, measure, and reduce human-initiated risk in modern, distributed environments where technology alone is no longer enough. Most security programs generate large volumes of alerts and telemetry but struggle to translate that data into meaningful insight about human behavior. Right-Hand addresses this challenge by integrating with core security tools such as email security, EDR, DLP, CASB, and SIEM. These integrations surface high-signal events and contextual risk indicators tied directly to user actions, giving teams visibility into where risky behavior occurs, which patterns lead to incidents, and how human risk changes over time across the organization. Building on this foundation, Right-Hand provides purpose-built AI agents that support security awareness execution at scale. The vishing agent enables realistic voice-based simulations, the email agent supports the creation of phishing templates and scenarios, and the training agent helps generate and adapt learning content based on role, behavior, and exposure. Together, these agents allow teams to move beyond static programs and deliver continuous, relevant awareness without relying on one-size-fits-all content or manual effort. The primary value of Right-Hand is turning visibility into action. Instead of compliance-driven training disconnected from real risk, organizations gain a data-informed program that links behavior, learning, and outcomes. Security teams can reduce repeat incidents, lower operational noise, demonstrate progress over time, and build a stronger, more resilient security culture aligned with how people actually work.

Average Rating: 4.8/5.0

Total Reviews: 77

Who Is the Company Behind Right-Hand Cybersecurity?

  • Seller: Right-Hand Cybersecurity
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Lewes, Delaware
  • Twitter: @righthand_ai
    139 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    44 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 56% Medium, 27% Large

What Do G2 Reviewers Say About Right-Hand Cybersecurity?

AI-generated summary from verified user reviews

Pros
  • Users highly value the outstanding customer support from Right-Hand Cybersecurity, enhancing their overall training experience significantly.
  • Users enjoy the user-friendly interface of Right-Hand Cybersecurity, enhanced by dedicated support from their account manager.
  • Users find Charlton to be very helpful, enhancing their experience and exceeding expectations with exceptional support.
  • Users value the comprehensive training support from Right-Hand Cybersecurity, enhancing engagement and ease of customization.
  • Users praise the personalized approach of Right-Hand Cybersecurity, enhancing training with real-time insights and engaging tools.
Cons
  • Users note the limited automations and integrations in Right-Hand Cybersecurity, wishing for more granular control within the platform.
  • Users find the inadequate reporting capabilities of Right-Hand Cybersecurity limits their access to detailed insights and analysis.
  • Users find the Phishing issues in Right-Hand Cybersecurity need better resolution workflows and reporting capabilities.
  • Users face integration issues with limited APIs and missing connections to essential tools like Drata.
  • Users note the limited customization options with Right-Hand Cybersecurity, wishing for more flexibility in roles and reporting.

What Are Recent G2 Reviews of Right-Hand Cybersecurity?

What Are G2 Users Discussing About Right-Hand Cybersecurity?

AI-Native Continuous Offensive Security Platform

RidgeBot by Ridge Security is a leading agentic AI-driven offensive security platform, supporting continuous threat management programs. It enables CISOs to minimize cyber risks by continuously validating the cybersecurity posture and controls protecting attack surfaces against increasingly sophisticated and frequent attacks. RidgeBot automatically tests an organization’s entire IP-based environment, including network infrastructure, applications, websites, IoT, and OT, using ethical hacking techniques to pinpoint the most critical vulnerabilities. It's dynamic AI-powered decision-making supports DevSecOps, compliance, incident response verification, and custom attack simulations. RidgeBot maintains a library of over 36,000 plugins to launch complex penetration tests and attack simulations, with detailed reporting of results and remediation recommendations.

Average Rating: 4.5/5.0

Total Reviews: 98

Who Is the Company Behind AI-Native Continuous Offensive Security Platform?

  • Seller: Ridge Security Technology
  • Company Website:
  • Year Founded: 2020
  • HQ Location: Santa Clara, California
  • Twitter: @RidgeSecurityAI
    1,291 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    49 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 51% Small, 45% Medium

What Do G2 Reviewers Say About AI-Native Continuous Offensive Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users praise the automation capabilities of RidgeBot, streamlining penetration testing and providing accurate vulnerability assessments efficiently.
  • Users appreciate the ease of use of the AI-Native Continuous Offensive Security Platform for streamlined penetration testing.
  • Users commend the pentesting efficiency of RidgeBot, automating tests and validating vulnerabilities seamlessly to save time.
  • Users appreciate the automated vulnerability identification of RidgeBot, which effectively validates risks and streamlines security processes.
  • Users value the efficiency of RidgeBot, as it automates testing to save time and enhance security processes.
Cons
  • Users find RidgeBot's setup to be complex and challenging, particularly in customized or legacy system environments.
  • Users find the complex setup challenging, especially due to limited documentation and support for new admins.
  • Users find the missing features such as improved API testing and customizable reporting templates quite limiting.
  • Users find the poor customer support challenging, as documentation is often lacking for troubleshooting issues.
  • Users find the poor documentation challenging, making initial setup and onboarding confusing for new admins.

What Are Recent G2 Reviews of AI-Native Continuous Offensive Security Platform?

