Introducing G2.ai, the future of software buying.Try now

Best Breach and Attack Simulation (BAS) Software - Page 3

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller

Breach and attack simulation (BAS) software is used to mimic real-world security threats to help businesses prepare incident response plans and discover potential vulnerabilities in their security systems. These simulated attacks might send fake phishing attacks to employees or attempt a cyberattack on a company’s web application firewall. Many tools even provide automated simulations with AI-based threat logic and continuous testing to ensure teams are always prepared to properly handle security incidents.

Most of these simulations are available at all times. Many businesses use them periodically as updates are made to security systems or security policies are changed. Without simulated attacks, it can be difficult to assess the efficacy of security operations; customized simulations can mimic various threats to different surface areas or within unique environments to help businesses prepare and evaluate their defense against all kinds of multivector threats.

Breach and attack simulation software tools are typically capable of performing penetration tests or simulate attacks similar to some dynamic application security testing tools and vulnerability scanners. But most of those solutions only mimic a single kind of threat and are not continuously available. They also do not provide the same outcome details and report on vulnerabilities and security posture to the same degree of BAS solutions.

To qualify for inclusion in the Breach and Attack Simulation (BAS) software category, a product must:

Deploy threats targeting various attack surfaces
Simulate both cyberattacks and data breaches
Quantify risk and evaluate security posture based on attack response
Provide remediation process guidance and improvement suggestions
Show More
Show Less

Featured Breach and Attack Simulation (BAS) Software At A Glance

Free Plan Available:
Chariot
Sponsored
Easiest to Use:
Top Trending:
Best Free Software:
Show LessShow More
Easiest to Use:
Top Trending:
Best Free Software:

G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our scoring methodologies.

Coming Soon
Get Trending Breach and Attack Simulation (BAS) Products in Your Inbox

A weekly snapshot of rising stars, new launches, and what everyone's buzzing about.

Sample Trending Products Newsletter
No filters applied
48 Listings in Breach and Attack Simulation (BAS) Available
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    SimSpace delivers the world’s most realistic, intelligent cyber range, purpose-built to strengthen people, processes, and technologies against real adversaries. Unlike simulated labs that run on abstr

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    SimSpace
    Year Founded
    2015
    HQ Location
    New Boston, Massachusetts, United States
    LinkedIn® Page
    www.linkedin.com
    193 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

SimSpace delivers the world’s most realistic, intelligent cyber range, purpose-built to strengthen people, processes, and technologies against real adversaries. Unlike simulated labs that run on abstr

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
SimSpace
Year Founded
2015
HQ Location
New Boston, Massachusetts, United States
LinkedIn® Page
www.linkedin.com
193 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    Dreadnode is a pioneering company specializing in offensive machine learning, dedicated to advancing the field of offensive security by developing methodologies, tools, and research that enable more e

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    Dreadnode
    Year Founded
    2023
    HQ Location
    N/A
    LinkedIn® Page
    www.linkedin.com
    22 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

Dreadnode is a pioneering company specializing in offensive machine learning, dedicated to advancing the field of offensive security by developing methodologies, tools, and research that enable more e

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
Dreadnode
Year Founded
2023
HQ Location
N/A
LinkedIn® Page
www.linkedin.com
22 employees on LinkedIn®

This is how G2 Deals can help you:

  • Easily shop for curated – and trusted – software
  • Own your own software buying journey
  • Discover exclusive deals on software
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    Help companies to identify and manage cyber threats that affect their business.

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Year Founded
    2017
    HQ Location
    London, GB
    Twitter
    @elasticito
    42 Twitter followers
    LinkedIn® Page
    www.linkedin.com
    10 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

Help companies to identify and manage cyber threats that affect their business.

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Year Founded
2017
HQ Location
London, GB
Twitter
@elasticito
42 Twitter followers
LinkedIn® Page
www.linkedin.com
10 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    Exploit Pack is a multiplatform exploitation framework including zero-days from own lab, a growing collection of 39.000+ exploits and post-exploitation modules. It has been designed by an experienced

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Year Founded
    2008
    HQ Location
    The Netherlands, NL
    LinkedIn® Page
    www.linkedin.com
    2 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

Exploit Pack is a multiplatform exploitation framework including zero-days from own lab, a growing collection of 39.000+ exploits and post-exploitation modules. It has been designed by an experienced

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Year Founded
2008
HQ Location
The Netherlands, NL
LinkedIn® Page
www.linkedin.com
2 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    FortiTester is an enterprise-grade solution designed for performance testing and validating network security infrastructures. It offers a comprehensive range of application test cases to evaluate equi

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    Fortinet
    Year Founded
    2000
    HQ Location
    Sunnyvale, CA
    Twitter
    @Fortinet
    151,447 Twitter followers
    LinkedIn® Page
    www.linkedin.com
    15,738 employees on LinkedIn®
    Ownership
    NASDAQ: FTNT
Product Description
How are these determined?Information
This description is provided by the seller.

