Giorgio G.

Cybersecurity Expert

Small-Business (50 or fewer emp.)

8/25/2025

"Finally, we can answer the question: How secure are we?"

5/5

What do you like best about Picus Security?

With its products, Picus Security enables us and our clients to objectively test cybersecurity systems and maximize their effectiveness. It also allows us to assess the level of security we have achieved and to justify past and future investments. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

Any solution can be improved, and Picus Security’s products are no exception. However, in recent years, the vendor has successfully enhanced the capabilities of its products and services, promptly addressing the ever-changing needs of the cybersecurity landscape. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Keeping cybersecurity defense systems under constant testing and control is, in itself, essential to maintaining high levels of security. However, one of the most distinctive and valuable features of Picus Security is its ability to provide objective measurements of the level of protection achieved. In other words, it enables organizations to answer the question 'How secure are we?'—a question often posed by non-technical managers to CISOs. Picus makes it possible to respond with 'Executive' reports and metrics that are easy to understand even for non-specialists, thereby supporting the justification of past investments as well as those to be planned in future budgets Review collected by and hosted on G2.com.

İA

İhsan A.

Senior Security Consultant

Mid-Market (51-1000 emp.)

7/28/2025

"A Game-Changer for Proactive Cyber Defense"

4.5/5

What do you like best about Picus Security?

Continuous, Automated Validation of Security Controls: Move beyond periodic snapshots to real-time, ongoing defense testing.

Actionable Remediation Guidance: Get precise, practical advice on how to fix identified security gaps.

Extensive & Up-to-Date Threat Library: Simulate the latest real-world attacks, aligned with MITRE ATT&CK.

Validate Security ROI: Prove the effectiveness of your existing security investments with concrete data.

Boost Team Efficiency: Automate testing to free up your security team for more strategic tasks. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

I believe licensing can be more flexible. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus Security tackles key cybersecurity challenges by continuously and automatically testing for unknown security gaps and remediating them. It simplifies prioritization for security teams, demonstrates the true effectiveness of security investments, and automates manual testing processes to save time. This makes organizations significantly more resilient against cyberattacks. Review collected by and hosted on G2.com.

Erdem E.

Senior Cyber Security Consultant

Mid-Market (51-1000 emp.)

7/28/2025

"Always Aware, Always in Control"

5/5

What do you like best about Picus Security?

The best thing about Picus is how it takes care of automated scans while keeping everything visible. Even if we overlook or forget a change in our security setup, Picus is quick to spot it and guide us to improve our defenses. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

Sometimes, running certain scans or tests requires adding exceptions. Getting past 'Not Tested' statuses often depends on the involvement of knowledgeable system administrators who understand the environment and give the necessary support. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus helps us stay ahead by showing us exactly where our defenses might fail—before attackers get the chance to exploit them. It’s like having a constant reality check on whether our security tools are actually doing their job. This not only saves us time but gives us peace of mind. Review collected by and hosted on G2.com.

Siraphop S.

Consultant

Small-Business (50 or fewer emp.)

4/30/2026

"Ready for Hundreds of Thousands of Threat Simulations"

4/5

What do you like best about Picus Security?

Be prepared for hundred thousands threat simulation Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

Most of the recommendations for remediation are too generic to be applied in practice. Review collected by and hosted on G2.com.

serhat a.

Cyber Security Team Lead

Enterprise (> 1000 emp.)

8/11/2025

"Powerful, Easy-to-Use Platform for Proactive Security Validation"

5/5

What do you like best about Picus Security?

I really like the continuous and realistic attack simulations. They provide a clear picture of our current security posture and help us prioritize fixes. The dashboard is intuitive, and the reports are easy to understand, even for non-technical stakeholders. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

There’s not much to dislike, but I would like to see more customization options for reporting and a wider range of integrations with third-party security tools. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus helps us identify and address security gaps before they can be exploited by real attackers. By running continuous, realistic attack simulations, it ensures our defenses are always tested and up to date. This proactive approach saves our team time, improves incident readiness, and strengthens our overall security posture. Review collected by and hosted on G2.com.

ibrahim B.

Incident Responder

Enterprise (> 1000 emp.)

8/13/2025

"Picus Security: Strengthening Security Posture Through Proactive Attack Simulation"

4.5/5

What do you like best about Picus Security?

Picus Security excels in continuous security validation by simulating real-world attack scenarios in a controlled and automated way. This allows organizations to proactively identify vulnerabilities and gaps in defenses before attackers can exploit them. I particularly appreciate:

Actionable insights: It doesn’t just highlight weaknesses; it provides clear guidance on how to remediate them.

Integration flexibility: Works well with existing security tools (SIEM, EDR, firewalls) to enhance overall security posture. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

While Picus Security is powerful, there are a few areas that could be improved:

Learning curve: New users may find the platform’s interface and features slightly complex at first, especially without prior experience in security validation.

Resource requirements: Running continuous attack simulations can consume noticeable system and network resources, which may need planning in larger environments. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus Security addresses a critical challenge in cybersecurity: the gap between security controls and real-world threats. Many organizations deploy firewalls, SIEMs, and endpoint protections but lack continuous validation to ensure these controls are effective against the latest attack techniques.

Picus Security solves this by:

Simulating real-world attacks continuously, identifying weak points in defenses before attackers can exploit them.

Providing actionable remediation guidance, which helps security teams prioritize fixes efficiently.

Validating security investments, ensuring that existing tools like EDR, firewalls, and intrusion detection systems are properly configured and effective.

