Picus Security

“Picus is very good attack simulation tool in overall. It shows all security vulnerabilities and guides..”

“A very successful platform where we can test the accuracy of our security investments and see their scores.”

“Using Picus, we can conduct risk analysis about possible attacks for their impact on people, processes and technology layers.”

“Picus completes the task it is required to do perfect as a BAS solution. Threat database is up to date & updated frequently after a new malware or campaign.”

“It is no different from a Magician. Ever since we took Picus into our inventory, it has helped significantly to increase our maturity level.”

““What we’re looking for is testing to see how people are responding to what happens, kind of like a purple team. If there’s some alert that should have fired, did the person do what he’s supposed to do? Do people follow the incident response plan?””

““I’d say overall, we’re not in a stuck state like we were in the past. We deployed the changes and then reran it again. And it looks good.””

““We’ve already gotten past the proof of concept around deploying better protections with CrowdStrike based on Picus findings, so that’s rolling out slowly.””

““Part of the point of us getting this was to find the gaps. And this has already found a gap as far as I’m concerned. We can correct that during onboarding.””

““We did comparisons and we like your product the best of all the different vendors.””

““We’ve gone through our tabletop walkthroughs. It’s literally practice. What we needed to know was: are our controls effective, how quickly can our teams see it, and do they escalate to us?””

“The first time we did it, all the alarms went off and they were very caught off guard. We did that on purpose. We just wanted to make sure how the escalation works. They reached out within what the SLA agreement is. They passed.”

“Picus showed us which threats were genuinely exploitable in our environment rather than just flagging everything by vulnerability score. It let us focus on the right risks.”

“I see CTEM and Picus becoming an integral part of our long-term cybersecurity strategy. The benefit isn’t limited to the security team alone; it delivers real value for every IT team we work with.”

““Seeing the security score improve after every remediated vulnerability didn’t just strengthen our security posture. It significantly boosted team motivation.””

“Compared to many other products we’ve worked with, this was one of the easiest to deploy and configure.”

“It used to just be me, basically. But we’ve onboarded other users so they can start testing simulations more scoped, instead of just the ones that run on a monthly basis where we’re testing everything. They can look deeper at the logging, make sure it looks correct, and if there’s anything missed, they can take action.”

“You have a vulnerability scanner and it says we found a vulnerability we rate critical 10. But what the scanner doesn’t know is that you have a firewall in place that blocks it. Everything is siloed. Your vulnerability data is in one place, your firewall data is in another. They don’t really communicate with each other.”

“I’ve just been in here for maybe an hour, clicking around and poking at things. I’ll be honest, it seems really intuitive.”

“We had talked about that a while ago, how it was just email and it would be good if it was other stuff. So glad that got added. That’s huge.”

“Their platform is constantly evolving, and they listen to our feedback.”

“With Picus and its exposure validation approach, we are able to check the security posture of our organization and our security systems in real time, whenever we need”

“Being able, after the fact, to go and look at, okay, this is where we could have prevented this. This is what we can put in place through Picus to be able to prevent it.”

“I can deploy it, let it run, show we patched and it’s no longer exploitable.”

“It was just kind of more of a double coverage. You had a preventative control in place along with your actual patching.”