The Picus Security Validation Platform
Picus SecurityReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
218 reviews
from
and
External reviews are not included in the AWS star rating for the product.
A powerful solution for customers
What do you like best about the product?
1. Easy to use
2. Intuitive interface
3. Valuable results
2. Intuitive interface
3. Valuable results
What do you dislike about the product?
1. Need integrate more vendors
2. Should have more clip training
2. Should have more clip training
What problems is the product solving and how is that benefiting you?
Picus help our customers to validate their security controls
Cyber Security Team Leader
What do you like best about the product?
Based on available information, what people like most about Picus Security is its continuous security validation and breach and attack simulation (BAS) capabilities. It allows organizations to constantly test their defenses against real-world threats, providing actionable insights to strengthen their security posture.
What do you dislike about the product?
Sure, here are some common areas of dissatisfaction with Picus Security, in English and concise:
Users sometimes find initial setup complex and the UI overwhelming. There are also occasional reports of agent reliability issues and a desire for more native integrations for remediation workflows.
Users sometimes find initial setup complex and the UI overwhelming. There are also occasional reports of agent reliability issues and a desire for more native integrations for remediation workflows.
What problems is the product solving and how is that benefiting you?
Picus Security addresses the problem of uncertainty in cybersecurity effectiveness by continuously simulating real-world attacks. This benefits organizations by proactively identifying and fixing security gaps, optimizing existing investments, and providing clear insights into their actual risk posture.
Continuous Security Validation
What do you like best about the product?
Picus constantly tests whether your security tools (like firewalls, EDRs, SIEMs) are working as expected using real-world attack simulations. You can identify misconfigurations or blind spots before attackers exploit them.
What do you dislike about the product?
Picus focuses on emulated attacks, not live traffic or zero-day threat detection. It doesn’t replace real-time detection or incident response tools. You still need SIEM, EDR, and threat intel feeds for active threats.
What problems is the product solving and how is that benefiting you?
Firewalls, EDRs, and SIEMs are often misconfigured or outdated—leaving blind spots. Continuously tests these tools using real-world attack simulations to ensure they actually detect or block threats. You know which tools are failing and how to fix them before a real attack happens.
Best Product We Sell
What do you like best about the product?
APV and DRV is solving a lot of our problems
What do you dislike about the product?
CSV solutions needs improvement but i heard that they are developing it soon.
What problems is the product solving and how is that benefiting you?
We are a reseller of Picus and it's always a good door opener for further discussions. Showing and resolving issues in a single dashboard.
Amazing product
What do you like best about the product?
it is a comprehensive tool to detect vulnerabilities in applications
What do you dislike about the product?
literally nothing, every aspect meets our requirement
What problems is the product solving and how is that benefiting you?
the attack and victim scenarios in an isolated network helped us deep dive into vulnerabilities and focus on specific points to fix.
Highly Recommended for all IT Leaders
What do you like best about the product?
great solution overall, SCV,DRV,APV and EXM is the one i use. Perfect for finding gaps and vuln. management
What do you dislike about the product?
It takes a little time to adjust to the variety of tests but it's nothing a mid level pro can't handle.
What problems is the product solving and how is that benefiting you?
Automated the tests we do quarterly, now we can do it daily. Remediations are also very useful.
About the Picus
What do you like best about the product?
The Picus, assessing the security score of organizations and providing them with improvement recommendations.
What do you dislike about the product?
The Picus' reporting capabilities need to be improved.
What problems is the product solving and how is that benefiting you?
Picus addresses gaps in organisations' defences by continuously simulating real-world cyberattacks in order to validate their prevention, detection and response controls.
Best EXM Platform so far
What do you like best about the product?
It's the best platform among all we tested and it's a pioneer in the market. Our users are getting great value from it. Easy to deploy and use.
What do you dislike about the product?
Nothing i can think of right now. There is always room for improvement.
What problems is the product solving and how is that benefiting you?
EDR mitigations as custom rules
Problems with firewall stability.
Problems with firewall stability.
Picus is a excellent platform that covers a wide range of attack and highly accurate simulations.
What do you like best about the product?