FortiTester is an enterprise-grade solution designed for performance testing and validating network security infrastructures. It offers a comprehensive range of application test cases to evaluate equi

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
Fortinet
Year Founded
2000
HQ Location
Sunnyvale, CA
Twitter
@Fortinet
151,447 Twitter followers
LinkedIn® Page
www.linkedin.com
15,738 employees on LinkedIn®
Ownership
NASDAQ: FTNT
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    Crisis Control drops organizations in live-fire cyber incident simulations that combine AI-enhanced injects in real-time adversary attacks. Teams from the SOC to the executive suite collaborate under

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Year Founded
    2017
    HQ Location
    Folkestone, GB
    Twitter
    @hackthebox_eu
    236,452 Twitter followers
    LinkedIn® Page
    www.linkedin.com
    2,020 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

Crisis Control drops organizations in live-fire cyber incident simulations that combine AI-enhanced injects in real-time adversary attacks. Teams from the SOC to the executive suite collaborate under

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Year Founded
2017
HQ Location
Folkestone, GB
Twitter
@hackthebox_eu
236,452 Twitter followers
LinkedIn® Page
www.linkedin.com
2,020 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    Security Validation Continuously measure and validate your security effectiveness against today’s adversaries

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    Google
    Year Founded
    1998
    HQ Location
    Mountain View, CA
    Twitter
    @google
    31,497,057 Twitter followers
    LinkedIn® Page
    www.linkedin.com
    325,307 employees on LinkedIn®
    Ownership
    NASDAQ:GOOG
Product Description
How are these determined?Information
This description is provided by the seller.

Security Validation Continuously measure and validate your security effectiveness against today’s adversaries

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
Google
Year Founded
1998
HQ Location
Mountain View, CA
Twitter
@google
31,497,057 Twitter followers
LinkedIn® Page
www.linkedin.com
325,307 employees on LinkedIn®
Ownership
NASDAQ:GOOG
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    ModelRed is an automated security testing platform for AI models. It runs adversarial tests against LLMs to identify vulnerabilities including prompt injection, jailbreaks, data leakage, hallucination

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    ModelRed
    Year Founded
    2025
    HQ Location
    Seattle, US
    LinkedIn® Page
    www.linkedin.com
    3 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

ModelRed is an automated security testing platform for AI models. It runs adversarial tests against LLMs to identify vulnerabilities including prompt injection, jailbreaks, data leakage, hallucination

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
ModelRed
Year Founded
2025
HQ Location
Seattle, US
LinkedIn® Page
www.linkedin.com
3 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    Nemesis by Persistent Security Industries is a Breach & Attack Simulation (BAS) platform that lets organizations emulate real-world cyberattacks in a controlled environment. Stay ahead of cyber

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    HQ Location
    Eupen, BE
    LinkedIn® Page
    www.linkedin.com
    9 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

Nemesis by Persistent Security Industries is a Breach & Attack Simulation (BAS) platform that lets organizations emulate real-world cyberattacks in a controlled environment. Stay ahead of cyber

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
HQ Location
Eupen, BE
LinkedIn® Page
www.linkedin.com
9 employees on LinkedIn®
0 ratings
Save to My Lists
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    NeSSi² is an open source project developed at the DAI-Labor and sponsored by Deutsche Telekom Laboratories. NeSSi (Network Security Simulator) is a novel network simulation tool which incorporates a v

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    NeSSi2
    Year Founded
    2006
    HQ Location
    Brussels, BE
    LinkedIn® Page
    www.linkedin.com
    4 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

NeSSi² is an open source project developed at the DAI-Labor and sponsored by Deutsche Telekom Laboratories. NeSSi (Network Security Simulator) is a novel network simulation tool which incorporates a v

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
NeSSi2
Year Founded
2006
HQ Location
Brussels, BE
LinkedIn® Page
www.linkedin.com
4 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    NetSPI BAS blends technology with human intelligence to validate the efficacy of your existing security controls. NetSPI BAS allows you to leverage pre-built plays and create your own custom playbooks

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    NetSPI
    Company Website
    Year Founded
    2001
    HQ Location
    Minneapolis, MN
    Twitter
    @NetSPI
    4,040 Twitter followers
    LinkedIn® Page
    www.linkedin.com
    605 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

NetSPI BAS blends technology with human intelligence to validate the efficacy of your existing security controls. NetSPI BAS allows you to leverage pre-built plays and create your own custom playbooks

