Overview
Product Information on AttackIQ Platform
What is AttackIQ Platform?
AttackIQ Platform Pricing
Overall experience with AttackIQ Platform
“Extensive Content Library and AI Features Enhance Threat Detection Capabilities”
“Good product but still maturing”
About Company
Company Description
AttackIQ focuses on the provision of breach and attack simulation products utilized for security control validation. The company emulates the tactics, techniques, and procedures of adversaries in line with the MITRE ATT&CK framework. Additionally, it offers insights into the performance of security systems through data-driven analysis and presents guidance for mitigation. The firm has designed a variety of products such as Enterprise, Ready!, and Flex to cater to diverse security testing needs. It provides assistance to organizations that are new to security testing and those who prefer a managed service or require help in conducting their own tests.
Company Details
Do You Manage Peer Insights at AttackIQ?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
User Sentiment About AttackIQ Platform
Reviewer Insights for: AttackIQ Platform
Deciding Factors: AttackIQ Platform Vs. Market Average
Performance of AttackIQ Platform Across Market Features
AttackIQ Platform Likes & Dislikes
The product is very closely aligned to the research of the Centre of Threat Informed Defence meaning a lot of the latest innovations in the product which is great. It also has a fantastic training academy which really aids in getting the best from the product. The depth of the content and the newly released AI features have been great.
Ease of navigation and intuitive UI. Customizable test scenarios. Agent to agent test scenarios to test zone boundary controls (requires network validation module).
The simulations are well-structured and help identify gaps in defenses without being overly disruptive to the environment
The management of the health of agents could be better as its hard to keep track of when assets have issues. Additionally, we do find that some of the content is more USA threat focussed.
Does not have an on-prem proxy host to manage agents. All agents must egress directly. It would be much nicer to have an aggregation host to control this egress. Their technology integration has some room for improvement. Getting event fields mapped properly to get high fidelity correlation is a challenge. We are still struggling with some of our field mapping in integrations.
Nothing so far
Top AttackIQ Platform Alternatives
Peer Discussions
AttackIQ Platform Reviews and Ratings
- IT Security & Risk Management Associate1B-10B USDManufacturingReview Source
Good product but still maturing
Generally easy to use and intuitive UI navigation. The analytics graphs are a bit confusing and not real helpful. Large library of scenarios and test assessments. They are quick to publish new scenarios based on current threat intel and known attack vectors. Event correlation with SIEM is not very well tuned or customizable. Would be much nicer if you were allowed to map more specific fields to what they call their Indicators of Compromise (IOC) fields. Event correlation with our EDR events were not very concise either. Agents have a way to go yet with maturing how you can customize them. There is a config.yaml file on the agent but you can't set all agent behavior attributes in the file, which seems odd since it is there, why not allow you to put all possible values in that config file. A good product but has a ways to go yet before it is great. They have however added functionality since my initial review and appear to continue to innovate. - Manager of IT Services1B-10B USDEnergy and UtilitiesReview Source
Extensive Content Library and AI Features Enhance Threat Detection Capabilities
Having used AttackIQ for over three years, we've seen the product evolve significantly, with some advanced new features on the horizon. The solution supports multiple operating systems and has enabled us to conduct large-scale testing, replacing what was previously a fully manual testing program. Deployment was straightforward, and the extensive content library has allowed us to test against the threats most relevant to our organisation. The customer support team has consistently been responsive and quick to resolve issues. Overall, we're very satisfied with both the product and service. - Manager, IT Security and Risk Management1B-10B USDIT ServicesReview Source
Structured Attack Simulations Help Identify Gaps With Minimal Disruption to Environment
Our overall experience with AttackIQ has been positive, particularly for conducting attack simulations. The platform provides a practical and effective way to validate security controls and assess detection and response capabilities in a realistic manner. The simulations are well-structured and help identify gaps in defenses without being overly disruptive to the environment. AttackIQ has proven to be a valuable tool for improving our security posture and supporting our continuous security testing efforts. - IT Associate50M-1B USDHealthcare and BiotechReview Source
Setup Process is Efficient With Clear and Comprehensive Integration Guides Provided
AttackIQ is easy to implement and use with a setup process that was not time consuming. The vendor provided clear and comprehensive integeration and setup guides which simplified deployment - IT Associate1B-10B USDBankingReview Source
Automated Security Testing Simplifies Realistic Threat Defense and Red Team Tasks
Great product to improve security posture by testing defense against realistic threats. Help red team to perform penetration testing with frameworks like MITRE ATT&CK.