G2

Vinay S.

Cybersecurity Engineer

Consulting

Enterprise (> 1000 emp.)

Originally submitted 7/28/2025

"Raising the Bar in Threat Simulation – A Review of Picus Security"

5/5

What do you like best about Picus Security?

The ease of deployment, seamless integration with existing security controls, and the flexibility to schedule simulations are some of the key features that make Picus easy to use and manage.

The technical team's exceptional support further enhances the deployment experience, particularly when addressing integration challenges and troubleshooting issues within customer environments. The flexible pricing model is another advantage.

Alongside these core capabilities, Picus has introduced several valuable platform enhancements:

1. AI Security Validation

The AI Security Validation capability enables organizations to assess and validate the security posture of their AI agents, helping them identify potential security gaps and strengthen their AI security controls.

2. AI Threat Builder

The AI Threat Builder is a particularly valuable addition. It enables organizations to create and simulate threats even before they become available in the platform's threat library.

With the rapidly evolving threat landscape, particularly following developments such as Project Mythos, the security conversation is shifting. The question is no longer limited to how many vulnerabilities an organization has identified or how quickly it can patch them. The more important question is: How resilient are our systems against emerging threats and newly discovered vulnerabilities?

This is where AI Threat Builder adds significant value. It helps organizations quickly create and simulate threat scenarios, including those associated with newly emerging vulnerabilities, without having to wait for the corresponding threat to be added to the existing library.

3. Compare Run Reports

The Compare Run Reports feature is another valuable enhancement. It allows organizations to execute the same threat simulations across different assessment cycles and compare the results to understand how their security posture has improved.

This provides visibility into which threats were successfully mitigated, which remain unblocked, and how security controls have improved over time. Previously, this comparison involved considerable manual effort. The new capability makes the process significantly more streamlined. Review collected by and hosted on G2.com.

What do you dislike about Picus Security?

The Learning Portal is another area where some improvements could enhance the overall customer experience.

Currently, the portal provides documentation and reference materials that help customers understand the platform, navigate its features, and perform various activities. However, relying primarily on written documentation can sometimes make it difficult for users to understand.

Introducing video-based tutorials and practical demonstrations would make the learning experience more interactive and effective. Review collected by and hosted on G2.com.

What problems is Picus Security solving and how is that benefiting you?

Picus is helping organization for getting better visibility into their security controls and strengthen detection analytics with the help of BAS. It's APV module helps to identify internal security gaps in Active Directory. It helps identify what vulnerability of an attack surface can be exploited and need to be patched first. With the help to SCV and ASV module this visibility can be gained. Review collected by and hosted on G2.com.