Simulations Labs

Simulations Labs is an ai-powered platform that enables organizations, educators, and security teams to create realistic, reusable, and scalable hands-on cybersecurity simulations—without complex setup or infrastructure. Fully Managed Hosting Without Infrastructure Overhead Organizations run CTFs and simulations without DevOps, server setup, or maintenance. No Worries About Attacks or Server Downtime Simulations Labs automatically manages security, monitoring, and uptime, even during large-scale events. Organizers don’t need to worry about servers being attacked, crashing, or going offline. Custom Simulation Creation with Dashboard Simulations Labs offers a dashboard that allows organizers to create and manage fully custom simulations. Each simulation provisions isolated environments for participants, supports web application challenges, and can include dynamic flags to prevent cheating AI-Powered Challenge Creation Unlike traditional platforms that require technical expertise, our AI-powered tools enable non-technical users to create simulations and challenges quickly and easily.

Average Rating: 4.8/5.0

Total Reviews: 10

Who Is the Company Behind Simulations Labs?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Simulations Labs?

Defendify All-In-One Cybersecurity Solution

Founded in 2017, Defendify is pioneering All-In-One Cybersecurity® for organizations with growing security needs, backed by experts offering ongoing guidance and support. Delivering multiple layers of protection, Defendify provides an all-in-one, easy-to-use platform designed to strengthen cybersecurity across people, process, and technology, continuously. With Defendify, organizations streamline cybersecurity assessments, testing, policies, training, detection, response & containment in one consolidated and cost-effective cybersecurity solution. 3 layers, 13 solutions, 1 platform, including: • Managed Detection & Response • Cyber Incident Response Plan • Cybersecurity Threat Alerts • Phishing Simulations • Cybersecurity Awareness Training • Cybersecurity Awareness Videos • Cybersecurity Awareness Posters & Graphics • Technology Acceptable Use Policy • Cybersecurity Risk Assessments • Penetration Testing • Vulnerability Scanning • Compromised Password Scanning • Website Security Scanning See Defendify in action at www.defendify.com.

Average Rating: 4.7/5.0

Total Reviews: 57

Who Is the Company Behind Defendify All-In-One Cybersecurity Solution?

  • Seller: Defendify
  • Year Founded: 2017
  • HQ Location: Portland, Maine
  • Twitter: @defendify
    305 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    36 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 65% Small, 35% Medium

What Do G2 Reviewers Say About Defendify All-In-One Cybersecurity Solution?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Defendify, streamlining cybersecurity management for small and medium-sized businesses.
  • Users praise Defendify for its comprehensive and cost-effective cybersecurity features, streamlining management for small to medium-sized businesses.
  • Users appreciate the easy setup of Defendify, finding it quick and simple for effective cybersecurity management.
  • Users value the ease of use of Defendify, appreciating quick setup and actionable insights for cybersecurity management.
  • Users value the continuous monitoring features of Defendify, easing the burden of network security management significantly.
Cons
  • Users note that inadequate reporting hinders effective communication, calling for improvements in clarity and detail.
  • Users feel that the poor reporting features hinder effective communication and internal analysis of cybersecurity efforts.
  • Users express frustration over the lack of concise information in reports, preferring clearer and more detailed summaries.
  • Users find the limited customization options restrictive, wishing for more personalized reporting and branding capabilities.
  • Users desire custom reporting options and co-branding features to enhance the personalization of their experience.

What Are Recent G2 Reviews of Defendify All-In-One Cybersecurity Solution?

What Are G2 Users Discussing About Defendify All-In-One Cybersecurity Solution?

Datto SaaS Defense

SaaS Defense is an advanced threat protection [ATP] and spam filtering solution that detects zero-day threats. This means it identifies and prevents threats that competitive solutions are missing. It proactively defends against malware, phishing, and business email compromise (BEC) attacks that target Microsoft 365 including Exchange, OneDrive, SharePoint, and Teams. Benefits to MSPs ✔Close detection gaps: Proactively monitor, detect, and eliminate the unknown cyber threats that other solutions miss with data-independent technology. ✔ Go beyond email security: SaaS Defense protects from a range of malicious attacks across the Microsoft 365 suite, not just email. ✔ Improve your bottom line: This tool is a profit builder that can be used to attract new market share and triple MSP margins. ✔ Seamless deployment & management: Get new clients up and running in minutes with two-click onboarding & multi-tenant management. ✔ Easily demonstrate your value: robust reporting capabilities, that can be shared with clients, that articulate why a threat was identified as malicious. ✔ Multi-layered detection, protection and recovery for Microsoft 365 with complete SaaS Protection integration.

Average Rating: 4.2/5.0

Total Reviews: 12

Who Is the Company Behind Datto SaaS Defense?

  • Seller: Kaseya
  • Year Founded: 2000
  • HQ Location: Miami, FL
  • Twitter: @KaseyaCorp
    17,411 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5,483 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 58% Small, 33% Medium

What Are Recent G2 Reviews of Datto SaaS Defense?

What Are G2 Users Discussing About Datto SaaS Defense?

