--- title: Cymulate Reviews meta\_title: 'Cymulate Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 176 reviews by the users' company size, role or industry to find out how Cymulate works for a business like yours. aggregate\_rating: rating\_value: 4.9 review\_count: 176 scale: '5' date\_modified: '2026-08-28' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # Cymulate Reviews & Product Details Visit Website Designed for security teams to continuously validate threats and build exposure-informed defenses, the Cymulate Platform combines advanced attack simulation with an agentic cyber defense engineering control plane to continuously prove, prioritize and adapt security controls for the latest threats. With a daily feed of threat intelligence and a comprehensive attack library, Cymulate is a SaaS offering that applies AI to tailor offensive testing to the environment while integrating with security stack to push updates for immediate prevention and detection. Core use cases include threat validation, control validation & tuning, detection engineering, and vulnerability validation and prioritization. * * * Product Website Cymulate Seller [Cymulate](https://www.g2.com/sellers/cymulate) Discussions [Cymulate Community](https://www.g2.com/products/cymulate/discuss) Languages Supported English Solution Type All-in-One (All-in-One products consolidate features across multiple business functions into a single unified platform, serving a broad range of workflows within one tool.) Overview by Aviva Spotts Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 1 month [ View More Pricing Information ](https://www.g2.com/products/cymulate/pricing) ## Cymulate Integrations (44) What do users say about integrations? Verified by Cymulate [Show More Integrations](https://www.g2.com/products/cymulate/integrations) SA Shubham A. Enterprise (\> 1000 emp.) 3/18/2026 "Comprehensive BAS with Easy Setup and Stellar Coverage" 5/5 What do you like best about Cymulate? I am using Cymulate for BAS assessment, and I appreciate its ability to find loopholes or security gaps, allowing me to mitigate them. I like the assessment coverage area and that I can do WAF assessment, hopper assessment, endpoint assessment, and email gateway assessment. Cymulate covers all aspects I need, and setting it up is easy thanks to the agent-based setup and provided guide. I find it the best product in BAS, and I am likely to recommend it highly. Review collected by and hosted on G2.com. What do you dislike about Cymulate? I feel that AI-related assessments should be added more. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? I use Cymulate to find and mitigate security gaps or loopholes in systems, covering WAF, endpoint, email gateway, and web gateway assessments. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-12504573/official_response/edit) Thank you for your detailed feedback—we’re glad to hear you’re getting value from the wide range of assessments, especially for purple teaming and testing web and firewall defenses. It’s great to know the setup process was smooth and helped you get up and running quickly. We also appreciate you pointing out gaps in some assessment scenarios. That’s important feedback, and we’re sharing it internally. Thanks again for being part of the Cymulate community. 6/11/2026 (At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.) Validated Reviewer (Validated through a business email account)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") UC Verified User in Computer & Network Security (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Enterprise (\> 1000 emp.) 4/13/2026 "Realistic, Continuous Security Validation Without Disrupting Production" 5/5 What do you like best about Cymulate? What I value most is its ability to provide realistic, continuous validation of our security posture without disrupting production systems. It’s efficient and intuitive to use, which makes it easy for us to run tests regularly and incorporate them into our ongoing continuous security validation process. Review collected by and hosted on G2.com. What do you dislike about Cymulate? Sometimes it’s difficult to get Cymulate working smoothly because of our company’s internal policies and restrictions. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? Cymulate helps us tackle the challenge of understanding our true security posture by continuously validating how well our defenses perform against realistic attack scenarios. Rather than relying only on theoretical risk ratings or vulnerability scores, it highlights what is actually exploitable in our environment, which has significantly improved how we prioritize remediation. It also supports a more proactive security approach by enabling ongoing testing and iterative improvement, instead of depending solely on periodic assessments. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-12619957/official_response/edit) Thank you for the thoughtful review. We’re glad to hear Cymulate is helping you move toward a more continuous and proactive approach to security validation. Shifting from theoretical risk to what’s actually exploitable is a meaningful step, and it’s great to see that impact reflected in how you prioritize remediation. We also appreciate your calling out the challenges posed by internal policies and restrictions. That’s a reality for many organizations, and your feedback is valuable. Thanks again for sharing your experience and being part of Cymulate. Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through LinkedIn)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) FU Faik U. InfoSec Manager Enterprise (\> 1000 emp.) 4/10/2026 "Customizable, Scenario-Based Attacks with Clear Mitigation Guidance" 4.5/5 What do you like best about Cymulate? Email and endpoint attacks are customizable—scenario-based. There are lots of types of attacks in the attack database. The attack scenarios occur on a fast-paced SaaS platform. Mitigation strategies are also described in great detail and are easy to understand. Review collected by and hosted on G2.com. What do you dislike about Cymulate? Not too much - reporting system is a bit awkward. Not so much detailed. Lots of modules that needs to be considered before buying. Good integration options but needs to be bought seperately. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? For the web attack scenarios, mitigation strategies for web application firewalls are clear to understand. It's not necessary to install a separate application server/agent or reverse proxy etc. Just type your website that needs to be attacked and watch until it's complete. It's easy to verify if the attack is completed or not from the dashboards as well. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-12611245/official_response/edit) Hi Faik, Thanks for your thoughtful review—we’re glad Cymulate is helping you validate security gaps and take action quickly. We appreciate the candid feedback on reporting and platform structure, and will be sure to pass it along to our team. Great to hear the ease of testing without additional deployment is making your workflow simpler. Thanks again for sharing your experience! Validated Reviewer (Validated through a business email account)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) ![Nam T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nam T.") NT Nam T. Chief Information Security Officer (CISO) Mid-Market (51-1000 emp.) 8/5/2026 "Simple, Easy-to-Use Dashboards with Powerful New AI Features" 5/5 What do you like best about Cymulate? I like the simple dashboards and how easy the product is to use. Review collected by and hosted on G2.com. What do you dislike about Cymulate? Only complaint would be the recent changes to the dashboard but it makes sense. New AI and features and capabilities. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? It has helped us test and bake off our EDR and DLP solutions, making it easier to decide which products to choose and which ones have the most effective controls. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-13215862/official_response/edit) Thank you for sharing your feedback! We’re glad Cymulate has become a valuable part of how your team evaluates and makes confident security decisions. We also appreciate your perspective on the recent dashboard changes. As we introduce new AI capabilities and expand the platform, feedback from customers navigating those changes is incredibly valuable. Thank you for your partnership and for choosing Cymulate! Validated Reviewer (Validated through LinkedIn)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) ![Verified User in Oil & Energy](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Oil & Energy") AO Verified User in Oil & Energy (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Mid-Market (51-1000 emp.) 4/10/2026 "Continuous Validation: A True Blessing for Security Leaders" 5/5 What do you like best about Cymulate? Cymulate helped us fine-tune and optimize our SOC & SIEM, stay ahead of threats, and build resilient operations through its exceptional continuous validation. It also helps us easily detect configuration drifts in ever-changing infrastructure environments, which I find crucial and it is a true blessing for a security manager. With the advanced visibility and clear proof of ROI, it provides the exact justification we need to present to the board. Review collected by and hosted on G2.com. What do you dislike about Cymulate? I had no problems or difficulties using the product. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? It eliminates our security blind spots and mostly silent configuration drifts within our rapidly changing it environments. By continuously validating our environment, it directly benefits us by optimizing our existing SOC & SIEM operations and building solid resilience. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-12612071/official_response/edit) Thank you for taking the time to leave your review—we really appreciate it. It’s great to see Cymulate play a role not just in testing security controls, but also in helping you build more confidence in day-to-day operations and leadership discussions. When security teams can clearly demonstrate impact and stay aligned with a constantly changing environment, that’s where real value shows up. Thanks again for sharing your experience and for being part of Cymulate. 4/13/2026 (At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.) Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through a business email account)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) A Akanksha . Security Executive Enterprise (\> 1000 emp.) 4/7/2026 "Real-Time Security Validation with Automated BAS 2.0 Scenarios" 4.5/5 What do you like best about Cymulate? It is great tool to assess our security tools, gives real-time view, we can automate the assessments, with BAS 2.0 now, we can run more scenarios to validate security of the tools Review collected by and hosted on G2.com. What do you dislike about Cymulate? Overall, the product is great, but sometimes support team little slower in providing the resolution Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? Getting visibility of all security tools which we have in organization by assessing them, it reduces effort of manual testing. