Edit

EG

Elmar G.

Especialista en Seguridad de Aplicaciones

Enterprise (> 1000 emp.)

9/30/2025

"Operationalizing Security Validation at Scale"

5/5

What do you like best about Cymulate?

I love how Cymulate turns continuous, safe attack simulations into actionable, MITRE-mapped fixes with one-click retesting. It centralizes App/Email/Web/EDR/WAF/ASM validation, integrates with our stack, and gives exec-ready reporting to prove risk reduction month over month. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Exec PDFs are clean but layout/branding and metric granularity (per control/subcontrol trends) feel constrained. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thank you for taking the time to share your feedback. We’re glad to hear Cymulate is helping you maintain continuous validation, identify configuration drift, and clearly demonstrate security posture changes across your environment.

We appreciate you calling out your experience with executive reporting as well. We’ve shared your perspective with the appropriate internal teams to ensure it’s visible and considered as part of ongoing discussions.

Thanks again for your thoughtful review and for being part of the Cymulate community.

AF

Verified User in Financial Services

Enterprise (> 1000 emp.)

5/14/2025

"Automated Purple Teaming simplified with Cymulate"

4.5/5

What do you like best about Cymulate?

1) Variety of comprehensive security assessments and detailed reports that provide mitigation guidance across multiple security vectors.

2) excellent customer support

3) Easy deployment Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

1) The dashboard customization and reporting system could be improved, as the overall score is calculated as an average of all assessments conducted since day one, potentially limiting more granular insights.

2) The customer support team should adopt a more proactive approach, as reported issues often take over a month to be resolved. Review collected by and hosted on G2.com.

What problems is Cymulate solving and how is that benefiting you?

Cymulate enables organizations to detect vulnerabilities across their security infrastructure, ensuring that misconfigurations and weaknesses are addressed before attackers exploit them

Its ability to simulate immediate threats, including zero-day attack scenarios, enhances security readiness by addressing emerging cyber risks proactively.

Organizations can prioritize remediation efforts based on actual exposure risks, ensuring that security resources are allocated effectively Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for the thoughtful review! We're glad Cymulate is helping you easily discover misconfigurations and security gaps and that our platform supports your detection engineering and evaluation efforts. We're sorry you experienced a delay with support. We strive to resolve tickets quickly and will make sure your feedback is shared with the team. Thanks again for your trust in Cymulate!

AF

Verified User in Financial Services

Mid-Market (51-1000 emp.)

9/2/2025

"A new perspective of your security platform"

4.5/5

What do you like best about Cymulate?

Gives you a real insight of which attacks could breach your security platforms. It has a wide range of attack vectors and every flavor of attacks that can be tested. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

If you want to get the most our of your products, you might have to contact your software providers so that you can stop some of the breach simulations that get through. Configuration fixes will not be tailor-made to the platform being tested. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for the thoughtful review! We’re glad Cymulate is helping you gain a new perspective on your security posture with broad attack coverage and actionable insights. Your point on needing collaboration with software providers is well taken—security validation often sparks important conversations, and we’re here to help guide that process. Thanks for sharing your experience!

AK

Ankit K.

Security Consultant

Mid-Market (51-1000 emp.)

9/6/2025

"Cymulate is a Breach and Attack simulation partner which keeps us honest with security posture"

5/5

What do you like best about Cymulate?

Cymulate is a strategic enabler of control and posture validation which helps highlight the exposures effectively. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Agent dependency should be removed for certain use cases. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thank you for recognizing how Cymulate supports continuous posture validation and helps guide security investments. We’re thrilled it provides the insight you need to assess ROI and keep defenses strong. We also appreciate your feedback on agent dependency—it’s valuable input as we continue improving deployment flexibility.

MR

Michael R.

Ingeniero Threat hunting

Enterprise (> 1000 emp.)

9/17/2025

"Satisfied with cymulate"

4.5/5

What do you like best about Cymulate?

The update of active campaigns, which help us mitigate these potential security breaches. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

I think there are more campaigns needed focused on the financial sector like grandoreiro. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thank you for the review! We’re happy to hear Cymulate is supporting your team’s threat readiness and contributing to stronger security operations.

