Overview
Product Information on AttackIQ Platform
Updated 8th May 2026
What is AttackIQ Platform?
AttackIQ Platform Pricing
Overall experience with AttackIQ Platform
It Security & Risk Management Associate
500M - 1B USD, Consumer GoodsFAVORABLE
“Integration With Microsoft Stacks Enhances Control Validation and Simulation Efficiency”
AttackIQ provides an outstanding Breach and Attack Simulation (BAS) environment. This allows us to continuously validate our security posture against real-wworld thereats. Operating it from both a user and administrator perspective is highly efficient, particularly when orchestrating simulations and validating controls across a mature Windows Server and endpoint infrastructure.
IT Security & Risk Management Associate
3B - 10B USD, ManufacturingCRITICAL
“Good product but still maturing”
Generally easy to use and intuitive UI navigation. The analytics graphs are a bit confusing and not real helpful. Large library of scenarios and test assessments. They are quick to publish new scenarios based on current threat intel and known attack vectors. Event correlation with SIEM is not very well tuned or customizable. Would be much nicer if you were allowed to map more specific fields to what they call their Indicators of Compromise (IOC) fields. Event correlation with our EDR events were not very concise either. Agents have a way to go yet with maturing how you can customize them. There is a config.yaml file on the agent but you can't set all agent behavior attributes in the file, which seems odd since it is there, why not allow you to put all possible values in that config file. A good product but has a ways to go yet before it is great. They have however added functionality since my initial review and appear to continue to innovate.
About Company
Company Description
AttackIQ focuses on the provision of breach and attack simulation products utilized for security control validation. The company emulates the tactics, techniques, and procedures of adversaries in line with the MITRE ATT&CK framework. Additionally, it offers insights into the performance of security systems through data-driven analysis and presents guidance for mitigation. The firm has designed a variety of products such as Enterprise, Ready!, and Flex to cater to diverse security testing needs. It provides assistance to organizations that are new to security testing and those who prefer a managed service or require help in conducting their own tests.
Company Details
Company type
Private
Year Founded
2013
Head office location
Los Altos, United States
Number of employees
51 - 200
Website
Do You Manage Peer Insights at AttackIQ?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Top AttackIQ Platform Alternatives
Peer Discussions
AttackIQ Platform Reviews and Ratings
Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
- IT Security & Risk Management Associate1B-10B USDManufacturingReview Source
Good product but still maturing
Generally easy to use and intuitive UI navigation. The analytics graphs are a bit confusing and not real helpful. Large library of scenarios and test assessments. They are quick to publish new scenarios based on current threat intel and known attack vectors. Event correlation with SIEM is not very well tuned or customizable. Would be much nicer if you were allowed to map more specific fields to what they call their Indicators of Compromise (IOC) fields. Event correlation with our EDR events were not very concise either. Agents have a way to go yet with maturing how you can customize them. There is a config.yaml file on the agent but you can't set all agent behavior attributes in the file, which seems odd since it is there, why not allow you to put all possible values in that config file. A good product but has a ways to go yet before it is great. They have however added functionality since my initial review and appear to continue to innovate. - It Security & Risk Management Associate50M-1B USDConsumer GoodsReview Source
Integration With Microsoft Stacks Enhances Control Validation and Simulation Efficiency
AttackIQ provides an outstanding Breach and Attack Simulation (BAS) environment. This allows us to continuously validate our security posture against real-wworld thereats. Operating it from both a user and administrator perspective is highly efficient, particularly when orchestrating simulations and validating controls across a mature Windows Server and endpoint infrastructure. - Manager, IT Security and Risk Management50M-1B USDConstructionReview Source
Cost-effective assessments benefit small teams, with hands-on maintenance required
We have been very happy with our experience using AttackIQ in a co-managed arrangement. The platform provides a practical and effective way to continuously validate our security controls and test our detection and response capabilities against real-world attack scenarios. With a very small security team, it is vital that we use products like this to help regularly perform both scheduled and ad hoc testing across existing and newly implemented systems, which has significantly improved our confidence is our overall security posture. The ability to safely simulate attacker techniques allows us to proactively identify gaps, validate control effectiveness, and confirm that detections are functioning as expected before issues become real-word incidents. - IT Security & Risk Management AssociateGov't/PS/EdGovernmentReview Source
Powerful platform for continual threat detection testing.
AIQ is valuable in allowing us to compare remediation, detection across Operating Systems, EDR products and Tenants. The system allows us to track threat intel and test against new rising threats, confirming we are protected and to improve detection in areas where more protection is needed. We have meetings with our AIQ representative where they continually provide helpful information to assist us. - IT Security & Risk Management Associate10B+ USDEnergy and UtilitiesReview Source
Overall - good product
The product works as expected, we have had some issues with SIEM alerts flooding the queue and activity getting alerted on due to the python files that run them, but it still gives a good indication of preventative and detection controls. The remediation controls and hunting queries are not always fit for purpose in our organisation.
...
Showing Result 1-5 of 149
Recommended Gartner Insights
This service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.
