I am using Cymulate for BAS assessment, and I appreciate its ability to find loopholes or security gaps, allowing me to mitigate them. I like the assessment coverage area and that I can do WAF assessment, hopper assessment, endpoint assessment, and email gateway assessment. Cymulate covers all aspects I need, and setting it up is easy thanks to the agent-based setup and provided guide. I find it the best product in BAS, and I am likely to recommend it highly. Review collected by and hosted on G2.com.

I feel that AI-related assessments should be added more. Review collected by and hosted on G2.com.

What I value most is its ability to provide realistic, continuous validation of our security posture without disrupting production systems. It’s efficient and intuitive to use, which makes it easy for us to run tests regularly and incorporate them into our ongoing continuous security validation process. Review collected by and hosted on G2.com.

Sometimes it’s difficult to get Cymulate working smoothly because of our company’s internal policies and restrictions. Review collected by and hosted on G2.com.

Email and endpoint attacks are customizable—scenario-based. There are lots of types of attacks in the attack database. The attack scenarios occur on a fast-paced SaaS platform. Mitigation strategies are also described in great detail and are easy to understand. Review collected by and hosted on G2.com.

Not too much - reporting system is a bit awkward. Not so much detailed. Lots of modules that needs to be considered before buying. Good integration options but needs to be bought seperately. Review collected by and hosted on G2.com.

I like the simple dashboards and how easy the product is to use. Review collected by and hosted on G2.com.

Only complaint would be the recent changes to the dashboard but it makes sense. New AI and features and capabilities. Review collected by and hosted on G2.com.

Cymulate helped us fine-tune and optimize our SOC & SIEM, stay ahead of threats, and build resilient operations through its exceptional continuous validation. It also helps us easily detect configuration drifts in ever-changing infrastructure environments, which I find crucial and it is a true blessing for a security manager. With the advanced visibility and clear proof of ROI, it provides the exact justification we need to present to the board. Review collected by and hosted on G2.com.

I had no problems or difficulties using the product. Review collected by and hosted on G2.com.

It is great tool to assess our security tools, gives real-time view, we can automate the assessments, with BAS 2.0 now, we can run more scenarios to validate security of the tools Review collected by and hosted on G2.com.

Overall, the product is great, but sometimes support team little slower in providing the resolution Review collected by and hosted on G2.com.

Cymulate is pretty quick to get started. Our representatives are very communicative and meet with us regularly to answer questions and show new features. The dashboard is easy to use as well. Review collected by and hosted on G2.com.

The reports are not as easy to use as the rest of the system and aren't as customizable as I'd like. Review collected by and hosted on G2.com.

The simulations are very realistic and easy to execute, allowing for quick evaluation of different attack vectors. The platform offers clear reports with remediation priorities, facilitating decision-making. Its continuous approach helps improve security posture without disrupting operations. Review collected by and hosted on G2.com.

The initial learning curve can be moderate if there is no prior experience with BAS. Some advanced simulations require technical adjustments or additional licenses. Reports in Spanish could be more comprehensive. It should be possible to create dashboards with more representative KPIs. Review collected by and hosted on G2.com.

I like best about Cymulate is its intuitive and user-friendly interface, which makes it easy to set up and manage continuous security validation across our environment. The platform provides comprehensive attack simulations that help identify vulnerabilities before attackers can exploit them. I also appreciate the actionable insights and remediation guidance that allow our team to prioritize and address critical risks quickly. The real-time reporting and variety of testing modules—from phishing simulations to lateral movement—make Cymulate a valuable tool for strengthening our organization’s security posture. Review collected by and hosted on G2.com.

I dislike about Cymulate is that some advanced features can be a bit complex to configure, and initial setup may take more time if you are new to the platform. Sometimes, reports can contain a lot of details, which may feel overwhelming for beginners. Review collected by and hosted on G2.com.

It provides automated, continuous security validation that clearly shows real-world attack exposure and the steps needed for remediation. Review collected by and hosted on G2.com.

Limited customization options and occasional false positives can make it challenging to fine-tune the results. Review collected by and hosted on G2.com.