With its products, Picus Security enables us and our clients to objectively test cybersecurity systems and maximize their effectiveness. It also allows us to assess the level of security we have achieved and to justify past and future investments. Review collected by and hosted on G2.com.

Any solution can be improved, and Picus Security’s products are no exception. However, in recent years, the vendor has successfully enhanced the capabilities of its products and services, promptly addressing the ever-changing needs of the cybersecurity landscape. Review collected by and hosted on G2.com.

Continuous, Automated Validation of Security Controls: Move beyond periodic snapshots to real-time, ongoing defense testing.

Actionable Remediation Guidance: Get precise, practical advice on how to fix identified security gaps.

Extensive & Up-to-Date Threat Library: Simulate the latest real-world attacks, aligned with MITRE ATT&CK.

Validate Security ROI: Prove the effectiveness of your existing security investments with concrete data.

Boost Team Efficiency: Automate testing to free up your security team for more strategic tasks. Review collected by and hosted on G2.com.

I believe licensing can be more flexible. Review collected by and hosted on G2.com.

The best thing about Picus is how it takes care of automated scans while keeping everything visible. Even if we overlook or forget a change in our security setup, Picus is quick to spot it and guide us to improve our defenses. Review collected by and hosted on G2.com.

Sometimes, running certain scans or tests requires adding exceptions. Getting past 'Not Tested' statuses often depends on the involvement of knowledgeable system administrators who understand the environment and give the necessary support. Review collected by and hosted on G2.com.

Be prepared for hundred thousands threat simulation Review collected by and hosted on G2.com.

Most of the recommendations for remediation are too generic to be applied in practice. Review collected by and hosted on G2.com.

I really like the continuous and realistic attack simulations. They provide a clear picture of our current security posture and help us prioritize fixes. The dashboard is intuitive, and the reports are easy to understand, even for non-technical stakeholders. Review collected by and hosted on G2.com.

There’s not much to dislike, but I would like to see more customization options for reporting and a wider range of integrations with third-party security tools. Review collected by and hosted on G2.com.

Picus Security excels in continuous security validation by simulating real-world attack scenarios in a controlled and automated way. This allows organizations to proactively identify vulnerabilities and gaps in defenses before attackers can exploit them. I particularly appreciate:

Actionable insights: It doesn’t just highlight weaknesses; it provides clear guidance on how to remediate them.

Integration flexibility: Works well with existing security tools (SIEM, EDR, firewalls) to enhance overall security posture. Review collected by and hosted on G2.com.

While Picus Security is powerful, there are a few areas that could be improved:

Learning curve: New users may find the platform’s interface and features slightly complex at first, especially without prior experience in security validation.

Resource requirements: Running continuous attack simulations can consume noticeable system and network resources, which may need planning in larger environments. Review collected by and hosted on G2.com.

The user interface is very intuitive and easy to use. In addition, the Security Control Validation module is constantly updated with the latest TTPs that are observed in the wild.

The post sales support is efficient as well, whereby there is quarterly update on the current product roadmap and follow up on any issue that the user encounter Review collected by and hosted on G2.com.

There are some TTPs that are available in open source tool (e.g atomic red team) but not widely available in Picus SCV. Review collected by and hosted on G2.com.

Since we started using Picus Security, we've shifted from a passive monitoring approach to a proactive one. The platform's mitre attack-based attack simulations allow us to clearly see how prepared our environment is against real-world threats. It's been particularly useful in assessing the effectiveness of our existing security tools (like SIEM, EDR, IPS), identifying gaps, and taking action quickly.

The user interface is intuitive and easy to navigate—even for team members who aren't deeply technical. Review collected by and hosted on G2.com.

The reporting can sometimes be overly detailed, which makes it slightly challenging when preparing high-level summaries for management. Additionally, the integration of newly discovered threats into the platform can occasionally lag behind a bit. Review collected by and hosted on G2.com.

It's easy to deploy and quick support. Picus Security is how it makes cybersecurity more clear and manageable. It simulates real attacks to show where my defenses are weak. I get specific, easy-to-follow suggestions to fix issues. The updates are fast and keep up with new threats. It helps me feel more confident that my systems are protected. There number of features we are frequently use for red team and purple team exercises. Review collected by and hosted on G2.com.

platform could offer more flexibility in customizing reports and dashboards. Review collected by and hosted on G2.com.

The latest version of Picus Security is a game-changer for continuous security validation. Its cutting-edge Breach and Attack Simulation capabilities now cover an even broader spectrum of real-world threats, ensuring our defenses are tested against the most current and sophisticated attack techniques. The constantly updated threat library, powered by global threat intelligence, gives us unparalleled protection by simulating emerging threats almost as soon as they are discovered.

The user interface has become even more intuitive in the latest release, with clearer dashboards, enhanced filtering, and improved visualizations that make analyzing vulnerabilities faster and more efficient. The automation features save countless hours by streamlining validation cycles, generating prioritized remediation plans, and integrating seamlessly with our SIEM, SOAR, and EDR solutions.

One of the most impressive aspects is how Picus transforms security validation from a reactive to a proactive process, empowering us to strengthen our defenses before attackers have a chance to exploit weaknesses. The platform’s detailed, actionable reports are invaluable for both technical teams and executives, translating complex attack data into clear business risk insights. Review collected by and hosted on G2.com.

There is very little to dislike about the latest version. The platform is extremely feature-rich, which means new users might need some time to fully explore its capabilities. However, the learning curve is well worth it, as the benefits in visibility, automation, and security posture improvement far outweigh the initial setup time. Review collected by and hosted on G2.com.