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-12239014/official_response/edit) Thank you for sharing your feedback—we’re glad to hear the platform is helping you gain real-time visibility, automate assessments, and get more value from the new capabilities. Stay tuned...there is more to come! We also appreciate your calling out your experience with support. That’s important feedback, and we’re sharing it with the right teams to help improve response times. Thanks again for being part of the Cymulate community. 4/22/2026 (At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.) Current User (The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.)Validated Reviewer (Validated through a business email account)Incentivized (This reviewer was offered a nominal gift card as thank you for completing this review.)Source: G2 invite (Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.) (Copy Review URL) ![Verified User in Insurance](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Insurance") UI Verified User in Insurance (This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture.) Mid-Market (51-1000 emp.) 8/5/2026 "Quick to Get Started with Cymulate and Excellent, Proactive Support" 5/5 What do you like best about Cymulate? Cymulate is pretty quick to get started. Our representatives are very communicative and meet with us regularly to answer questions and show new features. The dashboard is easy to use as well. Review collected by and hosted on G2.com. What do you dislike about Cymulate? The reports are not as easy to use as the rest of the system and aren't as customizable as I'd like. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? Verification of security controls and gaps Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-13215865/official_response/edit) Thank you for taking the time to leave a review! We’re happy to hear you’ve had a positive experience with Cymulate and our team. We especially appreciate your candid feedback around reporting and customization. We’re always looking for ways to make the platform more useful and flexible, and insights like yours are an important part of that. Thank you for your partnership and for trusting Cymulate to support your security validation program! Validated Reviewer (Validated through a business email account)Incentivized (This reviewer was offered a nominal incentive as thanks for completing this review.)Source: Seller invite (Invitation from a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review.) (Copy Review URL) ![Tony R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tony R.") TR Tony R. Head of Cibersecurity Operations Enterprise (\> 1000 emp.) 9/15/2025 "Validating security with Cymulate" 4.5/5 What do you like best about Cymulate? The simulations are very realistic and easy to execute, allowing for quick evaluation of different attack vectors. The platform offers clear reports with remediation priorities, facilitating decision-making. Its continuous approach helps improve security posture without disrupting operations. Review collected by and hosted on G2.com. What do you dislike about Cymulate? The initial learning curve can be moderate if there is no prior experience with BAS. Some advanced simulations require technical adjustments or additional licenses. The reports in Spanish could be more comprehensive. It should be possible to create dashboards with more representative KPIs. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? Cymulate is a Breach and Attack Simulation (BAS) platform that allows for continuous evaluation of the effectiveness of my organization's security controls. Through automated simulations of real attacks—such as phishing, lateral movements, data exfiltration, and vulnerability exploitation—it provides a clear view of the level of exposure and prioritizes corrective actions. Its approach, based on threat intelligence and continuous testing, helps validate policies, detect gaps, and improve the security posture proactively, without disrupting business operations. Review collected by and hosted on G2.com. Show More Validated Reviewer (Validated through a business email account added to their profile)Source: G2 invite on behalf of seller (Invitation from G2 on behalf of a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review.)AI Translated (This review has been translated from Spanish; Castilian using AI.) (Copy Review URL) PK Prathamesh K. Network Security Engineer Mid-Market (51-1000 emp.) 8/20/2025 "Cymulate:Comprehensive Security posture testing Reviewed" 4/5 What do you like best about Cymulate? I like best about Cymulate is its intuitive and user-friendly interface, which makes it easy to set up and manage continuous security validation across our environment. The platform provides comprehensive attack simulations that help identify vulnerabilities before attackers can exploit them. I also appreciate the actionable insights and remediation guidance that allow our team to prioritize and address critical risks quickly. The real-time reporting and variety of testing modules—from phishing simulations to lateral movement—make Cymulate a valuable tool for strengthening our organization’s security posture. Review collected by and hosted on G2.com. What do you dislike about Cymulate? I dislike about Cymulate is that some advanced features can be a bit complex to configure, and initial setup may take more time if you are new to the platform. Sometimes, reports can contain a lot of details, which may feel overwhelming for beginners. