Best Breach and Attack Simulation Software in 2026
Updated
In short: Atomic Red Team is ranked #1 of 19 as of 4 October 2026, ahead of OpenAEV and Keysight Eggplant Test. The best-ranked option with a free plan is OpenAEV.
Security teams use breach and attack simulation tools to exercise defenses with simulated attack activity. Compare attack simulation modes and included attack surfaces to understand the scope of available exercises, then consider custom attack scenarios and scenario library size. Continuous scheduling, MITRE ATT&CK mapping, and deployment model are also listed, along with free-plan availability and paid-from pricing. Atomic Red Team, OpenAEV, and Keysight Eggplant Test appear among the first entries, followed by Infection Monkey and Picus Security Platform. Weigh these capabilities against the scenarios you need to run and the way you plan to deploy the software.
19 breach and attack simulation software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
#1 Atomic Red Team Top pick · 7.1 Free plan · Free
#2 OpenAEV Runner-up · 7.1 Free plan · Free
#3 Keysight Eggplant Test Also great · 6.8 - Free plan apiLinuxmacOSWindows
- Free plan
- Yes
- Included attack surfaces
- Windows, Linux, macOS, cloud infrastructure, containers, SaaS, Azure AD, Google Workspace, Office 365, and IaaS providers
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Free planFree trial apiLinuxself-hostedWeb
- Free plan
- Yes
- Attack simulation modes
- hybrid
- Included attack surfaces
- endpoints, asset groups, people, teams, network hosts, email, phishing landing pages, SMS, phone-based social engineering, media pressure, tabletop exercises
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Free trial AndroidapiiOSLinuxmacOSWebWindows
- Attack simulation modes
- hybrid
- Included attack surfaces
- network, endpoint, email
- MITRE ATT&CK mapping
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiLinuxmacOSself-hostedWebWindows
- Free plan
- No
- Attack simulation modes
- hybrid
- Included attack surfaces
- network, endpoint, email, web application, data exfiltration, URL filtering
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Free trial Linuxself-hostedWebWindows
- Free plan
- No
- Included attack surfaces
- Windows, macOS, Linux, cloud, OT/ICS
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiLinuxmacOSWindows
- Free plan
- No
- Attack simulation modes
- agent-based
- Included attack surfaces
- endpoint, email, network, SIEM
- MITRE ATT&CK mapping
- Yes
RecognisedDocumentedFree planPlatforms - self-hostedWeb
- Attack simulation modes
- agentless
- Included attack surfaces
- network, Windows, Linux, macOS, AWS, Microsoft Azure, Google Cloud
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Free trial Web
- Attack simulation modes
- agentless
- Included attack surfaces
- Endpoint Security; Email Gateway; Web Gateway; Web Application Firewall; Phishing Awareness; Lateral Movement; Data Exfiltration; Full Kill Chain; APT; Immediate Threat Intelligence
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiWeb
- Free plan
- No
- Attack simulation modes
- agentless
- Included attack surfaces
- cloud architecture, cloud security controls, identities and permissions, vulnerabilities, attack paths, high-value cloud assets
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - WebWindowsLinux
- Free plan
- Yes
- Attack simulation modes
- agent-based
- Included attack surfaces
- local networks; internal servers; on-premises data centers; cloud-based data centers; open services
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - WebLinuxmacOS
- Attack simulation modes
- agent-based
- Included attack surfaces
- hosts, networks, endpoint security, OT environments
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - WindowsmacOSLinux
- Attack simulation modes
- agentless
- Included attack surfaces
- AWS, Azure, GCP, Kubernetes, Amazon EKS, Entra ID
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Attack simulation modes
- hybrid
- Included attack surfaces
- endpoint, network, cloud, web, application, email
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Attack simulation modes
- agentless
- Included attack surfaces
- internal networks, cloud environments, external attack surface, web applications, endpoints, servers, services, and network devices
- MITRE ATT&CK mapping
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Attack simulation modes
- agent-based
- Included attack surfaces
- endpoint, email, WAF, network segmentation, SIEM, EDR, XDR, firewall, DLP
- MITRE ATT&CK mapping
- Yes
RecognisedDocumentedFree planPlatforms - Windows
- Free plan
- Yes
- Included attack surfaces
- execution, persistence, privilege escalation, credential access, lateral movement, discovery, defense evasion
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - WebRecognisedDocumentedFree planPlatforms
-
- Free plan
- No
- Attack simulation modes
- agent-based
- Included attack surfaces
- Network; Windows Active Directory; IoT devices
- MITRE ATT&CK mapping
- Yes
- Custom attack scenarios
- Yes
RecognisedDocumentedFree planPlatforms - RecognisedDocumentedFree planPlatforms
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which breach and attack simulation software is ranked first on Everything Xiaomi?
Atomic Red Team is ranked #1 of 19 with a score of 7.1. OpenAEV is second and Keysight Eggplant Test third.
How many of these have a free plan?
2 of the 19 on this page publish a free plan on their own pricing pages.
How is this list ranked?
Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.