Cymulate Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines adversarial exposure validation (AEV) as technologies that deliver consistent, continuous and automated evidence of the feasibility of an attack. These technologies confirm how potential attack techniques would successfully exploit an organization and circumvent prevention and detection security controls. They achieve this by performing attack scenarios and modeling or measuring the outcome to prove the existence and exploitability of exposures. AEV is generally delivered as a SaaS solution with or without on-premises agents. AEV as a market category replaces breach and attack simulation (BAS) and automated penetration testing and red teaming technology from the 2023 Gartner Hype Cycle (Hype Cycle for Security Operations, 2023). AEV technologies provide automated execution of both simplified and/or extensible attack scenarios. Results data from an executed attack scenario is used for various outcomes, such as:
validating a theoretical exposure as real,
automating frequent controls testing,
improving preventive security posture
or improving detection and response capabilities.

Active

Find the top Adversarial Exposure Validation with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Adversarial Exposure Validation

Cymulate Platform

Cymulate

HEAD OF INFORMATION SECURITY

Cymulate has enabled us to maintain a strong security posture. We can easily track our score changes even if we apply a new change whether it is planned, unplanned, or accidental which gives us a real peace of mind. Hopper module helps us track significant problems in our networks where human error is more likely to occur. We appreciate how it visualizes our security posture from the outside in, covering phases like initial foothold, execution, C&C, network propogation and action on objectives. User management for our subsidiaries is perfect; as the parent company we can view our subsidiaries' scores while they can't see ours.

50M - 250M USD

250M - 500M USD

<50M USD

500M - 1B USD

1B - 3B USD

3B - 10B USD

10B - 30B USD

30B + USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

MANAGER, IT SECURITY AND RISK MANAGEMENT

Overall understanding of how an attacker could/would breach our systems was useful but understanding the "how" of how it was done was difficult to understand and interpret.  Getting to clear results was difficult.

IT Security & Risk Management Associate

Cymulate has been an exceptional platform for automated security testing and security posture assessment. The solution is frequently updated with new threat intelligence feeds from Cymulate's intelligence services, which allows us to continuously validate our environment against current attack techniques and threat scenarios.
Additionally, the Exposure Management plataform has been very useful for correlating vulnerabilities and threats with real attack simulations. In practice this helps us better understand our actual risk exposure and prioritize remediation efforts based on validated attack scenarios and test results, rather than relying solely on theoretical vulnerability scores.
Overall, based on our experience, Cymulate has provided greater visibility into security gaps and a structured way to continuously improve our security posture through realistic testing and risk-based prioritization.


Picus Security

AttackIQ

SafeBreach

XM Cyber

Fortinet

Pentera

Other...

Rapid7

Keysight

Aquila I

FourCore

Fortra

Cisco Systems

PortSwigger

Google (Mandiant)

McAfee

Cobalt

Horizon3.ai

NetSPI

Synack

Kroll

Ridge Security

Cytomate

Amazon Web Services (AWS)

Microsoft

Verizon

Acronis

WatchGuard

Cymulate’s cybersecurity risk validation and exposure management solution provides security professionals with the tools to continuously challenge, validate, and optimize their on-premises and cloud security postures. 

The platform offers end-to-end visualization across the MITRE ATT&CK framework, enabling a clear view of potential threats and vulnerabilities. With automated, expert, and threat intelligence-driven risk assessments, Cymulate is simple to deploy and accessible to organizations at any level of cybersecurity maturity. 

In addition, it features an open framework that supports the automation of red and purple teaming exercises, allowing security teams to generate tailored penetration scenarios and advanced attack campaigns that align with their unique environments and security policies. By leveraging these capabilities, organizations can proactively identify and address security gaps, ensuring a stronger, more resilient cybersecurity posture.

Designed for companies that want to manage their security posture against the evolving threat landscape. Cymulate's SaaS-based platform deploys within an hour, enabling security professionals to continuously challenge, validate and optimize their cybersecurity posture end-to-end across the MITRE ATT&CK¬Æ framework.  

The platform provides threat intelligence-led risk assessments that are simple to deploy out-of-the-box, and for all maturity levels. It also provides an open framework to create and automate red and purple teaming by generating penetration scenarios and advanced attack campaigns tailored to their unique environments and security policies. 

Cymulate allows professionals to manage, know and control their dynamic environment.


The Cymulate cybersecurity risk validation and exposure management solution provide security professionals with the ability to continuously challenge, validate and optimize their on-premises and cloud cyber-security posture with end-to-end visualization across the MITRE ATT&CK framework. The platform provides automated, expert, and threat intelligence-led risk assessments that are simple to deploy and easy for organizations of all cybersecurity maturity levels to use. It also provides an open framework for creating and automating red and purple teaming exercises by generating tailored penetration scenarios and advanced attack campaigns for their unique environments and security policies. 

Reviews

Ratings Overview

Overall experience with

Favorable Review

Realistic Attack Simulations Strengthen Security Validation and Risk-Based Remediation

Critical Review

Difficulty Interpreting Breach Methods and Inadequate Support Impact User Experience

Likes and dislikes about

likes

dislikes