Your input on industry-specific content is valuable, and we appreciate you taking the time to share it. We will pass along the request.

AB

Verified User in Banking

Enterprise (> 1000 emp.)

9/16/2025

"Very useful and easy to use"

5/5

What do you like best about Cymulate?

The interface is intuitive and easy to navigate, which allows you to start working quickly. Additionally, the automatic validations save a lot of time and provide clear visibility on security exposures. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

In general, the experience is very good. Maybe they could improve the loading times a bit for some complex analyses, but it doesn't affect the overall performance. Review collected by and hosted on G2.com.

What problems is Cymulate solving and how is that benefiting you?

One of the main problems was the lack of continuous visibility over our actual vulnerabilities. Cymulate allows us to simulate attacks safely and quickly detect gaps in our security controls. Thanks to this, we can prioritize actions and improve the overall posture without waiting for an external audit. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for sharing your experience! It’s great to hear Cymulate is helping you keep continuous visibility and quickly spot real security gaps. That’s exactly what we aim for.

We also appreciate your note about load times on complex analyses. We’ve passed that along to our product team as we continue to optimize performance.

AB

Verified User in Banking

Enterprise (> 1000 emp.)

9/16/2025

"An excellent service"

5/5

What do you like best about Cymulate?

Mainly how user-friendly it is. Cymulate is valuable because it offers a continuous, automated, and realistic way to validate the organization's security. The platform allows simulating attacks based on MITRE ATT&CK to check if the defenses really work, and not just if they meet theoretical standards. Unlike simple vulnerability scans, it helps us prioritize exploitable risks, those that truly represent a threat in the business context. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

For the moment, nothing bad to say or that I don't like. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks so much for the great feedback. We’re glad to hear Cymulate is helping you move from theory to real, evidence-based validation. It’s great to know the platform makes it easier to see which risks actually matter and strengthen defenses where they count.

We also love that you’re using the data to improve protection across endpoints — that’s exactly how we want Cymulate to fit into your day-to-day security work.

RC

Ray C.

Director of Threat Research

Enterprise (> 1000 emp.)

6/3/2025

"Automated Security Validation"

5/5

What do you like best about Cymulate?

Three things:

- It was very easy to integrate into our ongoing testing framework

- It requires very little ongoing maintenance.

- It is constantly kept up-to-date with the latest threats Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

There are some areas that we wish Cymulate provided better coverage, especially in testing whether our network defenses can intercept and block command and control traffic, and testing our AI infrastructure. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for the great feedback. We’re glad Cymulate was easy to integrate, had low maintenance, and kept up with the latest threats. It’s great to hear it’s helping you spot protection gaps quickly. We’ve also passed your comments about C2 traffic and AI infrastructure testing to our product team.

AD

Anurag D.

Information Security Analyst

Mid-Market (51-1000 emp.)

9/4/2025

"Gaining confidence in posture with Cymulate"

5/5

What do you like best about Cymulate?

Security validation of multiple controls, prioritisation of findings in context, feasibility to run assessments anytime Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Need of flexible and customised reporting Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for taking the time to provide feedback! It’s great to hear Cymulate is helping you validate controls and prioritize findings in context—giving you greater confidence in your security posture. We appreciate the note on flexible reporting and will keep pushing to make it easier to tailor insights to your needs.

AH

Abu H.

Security consultant

Mid-Market (51-1000 emp.)

9/6/2025

"Cymulate changed our approach from assumption to Evidence backed"

5/5

What do you like best about Cymulate?

Cymulate validates your every control easily and effectively, be it , EDR, AV, DLP, Web, Firewall and many more Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Advanced customisation needs expertise in red teaming Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for sharing your experience! We’re glad Cymulate helps you validate every control—from EDR and AV to DLP, web, and firewalls—and move from assumptions to evidence-backed security.

We appreciate your note on advanced customization. Our team is always working to make deeper red–team–level options more approachable while maintaining the power and flexibility advanced users need.

It’s great to hear the automated assessments are saving your penetration testers valuable time—that’s exactly what we aim for.