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
NetSPI
Company Website
Year Founded
2001
HQ Location
Minneapolis, MN
Twitter
@NetSPI
4,040 Twitter followers
LinkedIn® Page
www.linkedin.com
605 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    OFFENSAI delivers a new paradigm in cloud security with its autonomous cloud security testing solution. Utilizing proprietary generative adversarial techniques, unpublished attack vectors, and interna

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    OFFENSAI
    Year Founded
    2024
    HQ Location
    Los Angeles, US
    LinkedIn® Page
    www.linkedin.com
    11 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

OFFENSAI delivers a new paradigm in cloud security with its autonomous cloud security testing solution. Utilizing proprietary generative adversarial techniques, unpublished attack vectors, and interna

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
OFFENSAI
Year Founded
2024
HQ Location
Los Angeles, US
LinkedIn® Page
www.linkedin.com
11 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    ReliaQuest exists to Make Security Possible. Our Agentic AI security operations platform, GreyMatter, allows security teams to detect threats at the source, contain, investigate and respond in less th

    Users
    No information available
    Industries
    No information available
    Market Segment
    • 40% Mid-Market
    • 20% Enterprise
  • Pros and Cons
    Expand/Collapse Pros and Cons
  • ReliaQuest GreyMatter Pros and Cons
    How are these determined?Information
    Pros and Cons are compiled from review feedback and grouped into themes to provide an easy-to-understand summary of user reviews.
    Pros
    Centralized Management
    2
    Ease of Use
    2
    Features
    2
    Integrations
    2
    Continuous Monitoring
    1
    Cons
    Communication Issues
    1
    Expensive
    1
    Login Issues
    1
    Poor Customer Support
    1
    Poor Support Management
    1
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Company Website
    Year Founded
    2007
    HQ Location
    Tampa, Florida, United States
    Twitter
    @ReliaQuest
    2,546 Twitter followers
    LinkedIn® Page
    www.linkedin.com
    1,144 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

ReliaQuest exists to Make Security Possible. Our Agentic AI security operations platform, GreyMatter, allows security teams to detect threats at the source, contain, investigate and respond in less th

Users
No information available
Industries
No information available
Market Segment
  • 40% Mid-Market
  • 20% Enterprise
ReliaQuest GreyMatter Pros and Cons
How are these determined?Information
Pros and Cons are compiled from review feedback and grouped into themes to provide an easy-to-understand summary of user reviews.
Pros
Centralized Management
2
Ease of Use
2
Features
2
Integrations
2
Continuous Monitoring
1
Cons
Communication Issues
1
Expensive
1
Login Issues
1
Poor Customer Support
1
Poor Support Management
1
Seller Details
Company Website
Year Founded
2007
HQ Location
Tampa, Florida, United States
Twitter
@ReliaQuest
2,546 Twitter followers
LinkedIn® Page
www.linkedin.com
1,144 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    securiCAD is a foreseeti product, developed to perform virtual attack simulations on models of IT architectures. Based on decades of research at the Royal Institute of Technology in Stockholm (KTH), s

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Seller
    foreseeti
    Year Founded
    2014
    HQ Location
    Stockholm, SE
    LinkedIn® Page
    www.linkedin.com
    2 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

securiCAD is a foreseeti product, developed to perform virtual attack simulations on models of IT architectures. Based on decades of research at the Royal Institute of Technology in Stockholm (KTH), s

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Seller
foreseeti
Year Founded
2014
HQ Location
Stockholm, SE
LinkedIn® Page
www.linkedin.com
2 employees on LinkedIn®
  • Overview
    Expand/Collapse Overview
  • Product Description
    How are these determined?Information
    This description is provided by the seller.

    Threatcare is a cybersecurity platform that allows organizations to simulate intrusions on their network to help improve their people's performance, their processes, and their product utilization.

    We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
    Industries
    No information available
    Market Segment
    No information available
  • Seller Details
    Expand/Collapse Seller Details
  • Seller Details
    Twitter
    @threatcare
    3,973 Twitter followers
    LinkedIn® Page
    www.linkedin.com
    1 employees on LinkedIn®
Product Description
How are these determined?Information
This description is provided by the seller.

Threatcare is a cybersecurity platform that allows organizations to simulate intrusions on their network to help improve their people's performance, their processes, and their product utilization.

We don't have enough data from reviews to share who uses this product. Leave a review to contribute, or learn more about review generation.
Industries
No information available
Market Segment
No information available
Seller Details
Twitter
@threatcare
3,973 Twitter followers
LinkedIn® Page
www.linkedin.com
1 employees on LinkedIn®