17.9
AttackIQ Platform is a continuous threat exposure management platform for modeling adversary behavior, finding attack paths, validating security…
Free planWebAPILinux
Alternatives to MITRE Caldera
MITRE Caldera gives security teams a free, open-source framework for automating adversary emulation and routine cybersecurity assessments. Its asynchronous command-and-control server, REST API, web interface, and plugins support autonomous exercises, detection and response testing, manual red-team engagements, and red-versus-blue research. ATT&CK mapping, adversary profiles, the cross-platform Sandcat agent, Atomic Red Team imports, OT protocol abilities, reporting, and…
26.5
Free planWeb
36.3
OpenAEV is an Adversarial Exposure Validation platform for cybersecurity and crisis-management teams.
Free planWebAPILinux
- 4
SafeBreach Validate
WebAPILinuxmacOS6.3 - 5
Atomic Red Team
Atomic Red Team is a free library of security tests for checking whether security controls provide visibility and detect adversary behaviors.
Free planAPILinuxmacOSWindows6.2Free plan - 6
Infection Monkey
Infection Monkey is an open-source breach and attack simulation tool for organizations assessing resilience to perimeter breaches and infection of internal servers.
Free planWebLinuxSelf-hostedWindows6.2Free plan - 7
Picus Security Platform
Picus Security Platform helps security teams validate attack surfaces, exposures, and security controls so they can prioritize risks and remediation.
WebAPILinuxmacOS6.1 - 8
SCYTHE
SCYTHE is a continuous Adversarial Exposure Validation platform for enterprise security teams.
WebLinuxSelf-hostedWindows6.1 - 9
Stratus Red Team
Stratus Red Team is a self-contained Go binary for running focused offensive techniques against live cloud environments to validate detections.
APILinuxmacOSSelf-hosted6.0 - 10
Cymulate Platform
Cymulate Platform continuously validates security controls against real-world threats and provides guidance for improving defenses.
Web5.8 - 11
FourCore ATTACK
FourCore ATTACK is a platform for simulating cyberattacks to check how an organization’s security controls respond.
WebLinuxSelf-hostedWindows5.8 - 12
Skyhawk Security BAS
Skyhawk Security BAS is a paid, cloud-based Breach and Attack Simulation platform for cloud security teams and MSSPs.
WebAPI5.8 - 13
Valitrix BAS Platform
Valitrix BAS Platform is a breach and attack simulation platform that continuously checks security controls against adversary techniques mapped to MITRE ATT&CK.
APILinuxmacOSWindows5.8 - 14
Pentera Platform
Pentera Platform validates security controls by emulating attacks, helping teams prioritize demonstrated exposure and support remediation.
WebAPILinuxSelf-hosted5.7 - 15
Cymrix
Cymrix is a cloud-based breach and attack simulation platform for assessing an organization’s cyber resilience.
5.4 - 16
BlackNoise BAS
WebSelf-hosted5.3 - 17
PurpleSharp
PurpleSharp is a free, open-source C# tool for simulating adversary activity in Windows Active Directory environments.
Self-hostedWindows5.2 - 18
ShadowBreach
ShadowBreach is an AI-enabled cyber operations platform for planning, carrying out, and documenting attack activity within a local environment.
5.2 - 19
Keysight Threat Simulator
WebLinux4.9