Reducing risk of breaches, by proactively uncovering vulnerabilities that could lead to data loss, downtime, or compliance issues. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

8/12/2025

"Intuitive Interface, Up-to-Date Security, and Outstanding Post-Sales Support"

5/5

What do you like best about Picus Security?

The user interface is very intuitive and easy to use. In addition, the Security Control Validation module is constantly updated with the latest TTPs that are observed in the wild.

The post sales support is efficient as well, whereby there is quarterly update on the current product roadmap and follow up on any issue that the user encounter Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

There are some TTPs that are available in open source tool (e.g atomic red team) but not widely available in Picus SCV. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus Security addresses a critical challenge faced by modern SOC teams: how to ensure that the security products they have invested in are truly performing as promised. For instance, a SIEM solution from Vendor X may claim to detect specific TTPs, or an EDR tool from Vendor Y may promise to prevent them. But who can actually verify these claims?

With the Picus Security Security Control Validation (SCV) module, SOC teams can efficiently validate such vendor promises, identify detection and prevention gaps, and take proactive measures to close them.

This capability is especially valuable to me in my role where I focus on assessing and enhancing the SOC team's detection quality. Review collected by and hosted on G2.com.

Emre .

Information Technology Security Specialist

Enterprise (> 1000 emp.)

8/11/2025

"The Most Effective Way to Continuously Validate Our Cybersecurity Posture"

5/5

What do you like best about Picus Security?

Since we started using Picus Security, we've shifted from a passive monitoring approach to a proactive one. The platform's mitre attack-based attack simulations allow us to clearly see how prepared our environment is against real-world threats. It's been particularly useful in assessing the effectiveness of our existing security tools (like SIEM, EDR, IPS), identifying gaps, and taking action quickly.

The user interface is intuitive and easy to navigate—even for team members who aren't deeply technical. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

The reporting can sometimes be overly detailed, which makes it slightly challenging when preparing high-level summaries for management. Additionally, the integration of newly discovered threats into the platform can occasionally lag behind a bit. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus Security solves the challenge of continuously validating the effectiveness of our security defenses. It allows us to simulate real-world attacks and test our systems, ensuring our tools (like firewalls, SIEM, and EDR) are performing as expected.

Benefits:

Proactive Approach: We can identify vulnerabilities before they are exploited.

Improved Confidence: Continuous testing boosts our trust in our security posture.

Faster Response: Issues are detected and addressed more quickly, minimizing risk. Review collected by and hosted on G2.com.

Zekeriya T.

Co Founder

Small-Business (50 or fewer emp.)

8/11/2025

"A Smart Tool for Staying Ahead of Cyber Threats"

5/5

What do you like best about Picus Security?

It's easy to deploy and quick support. Picus Security is how it makes cybersecurity more clear and manageable. It simulates real attacks to show where my defenses are weak. I get specific, easy-to-follow suggestions to fix issues. The updates are fast and keep up with new threats. It helps me feel more confident that my systems are protected. There number of features we are frequently use for red team and purple team exercises. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

platform could offer more flexibility in customizing reports and dashboards. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus Security helps me solve the problem of proving whether my clients’ security controls are actually working. It lets me run real-world attack simulations and quickly see which defenses are effective and which need improvement. This is especially useful when analyzing environments for different clients, as I can tailor my recommendations based on their exact security posture. The platform also gives clear, actionable insights that I can share directly with clients, making my reports more impactful and easier to understand. As a partner, it helps me deliver faster, smarter, and more value-driven security assessments. Review collected by and hosted on G2.com.

Zafer K.

Senior Information Security Specialist

Enterprise (> 1000 emp.)

8/11/2025

"A great product experience"

5/5

What do you like best about Picus Security?

The latest version of Picus Security is a game-changer for continuous security validation. Its cutting-edge Breach and Attack Simulation capabilities now cover an even broader spectrum of real-world threats, ensuring our defenses are tested against the most current and sophisticated attack techniques. The constantly updated threat library, powered by global threat intelligence, gives us unparalleled protection by simulating emerging threats almost as soon as they are discovered.

The user interface has become even more intuitive in the latest release, with clearer dashboards, enhanced filtering, and improved visualizations that make analyzing vulnerabilities faster and more efficient. The automation features save countless hours by streamlining validation cycles, generating prioritized remediation plans, and integrating seamlessly with our SIEM, SOAR, and EDR solutions.

One of the most impressive aspects is how Picus transforms security validation from a reactive to a proactive process, empowering us to strengthen our defenses before attackers have a chance to exploit weaknesses. The platform’s detailed, actionable reports are invaluable for both technical teams and executives, translating complex attack data into clear business risk insights. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

There is very little to dislike about the latest version. The platform is extremely feature-rich, which means new users might need some time to fully explore its capabilities. However, the learning curve is well worth it, as the benefits in visibility, automation, and security posture improvement far outweigh the initial setup time. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus Security addresses one of the most critical challenges in cybersecurity: the inability to continuously validate and measure the effectiveness of security controls against evolving threats. Traditionally, organizations had to rely on periodic penetration tests or incident-driven responses, which left long gaps where vulnerabilities could go undetected.

With Picus, we can simulate real-world cyberattacks on an ongoing basis, identifying misconfigurations, outdated rules, and ineffective defenses before attackers do. This proactive approach not only closes security gaps faster but also optimizes the performance of our existing security investments by ensuring they work as intended.

The platform’s detailed remediation guidance accelerates our response time, while its automation reduces the operational burden on our security team. This has resulted in a measurable improvement in our security posture, reduced risk of breaches, and increased confidence from stakeholders and clients. Review collected by and hosted on G2.com.