17.9
AttackIQ Platform is a continuous threat exposure management platform for modeling adversary behavior, finding attack paths, validating security…
Free planWebAPILinux
Alternatives to Infection Monkey
Infection Monkey focuses on breach and attack simulation inside networks. Its agent scans and simulates attack techniques, while the Monkey Island server provides a web interface for managing the exercise. It maps visible machines, accessible services, and potential propagation routes, then reports security issues its agents discover or exploit. Its free, open-source model supports on-premises environments, containers, and public and private clouds, with plugins for…
26.5
Free planWeb
36.3
MITRE Caldera is an open-source cybersecurity framework for automating adversary emulation and routine security assessments.
Free planWebAPILinux
- 4
OpenAEV
OpenAEV is an Adversarial Exposure Validation platform for cybersecurity and crisis-management teams.
Free planWebAPILinuxSelf-hosted6.3Free plan - 5
SafeBreach Validate
WebAPILinuxmacOS6.3 - 6
Atomic Red Team
Atomic Red Team is a free library of security tests for checking whether security controls provide visibility and detect adversary behaviors.
Free planAPILinuxmacOSWindows6.2Free plan - 7
Picus Security Platform
Picus Security Platform helps security teams validate attack surfaces, exposures, and security controls so they can prioritize risks and remediation.
WebAPILinuxmacOS6.1 - 8
SCYTHE
SCYTHE is a continuous Adversarial Exposure Validation platform for enterprise security teams.
WebLinuxSelf-hostedWindows6.1 - 9
Stratus Red Team
Stratus Red Team is a self-contained Go binary for running focused offensive techniques against live cloud environments to validate detections.
APILinuxmacOSSelf-hosted6.0 - 10
Cymulate Platform
Cymulate Platform continuously validates security controls against real-world threats and provides guidance for improving defenses.
Web5.8 - 11
FourCore ATTACK
FourCore ATTACK is a platform for simulating cyberattacks to check how an organization’s security controls respond.
WebLinuxSelf-hostedWindows5.8 - 12
Skyhawk Security BAS
Skyhawk Security BAS is a paid, cloud-based Breach and Attack Simulation platform for cloud security teams and MSSPs.
WebAPI5.8 - 13
Valitrix BAS Platform
Valitrix BAS Platform is a breach and attack simulation platform that continuously checks security controls against adversary techniques mapped to MITRE ATT&CK.
APILinuxmacOSWindows5.8 - 14
Pentera Platform
Pentera Platform validates security controls by emulating attacks, helping teams prioritize demonstrated exposure and support remediation.
WebAPILinuxSelf-hosted5.7 - 15
Cymrix
Cymrix is a cloud-based breach and attack simulation platform for assessing an organization’s cyber resilience.
5.4 - 16
BlackNoise BAS
WebSelf-hosted5.3 - 17
PurpleSharp
PurpleSharp is a free, open-source C# tool for simulating adversary activity in Windows Active Directory environments.
Self-hostedWindows5.2 - 18
ShadowBreach
ShadowBreach is an AI-enabled cyber operations platform for planning, carrying out, and documenting attack activity within a local environment.
5.2 - 19
Keysight Threat Simulator
WebLinux4.9