AttackIQ Platform is a continuous threat exposure management platform for modeling adversary behavior, finding attack paths, validating security…
Alternatives to Cymrix
MITRE Caldera is an open-source cybersecurity framework for automating adversary emulation and routine security assessments.
- 4

OpenAEV
OpenAEV is an Adversarial Exposure Validation platform for cybersecurity and crisis-management teams.
Free planWebAPILinuxSelf-hosted6.3Free plan - 5
SafeBreach Validate
WebAPILinuxmacOS6.3 - 6
Atomic Red Team
Atomic Red Team is a free library of security tests for checking whether security controls provide visibility and detect adversary behaviors.
Free planAPILinuxmacOSWindows6.2Free plan - 7
Infection Monkey
Infection Monkey is an open-source breach and attack simulation tool for organizations assessing resilience to perimeter breaches and infection of internal servers.
Free planWebLinuxSelf-hostedWindows6.2Free plan - 8

Picus Security Platform
Picus Security Platform helps security teams validate attack surfaces, exposures, and security controls so they can prioritize risks and remediation.
WebAPILinuxmacOS6.1 - 9

SCYTHE
SCYTHE is a continuous Adversarial Exposure Validation platform for enterprise security teams.
WebLinuxSelf-hostedWindows6.1 - 10
Stratus Red Team
Stratus Red Team is a self-contained Go binary for running focused offensive techniques against live cloud environments to validate detections.
APILinuxmacOSSelf-hosted6.0 - 11

Cymulate Platform
Cymulate Platform continuously validates security controls against real-world threats and provides guidance for improving defenses.
Web5.8 - 12

FourCore ATTACK
FourCore ATTACK is a platform for simulating cyberattacks to check how an organization’s security controls respond.
WebLinuxSelf-hostedWindows5.8 - 13
Skyhawk Security BAS
Skyhawk Security BAS is a paid, cloud-based Breach and Attack Simulation platform for cloud security teams and MSSPs.
WebAPI5.8 - 14
Valitrix BAS Platform
Valitrix BAS Platform is a breach and attack simulation platform that continuously checks security controls against adversary techniques mapped to MITRE ATT&CK.
APILinuxmacOSWindows5.8 - 15

Pentera Platform
Pentera Platform validates security controls by emulating attacks, helping teams prioritize demonstrated exposure and support remediation.
WebAPILinuxSelf-hosted5.7 - 16

BlackNoise BAS
WebSelf-hosted5.3 - 17
PurpleSharp
PurpleSharp is a free, open-source C# tool for simulating adversary activity in Windows Active Directory environments.
Self-hostedWindows5.2 - 18
ShadowBreach
ShadowBreach is an AI-enabled cyber operations platform for planning, carrying out, and documenting attack activity within a local environment.
5.2 - 19
Keysight Threat Simulator
WebLinux4.9