NetSPI

NetSPI PTaaS is a type of penetration testing as a service (PTaaS) solution designed to help organizations identify and remediate vulnerabilities within their systems, applications, and networks. This service utilizes a combination of skilled professionals, established processes, and advanced AI technology to provide contextualized security outcomes in real time, all accessible through a unified platform. By addressing the limitations of traditional penetration testing methods, NetSPI PTaaS offers a more efficient and comprehensive approach to security assessments. This service is targeted at businesses of all sizes, from startups to large enterprises, making it particularly beneficial for security teams looking to enhance their vulnerability management strategies. NetSPI PTaaS caters to a variety of use cases, including application security assessments, infrastructure testing, and evaluations of emerging technologies such as artificial intelligence. With over 50 different types of penetration tests available, including traditional point in time testing and our continuous offerings, organizations can customize their security evaluations to meet specific needs, ensuring thorough coverage across all potential attack surfaces. A key feature of NetSPI PTaaS is its commitment to delivering real-time findings through a single platform. This capability allows security teams to receive immediate insights into vulnerabilities, enabling them to act swiftly to mitigate risks based on role and priority, managing testing in just a few clicks. The platform's integration capabilities enhance its usability, allowing organizations to seamlessly incorporate findings into their existing security workflows. This streamlined approach not only saves time but also ensures that remediation efforts are based on high-fidelity, manually validated findings, thus improving overall security effectiveness. The expertise of NetSPI's team of over 350 in-house security professionals is another significant differentiator. Their extensive experience and knowledge in the field of cybersecurity ensure that the testing methodologies employed are rigorous and consistent, uncovering vulnerabilities, exposures, and misconfigurations that may be overlooked by other solutions. This white-glove approach to penetration testing emphasizes the importance of manual validation, providing organizations with reliable and actionable insights that can significantly enhance their security posture. NetSPI PTaaS stands out in the realm of penetration testing services by combining expert human analysis with advanced AI technology, delivering timely and accurate results. This empowers organizations to strengthen their defenses against evolving cyber threats, ensuring that they remain resilient in an increasingly complex security landscape.

Average Rating: 4.9/5.0

Total Reviews: 13

Who Is the Company Behind NetSPI?

  • Seller: NetSPI
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Minneapolis, MN
  • Twitter: @NetSPI
    4,041 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    595 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 46% Large, 38% Medium

What Do G2 Reviewers Say About NetSPI?

AI-generated summary from verified user reviews

Pros
  • Users highlight the expertise of NetSPI's team, praising their exceptional leadership and effective project management throughout engagements.
  • Users commend the expertise and support of the NetSPI team, enhancing the overall engagement experience significantly.
  • Users value the effective communication of NetSPI, ensuring they're always updated and never left in the dark.
  • Users value the easy-to-use interface of NetSPI, enhancing communication and project management throughout their engagements.
  • Users praise the exceptional service quality of NetSPI, highlighting their effective communication and strong project management.
Cons
  • Users find the difficult navigation of NetSPI's interface hinders their ability to efficiently use the platform.
  • Users express concerns about false positives in the vulnerability report, making it unclear which devices are affected.
  • Users find that the vulnerability report lacks clarity regarding which devices are affected, causing confusion.
  • Users express concern about the lack of detail in vulnerability reports, making it unclear which devices are impacted.
  • Users experience lack of information regarding specific device impacts in vulnerability reports, leading to confusion and uncertainty.

What Are Recent G2 Reviews of NetSPI?

Reflex Security

Reflex Security builds real incident response readiness through AI-driven tabletop exercises that adapt in real time to your team's decisions. The platform generates hyper-customized scenarios in minutes by researching your actual tech stack, industry, and threat landscape from public data. Every exercise is tailored to your organization, not pulled from a generic template. Exercises fight back. AI adversaries respond dynamically to participant decisions, creating realistic pressure and unpredictable outcomes that keep teams engaged throughout. An AI facilitator can join Zoom, Google Meet, or Teams to guide discussion, capture notes, and challenge individuals with role-specific questions. After each exercise, Reflex generates audit-ready reports with performance analytics and remediation guidance designed to support compliance requirements such as SOC 2, ISO 27001, DORA, CIRCIA and cyber insurance requirements. Built for CISOs and MSSPs who want to run tabletop exercises frequently at a fraction of the prep time and cost of traditional facilitated sessions.

Average Rating: 5.0/5.0

Total Reviews: 4

Who Is the Company Behind Reflex Security?

Who Uses This Product?

  • Company Size: 75% Small, 25% Large

What Are Recent G2 Reviews of Reflex Security?

Infection Monkey

By deploying the Infection Monkey as an ongoing testing solution, you can verify the security baseline of your network and achieve full network coverage.

Average Rating: 4.8/5.0

Total Reviews: 3

Who Is the Company Behind Infection Monkey?

  • Seller: GuardiCore
  • HQ Location: Cambridge, Massachusetts, United States
  • Twitter: @GuardiCore
    2,636 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    10,658 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of Infection Monkey?

What Are G2 Users Discussing About Infection Monkey?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024