Cymulate Reviews & Product Details

Cymulate is a leading on-prem and cloud-based Security Validation and Exposure Management Platform leveraging the industry's most comprehensive and user-friendly Breach and Attack Simulation technology. We empower security teams to prioritize remediation by continuously testing and harden defenses against immediate threats from the attacker's point of view. Cymulate deploys within an hour, integrating with a vast tech alliance of security controls, from EDR, to email gateways, web gateways, SIEM, WAF and more across hybrid, on-premise, cloud and Kubernetes environments. Customers see increased prevention, detection and improvement to overall security posture from optimizing their existing defense investments end-to-end across the MITRE ATT&CK® framework. The platform provides out-of-the-box, expert, and threat intelligence-led risk assessments that are simple to deploy and use for all maturity levels, and are constantly updated. It also provides an open framework to create and automate red and purple teaming by generating penetration scenarios and advanced attack campaigns tailored to their unique environments and security policies.

Product Website

Seller

Cymulate

Discussions

Cymulate Community

Languages Supported

English

Overview by

Aviva Spotts

Value at a Glance

Averages based on real user reviews.

Time to Implement

1 month

View More Pricing Information

Cymulate Integrations

(46)

Verified by Cymulate

Carbon Black EDR

Cisco Secure Endpoints

CloudGuard

Cortex

CrowdStrike Falcon Endpoint Protection Platform

CrowdStrike Falcon Exposure Management

Cybereason Managed Detection and Response

Cynet

Devo

Elastic Security

Exabeam New-Scale Platform

Fortinet Endpoint Visibility & Control

Harmony

IBM Security QRadar Log Insights

InsightVM (Nexpose)

Jira

Kaspersky Next EDR Expert

LogRhythm SIEM

Microsoft Active Directory Certificate Services (AD CS)

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender Vulnerability Management

Palo Alto Cortex XSIAM

Panther

Qualys VM

Securonix Security Operations and Analytics Platform

SentinelOne Singularity Identity Detection & Response

ServiceNow AI Platform

ServiceNow IT Service Management

Snowflake

Sophos Endpoint

Splunk Enterprise

Splunk Enterprise Security

Splunk IT Cloud

Sumo Logic

Symantec Endpoint Detection and Response (EDR)

Tanium

Tenable Nessus

Tenable Vulnerability Management

Trellix Endpoint Security

Wiz

Zscaler Internet Access

Cymulate Media

Cymulate automatically tests and validates the security controls across your entire IT environment to expose risky threats, dangerous attack paths and unknown gaps – and tells you how to fix them – before your organization suffers the impacts of a breach. Our complete security and exposure val...

Cymulate SaaS-based platform deploys within an hour, enabling security professionals to continuously challenge, validate and optimize their cyber-security posture end-to-end across the MITRE ATT&CK® framework.

Advanced offensive security testing made easy and production-safe to validate security controls and cyber exposures.

Insights to harden controls via configuration tuning, new policy creation, and custom rule generation.

Reduce your Attack Surface

Multi-Factor Authenticator

NEW Cymulate Exposure Validation Platform

AI-Powered Exposure Validation for Complete Cybersecurity Control

Official Downloads

(3)

edit

Cymulate Exposure Validation Platform - Data Sheet

Cymulate Exposure Management Platform - Data Sheet

Cymulate Exposure Management - Prioritization & Remediation

G2 reviews are authentic and verified.

Here's how.

Verified User in Financial Services

Enterprise (> 1000 emp.)

5/14/2025

"Automated Purple Teaming simplified with Cymulate"

4.5/5

What do you like best about Cymulate?

1) Variety of comprehensive security assessments and detailed reports that provide mitigation guidance across multiple security vectors.

2) excellent customer support

3) Easy deployment Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

1) The dashboard customization and reporting system could be improved, as the overall score is calculated as an average of all assessments conducted since day one, potentially limiting more granular insights.

2) The customer support team should adopt a more proactive approach, as reported issues often take over a month to be resolved. Review collected by and hosted on G2.com.

What problems is Cymulate solving and how is that benefiting you?

Cymulate enables organizations to detect vulnerabilities across their security infrastructure, ensuring that misconfigurations and weaknesses are addressed before attackers exploit them

Its ability to simulate immediate threats, including zero-day attack scenarios, enhances security readiness by addressing emerging cyber risks proactively.

Organizations can prioritize remediation efforts based on actual exposure risks, ensuring that security resources are allocated effectively Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for the thoughtful review! We're glad Cymulate is helping you easily discover misconfigurations and security gaps and that our platform supports your detection engineering and evaluation efforts. We're sorry you experienced a delay with support. We strive to resolve tickets quickly and will make sure your feedback is shared with the team. Thanks again for your trust in Cymulate!

Verified User in Financial Services

Mid-Market (51-1000 emp.)

9/2/2025

"A new perspective of your security platform"

4.5/5

What do you like best about Cymulate?

Gives you a real insight of which attacks could breach your security platforms. It has a wide range of attack vectors and every flavor of attacks that can be tested. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

If you want to get the most our of your products, you might have to contact your software providers so that you can stop some of the breach simulations that get through. Configuration fixes will not be tailor-made to the platform being tested. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for the thoughtful review! We’re glad Cymulate is helping you gain a new perspective on your security posture with broad attack coverage and actionable insights. Your point on needing collaboration with software providers is well taken—security validation often sparks important conversations, and we’re here to help guide that process. Thanks for sharing your experience!

Ankit K.

Security Consultant

Mid-Market (51-1000 emp.)

9/6/2025

"Cymulate is a Breach and Attack simulation partner which keeps us honest with security posture"

5/5

What do you like best about Cymulate?