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? Cymulate helps solve the problem of finding security weaknesses before attackers do. It runs real-time tests and simulations to check if our systems are safe from cyber threats. This helps us fix issues quickly and avoid security breaches, keeping our company and data more secure. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-11531519/official_response/edit) Thanks so much for the detailed review! We’re thrilled Cymulate is helping your team stay ahead of threats with real-time simulations, actionable insights, and a user-friendly experience. It’s great to hear the platform is making a real impact on your security posture. We appreciate your note on advanced feature complexity and report depth—we’re always working to improve usability while keeping the power under the hood. Thanks again for your trust! 9/10/2025 (At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.) Validated Reviewer (Validated through a business email account)Source: Organic (Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate.) (Copy Review URL) AR Adesh R. Security analyst Enterprise (\> 1000 emp.) 3/25/2026 "Clear, Automated Security Validation with Actionable Remediation Steps" 5/5 What do you like best about Cymulate? It provides automated, continuous security validation that clearly shows real-world attack exposure and the steps needed for remediation. Review collected by and hosted on G2.com. What do you dislike about Cymulate? Limited customization options and occasional false positives can make it challenging to fine-tune the results. Review collected by and hosted on G2.com. What problems is Cymulate solving and how is that benefiting you? It helps identify real-world security gaps through continuous attack simulations, enabling faster remediation and a stronger overall security posture. Review collected by and hosted on G2.com. Show More Response from Aviva Spotts of Cymulate [Editedit](https://www.g2.com/survey_responses/cymulate-review-12540797/official_response/edit) Thank you for your thoughtful review—we’re glad to hear Cymulate is helping you identify real-world exposure and accelerate remediation through continuous validation. We also appreciate you highlighting the challenges around customization and occasional false positives. That’s valuable feedback, and we’re sharing it with the right teams as we are always looking to improve. Thanks again for being part of the Cymulate community and sharing your experience. Validated Reviewer (Validated through a business email account)Source: Organic (Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate.) (Copy Review URL) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 1 month ### Return on Investment 5 months ### Average Discount 10% [ View More Pricing Information ](https://www.g2.com/products/cymulate/pricing) Cymulate Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_a43ab3dc30bc14a2407a4dc6c7dd8695/pentera.jpeg "Product Avatar Image") Pentera 4.5/5(176) [ Compare Now ](https://www.g2.com/compare/cymulate-vs-pentera) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_139a02b31b9655933f22fdf0a4f34127/picus-security.png "Product Avatar Image") Picus Security 4.8/5(229) [ Compare Now ](https://www.g2.com/compare/cymulate-vs-picus-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_85d3b41656482ee2ed8f5452ea1f14da/attackiq-platform.png "Product Avatar Image") AttackIQ Platform 4.5/5(1) [ Compare Now ](https://www.g2.com/compare/attackiq-platform-vs-cymulate) ##### ##### Cymulate Features Simulation Test Agent Deployment Breach Simulation Attack Simulation Customization Multi-Vector Assessment Scenario Customization Range of Attack Types Administration Reporting Risk Evaluation Automated Testing [ View More Features ](https://www.g2.com/products/cymulate/features) ## Top-Rated Alternatives [ ![Pentera](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pentera") Pentera 4.5/5(176) ](https://www.g2.com/products/pentera/reviews) [ ![Picus Security](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Picus Security") Picus Security 4.8/5(229) ](https://www.g2.com/products/picus-security/reviews) [ ![AttackIQ Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "AttackIQ Platform") AttackIQ Platform 4.5/5(1) ](https://www.g2.com/products/attackiq-platform/reviews) [ View All Alternatives ](https://www.g2.com/products/cymulate/competitors/alternatives) ##### Categories on G2 [Cloud Security Posture Management (CSPM)](https://www.g2.com/categories/cloud-security-posture-management-cspm)[Exposure Management Platforms](https://www.g2.com/categories/exposure-management-platforms)[Breach and Attack Simulation (BAS)](https://www.g2.com/categories/breach-and-attack-simulation-bas) [Red Teaming Tools](https://www.g2.com/categories/red-teaming-tools) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Best Anti Money Laundering Software](https://www.g2.com/discussions/best-anti-money-laundering-software-tools)[Most reliable revenue intelligence platform for services industry](https://www.g2.com/discussions/most-reliable-revenue-intelligence-platform-for-the-services-industry)[What are the top demand planning platforms for seasonal product businesses?](https://www.g2.com/discussions/what-are-the-top-demand-planning-platforms-for-seasonal-product-businesses) [Leading software for affiliate marketing programs](https://www.g2.com/discussions/leading-software-for-affiliate-marketing-programs)[Best data observability software](https://www.g2.com/discussions/best-data-observability-software)[Pros and Cons Details](https://www.g2.com/products/cymulate/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)