The platform is well-developed, offering a highly accurate attack simulations across many modules. We really like the clear, traceable actions and detailed simulation steps, which provide a good insights. The vendor-specific mitigation recommendations are really helpful. Our customers' feedback from POCs has been positive, consistently highlighting their satisfaction with the platform and its ease of use including the Integration.
What do you dislike about the product?
A minor point mentioned is that sometime we are not always informed when documentation in the knowledge base is updated. So, It is hard for us to know wheter the newer Document is update and fix the issue or not.
What problems is the product solving and how is that benefiting you?
Customer they've encountered issues where their existing security tools, while generally good, sometimes don't seem to operate at their full potential. And they also want to know if their organization can effectively handle new and emerging threats or not. Using Picus helps them answer these questions exceptionally well. Picus allow us to simulate the emerging threat, and deep drive in to which technique that the attack may uses to take control of the machine. Each phase of the simulation is very clear of how each action happen on the endpoint machine.
From Security Theater to Operational Cyber Truth – Picus Makes the Difference
What do you like best about the product?
What makes Picus Security stand out is its ability to continuously validate an organization's cyber defense posture in real-world conditions. The platform provides a proactive and measurable approach to threat simulation, helping us to identify configuration gaps, evaluate detection capabilities, and prioritize mitigation actions across both IT and OT environments.
Picus seamlessly integrates with our existing Cyber ecosystem, providing actionable insights rather than generic scoring. Its Attack Path Validation and Security Control Validation modules have drastically improved our CYBER FUSION CENTER -CROCvisibility into exposure and control effectiveness.
Moreover, the dashboard is intuitive and the ability to generate executive-level reports that translate technical risks into business impact is a major plus when communicating with leadership and board-level stakeholders.
Picus seamlessly integrates with our existing Cyber ecosystem, providing actionable insights rather than generic scoring. Its Attack Path Validation and Security Control Validation modules have drastically improved our CYBER FUSION CENTER -CROCvisibility into exposure and control effectiveness.
Moreover, the dashboard is intuitive and the ability to generate executive-level reports that translate technical risks into business impact is a major plus when communicating with leadership and board-level stakeholders.
What do you dislike about the product?
While the platform offers great technical depth, there is room for improvement in the customization of reporting templates and API flexibility for large-scale automation use cases.
That said, the Picus team is highly responsive, and we have already seen improvements in these areas through roadmap updates.
That said, the Picus team is highly responsive, and we have already seen improvements in these areas through roadmap updates.
What problems is the product solving and how is that benefiting you?
Picus Security is solving a fundamental challenge: how to continuously validate the effectiveness of our security controls and translate technical risk into actionable business insights.
Traditional cybersecurity programs often rely on static assessments and assumptions. Picus shifts this paradigm by enabling continuous security validation through automated Breach and Attack Simulations (BAS) and Attack Path Validation. This approach ensures that our defenses are not only in place but actually working — 24/7.
Thanks to Picus, we’ve been able to:
Quantify exposure and security gaps across our environment .
Prioritize remediation actions based on real threat scenarios rather than theoretical CVEs.
Optimize our detection rules and SIEM content, reducing false positives and improving mean time to detect/respond.
Justify investments in security controls with real data, which has strengthened our communication with business stakeholders and supported more informed budget allocation.
The strategic benefit is clear: Picus helps move our cybersecurity from a reactive to an antifragile, intelligence-driven posture — improving both operational readiness and executive confidence in our cyber risk management program.
Traditional cybersecurity programs often rely on static assessments and assumptions. Picus shifts this paradigm by enabling continuous security validation through automated Breach and Attack Simulations (BAS) and Attack Path Validation. This approach ensures that our defenses are not only in place but actually working — 24/7.
Thanks to Picus, we’ve been able to:
Quantify exposure and security gaps across our environment .
Prioritize remediation actions based on real threat scenarios rather than theoretical CVEs.
Optimize our detection rules and SIEM content, reducing false positives and improving mean time to detect/respond.
Justify investments in security controls with real data, which has strengthened our communication with business stakeholders and supported more informed budget allocation.
The strategic benefit is clear: Picus helps move our cybersecurity from a reactive to an antifragile, intelligence-driven posture — improving both operational readiness and executive confidence in our cyber risk management program.
showing 131 - 140