The Picus Security Validation Platform

What do you like best about the product?

We have been using Picus BAS solution for some time now and I have to admit it is very useful to manage, navigate and work in our daily needs. It has seamlessly integrated with out infrastructure and we get results with all necessary details from the simulations. Implementing Picus in our infrastructure was very easy as we had all necessary documentation and support from their side. Picus has provided us with very helpful information as the results from the simulations regarding detection and coverage assessments and also it was a huge aid for the threat intelligence team in regards of the threat landscape development and it has become a part of our daily operations that we frequently use. In addition, Picus has an excellent customer support where the team is always more than willing to help with any issues we faced so far. Both in technical terms and finding the solution of the issue, but also resolving the issue in a timely manner. In general I would say Picus Security is a very customer oriented company that takes clients needs and requests into consideration, and constantly tries to improve the platform with features and additions to improve their products.

What do you dislike about the product?

Not much can be mentioned on "disliking" about Picus. There were some cases where we faced some issues regarding the integration that was failing and didn't provide the needed results (although this cannot be blamed entirely on Picus, since the integrations are 3rd party, and both ends needs to work). Another point to mention, were times when we discovered some minor bugs that affected the operational part of the platform. Finally, in some occasions we noticed Picus was updating their documentation in their knowledge base and we weren't informed. That resulted in affecting our experience in our operations since some requirements were changing. Despite these, in all cases, the support team was really quick to reply and resolve the issue providing excellent technical support and communicating until the issue was resolved.

What problems is the product solving and how is that benefiting you?

Breach and attack simulations, managing our threat landscape and attack surface, and assisting us in our use case development process.

What do you like best about the product?

Picus offers a large selection of preconfigured threats and templates that can easily be executed on agents.
It also provides several integrations to detect SIEM system executions and alerts.
They are open to feature requests and respond promptly.

What do you dislike about the product?

Sometimes, it still contains some bugs, but these will be corrected quickly by means of support requests.

What problems is the product solving and how is that benefiting you?

Picus helps to automatically test our security controls.

What do you like best about the product?

Cutting-edge software, keeping up with the latest threat, with professional staff always present and ease to use and to integration.

What do you dislike about the product?

has no particular weaknesses, respect all my expectations

What problems is the product solving and how is that benefiting you?

Helped us choose the best security software, and keep our systems up to date with new threats.

What do you like best about the product?

Picus stands out as a mature, automated, thorough, and practical BAS solution.
It delivers continuous validation, integrates neatly with a lot of tools, and offers clear guidance to improve defenses using backed by an active threat library.

The solution is always improving and investing with a lot of services to cover all business needs

What do you dislike about the product?

To improve:
- remediation prioritization
- email modules to evaluate email security postures
- reporting and personalization which are now limited

What problems is the product solving and how is that benefiting you?

Continuous evaluate security posture, identify threats and weak points giving a score to cybersecurity efforts to protect business.

What do you like best about the product?

Picus regularly updates its threat library with techniques mapped to MITRE ATT&CK, helping my organizations test defenses against the latest real-world threat

What do you dislike about the product?

The platform can generate a large number of suggestions for tuning controls, which might overwhelm understaffed teams without automation workflows.

What problems is the product solving and how is that benefiting you?

This highlights the importance of integrating Picus into a well-structured SecOps workflow, possibly with ticketing systems or SOAR platforms