Cymulate is a strategic enabler of control and posture validation which helps highlight the exposures effectively. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Agent dependency should be removed for certain use cases. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thank you for recognizing how Cymulate supports continuous posture validation and helps guide security investments. We’re thrilled it provides the insight you need to assess ROI and keep defenses strong. We also appreciate your feedback on agent dependency—it’s valuable input as we continue improving deployment flexibility.

Michael R.

Ingeniero Threat hunting

Enterprise (> 1000 emp.)

9/17/2025

"Satisfied with cymulate"

4.5/5

What do you like best about Cymulate?

The update of active campaigns, which help us mitigate these potential security breaches. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

I think there are more campaigns needed focused on the financial sector like grandoreiro. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thank you for the review! We’re happy to hear Cymulate is supporting your team’s threat readiness and contributing to stronger security operations.

Your input on industry-specific content is valuable, and we appreciate you taking the time to share it. We will pass along the request.

Verified User in Banking

Enterprise (> 1000 emp.)

9/16/2025

"Very useful and easy to use"

5/5

What do you like best about Cymulate?

The interface is intuitive and easy to navigate, which allows you to start working quickly. Additionally, the automatic validations save a lot of time and provide clear visibility on security exposures. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

In general, the experience is very good. Maybe they could improve the loading times a bit for some complex analyses, but it doesn't affect the overall performance. Review collected by and hosted on G2.com.

What problems is Cymulate solving and how is that benefiting you?

One of the main problems was the lack of continuous visibility over our actual vulnerabilities. Cymulate allows us to simulate attacks safely and quickly detect gaps in our security controls. Thanks to this, we can prioritize actions and improve the overall posture without waiting for an external audit. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for sharing your experience! It’s great to hear Cymulate is helping you keep continuous visibility and quickly spot real security gaps. That’s exactly what we aim for.

We also appreciate your note about load times on complex analyses. We’ve passed that along to our product team as we continue to optimize performance.

Verified User in Banking

Enterprise (> 1000 emp.)

9/16/2025

"An excellent service"

5/5

What do you like best about Cymulate?

Mainly how user-friendly it is. Cymulate is valuable because it offers a continuous, automated, and realistic way to validate the organization's security. The platform allows simulating attacks based on MITRE ATT&CK to check if the defenses really work, and not just if they meet theoretical standards. Unlike simple vulnerability scans, it helps us prioritize exploitable risks, those that truly represent a threat in the business context. Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

For the moment, nothing bad to say or that I don't like. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks so much for the great feedback. We’re glad to hear Cymulate is helping you move from theory to real, evidence-based validation. It’s great to know the platform makes it easier to see which risks actually matter and strengthen defenses where they count.

We also love that you’re using the data to improve protection across endpoints — that’s exactly how we want Cymulate to fit into your day-to-day security work.

Ray C.

Director of Threat Research

Enterprise (> 1000 emp.)

6/3/2025

"Automated Security Validation"

5/5

What do you like best about Cymulate?

Three things:

- It was very easy to integrate into our ongoing testing framework

- It requires very little ongoing maintenance.

- It is constantly kept up-to-date with the latest threats Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

There are some areas that we wish Cymulate provided better coverage, especially in testing whether our network defenses can intercept and block command and control traffic, and testing our AI infrastructure. Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for the great feedback. We’re glad Cymulate was easy to integrate, had low maintenance, and kept up with the latest threats. It’s great to hear it’s helping you spot protection gaps quickly. We’ve also passed your comments about C2 traffic and AI infrastructure testing to our product team.

Anurag D.

Information Security Analyst

Mid-Market (51-1000 emp.)

9/4/2025

"Gaining confidence in posture with Cymulate"

5/5

What do you like best about Cymulate?

Security validation of multiple controls, prioritisation of findings in context, feasibility to run assessments anytime Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Need of flexible and customised reporting Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for taking the time to provide feedback! It’s great to hear Cymulate is helping you validate controls and prioritize findings in context—giving you greater confidence in your security posture. We appreciate the note on flexible reporting and will keep pushing to make it easier to tailor insights to your needs.

Abu H.

Security consultant

Mid-Market (51-1000 emp.)

9/6/2025

"Cymulate changed our approach from assumption to Evidence backed"

5/5

What do you like best about Cymulate?

Cymulate validates your every control easily and effectively, be it , EDR, AV, DLP, Web, Firewall and many more Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Advanced customisation needs expertise in red teaming Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thanks for sharing your experience! We’re glad Cymulate helps you validate every control—from EDR and AV to DLP, web, and firewalls—and move from assumptions to evidence-backed security.

We appreciate your note on advanced customization. Our team is always working to make deeper red–team–level options more approachable while maintaining the power and flexibility advanced users need.

It’s great to hear the automated assessments are saving your penetration testers valuable time—that’s exactly what we aim for.

Sagar V.

Security Consultant

Enterprise (> 1000 emp.)

7/17/2025

"Discovering Security Weaknesses with Cymulate's Features"

5/5

What do you like best about Cymulate?

Ease of use and implementation. Great CS support Review collected by and hosted on G2.com.

What do you dislike about Cymulate?

Support tickets takes time for resolution Review collected by and hosted on G2.com.

Response from Aviva Spotts of Cymulate

edit

Thank you for your thoughtful review. We’re glad Cymulate’s ease of use and straightforward implementation are helping you quickly identify misconfigurations, evaluate products, and strengthen detection engineering—and we’re especially pleased our customer success team has been valuable to you. We apologize for the delay you experienced and want to assure you that we always strive to respond quickly and professionally. Stay secure!