
Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
20 reviews
from
External reviews are not included in the AWS star rating for the product.
A platform that helps improve our security through attack simulations.
What do you like best about the product?
What I like most about Picus is its integration with security products and its ability to provide tailored remediation suggestions based on the simulated attacks.
What do you dislike about the product?
While Picus provides detection recommendations for CrowdStrike on Windows platforms, it does not provide sufficient guidance in this area for macOS.
What problems is the product solving and how is that benefiting you?
Picus helps us detect exposed systems through various attack simulations and enables us to take preventive actions to improve our security posture.
A very well-rounded BAS solution
What do you like best about the product?
We have been using Picus BAS solution for some time now and I have to admit it is very useful to manage, navigate and work in our daily needs. It has seamlessly integrated with out infrastructure and we get results with all necessary details from the simulations. Implementing Picus in our infrastructure was very easy as we had all necessary documentation and support from their side. Picus has provided us with very helpful information as the results from the simulations regarding detection and coverage assessments and also it was a huge aid for the threat intelligence team in regards of the threat landscape development and it has become a part of our daily operations that we frequently use. In addition, Picus has an excellent customer support where the team is always more than willing to help with any issues we faced so far. Both in technical terms and finding the solution of the issue, but also resolving the issue in a timely manner. In general I would say Picus Security is a very customer oriented company that takes clients needs and requests into consideration, and constantly tries to improve the platform with features and additions to improve their products.
What do you dislike about the product?
Not much can be mentioned on "disliking" about Picus. There were some cases where we faced some issues regarding the integration that was failing and didn't provide the needed results (although this cannot be blamed entirely on Picus, since the integrations are 3rd party, and both ends needs to work). Another point to mention, were times when we discovered some minor bugs that affected the operational part of the platform. Finally, in some occasions we noticed Picus was updating their documentation in their knowledge base and we weren't informed. That resulted in affecting our experience in our operations since some requirements were changing. Despite these, in all cases, the support team was really quick to reply and resolve the issue providing excellent technical support and communicating until the issue was resolved.
What problems is the product solving and how is that benefiting you?
Breach and attack simulations, managing our threat landscape and attack surface, and assisting us in our use case development process.
Pius SCV
What do you like best about the product?
Picus offers a large selection of preconfigured threats and templates that can easily be executed on agents.
It also provides several integrations to detect SIEM system executions and alerts.
They are open to feature requests and respond promptly.
It also provides several integrations to detect SIEM system executions and alerts.
They are open to feature requests and respond promptly.
What do you dislike about the product?
Sometimes, it still contains some bugs, but these will be corrected quickly by means of support requests.
What problems is the product solving and how is that benefiting you?
Picus helps to automatically test our security controls.
Ensure your company
What do you like best about the product?
Cutting-edge software, keeping up with the latest threat, with professional staff always present and ease to use and to integration.
What do you dislike about the product?
has no particular weaknesses, respect all my expectations
What problems is the product solving and how is that benefiting you?
Helped us choose the best security software, and keep our systems up to date with new threats.
Picus BAS: Continuous Security Validation for Security Posture
What do you like best about the product?
Picus stands out as a mature, automated, thorough, and practical BAS solution.
It delivers continuous validation, integrates neatly with a lot of tools, and offers clear guidance to improve defenses using backed by an active threat library.
The solution is always improving and investing with a lot of services to cover all business needs
It delivers continuous validation, integrates neatly with a lot of tools, and offers clear guidance to improve defenses using backed by an active threat library.
The solution is always improving and investing with a lot of services to cover all business needs
What do you dislike about the product?
To improve:
- remediation prioritization
- email modules to evaluate email security postures
- reporting and personalization which are now limited
- remediation prioritization
- email modules to evaluate email security postures
- reporting and personalization which are now limited
What problems is the product solving and how is that benefiting you?
Continuous evaluate security posture, identify threats and weak points giving a score to cybersecurity efforts to protect business.
helps companies realise their security posture
What do you like best about the product?
Picus regularly updates its threat library with techniques mapped to MITRE ATT&CK, helping my organizations test defenses against the latest real-world threat
What do you dislike about the product?
The platform can generate a large number of suggestions for tuning controls, which might overwhelm understaffed teams without automation workflows.
What problems is the product solving and how is that benefiting you?
This highlights the importance of integrating Picus into a well-structured SecOps workflow, possibly with ticketing systems or SOAR platforms
Validating Cyber Defenses Using Picus BAS
What do you like best about the product?
Actionable Remediation – After simulating attacks, it provides concrete suggestions, like missing detection rules or specific signature updates, helping teams close gaps fast.
What do you dislike about the product?
Sometimes the Picus agent loses heartbeat, which can affect the reliability of scheduled simulations and posture tracking, requiring manual intervention or troubleshooting.
What problems is the product solving and how is that benefiting you?
Picus Security helps solve the problem of assuming that security controls are working as intended.
By continuously simulating real-world attacks (BAS), it validates the effectiveness of our defenses (EDR, SIEM, firewall) and identifies detection or prevention gaps before attackers can exploit them.
The benefit is clear:
We gain real-time visibility into the strengths and weaknesses of our security posture, prioritize remediation based on actual exposure, and continuously improve our detection and response capabilities with evidence-based insights.
By continuously simulating real-world attacks (BAS), it validates the effectiveness of our defenses (EDR, SIEM, firewall) and identifies detection or prevention gaps before attackers can exploit them.
The benefit is clear:
We gain real-time visibility into the strengths and weaknesses of our security posture, prioritize remediation based on actual exposure, and continuously improve our detection and response capabilities with evidence-based insights.
Continuous Security Validation Made Easy
What do you like best about the product?
Picus Security has helped us proactively validate our defenses and improve our overall security posture.
What do you dislike about the product?
Picus offers a wide range of up-to-date attack simulations aligned with MITRE ATT&CK, which helps us identify and fix security gaps efficiently. The platform is user-friendly, integrates smoothly with SIEM and EDR tools, and the reporting is clear and actionable.
What problems is the product solving and how is that benefiting you?
Picus Security helps us identify and remediate security gaps in real time by simulating real-world cyberattacks. It allows us to continuously validate the effectiveness of our security controls across endpoints, networks, and emails. This proactive approach significantly reduces our risk exposure and gives us greater confidence in our defense strategies.
An essential platform to validate and strengthen our security posture.
What do you like best about the product?
What I value most about Picus Security is its ability to realistically simulate attacks across different vectors (network, endpoint, and email), allowing us to continuously assess our defenses and prioritize actions based on real evidence. The interface is intuitive, the reports are actionable and detailed, and the technical support has been excellent.
What do you dislike about the product?
While the platform is very robust, sometimes the execution time for certain attack scenarios can be longer than expected, especially when running multiple simulations. It would also be great to have more native integrations with ticketing tools to further automate the remediation process.
What problems is the product solving and how is that benefiting you?
Picus Security helps us ensure our security controls like NGFW, EDR, WAF, and SIEM are working as expected. It allows us to identify gaps and improve detection and response across our environment.
Great BAS platform
What do you like best about the product?
The way you can validate your security controls.
Its ease of use and ease of implementation, because in some cases it can be implemented agentless.
So many vendor integrations, which is great.
Also really good customer supports, easy to reach out to them.
You can use it as much as you can (depending on your license), schedule tasks and reports, which is a great functionality.
Its ease of use and ease of implementation, because in some cases it can be implemented agentless.
So many vendor integrations, which is great.
Also really good customer supports, easy to reach out to them.
You can use it as much as you can (depending on your license), schedule tasks and reports, which is a great functionality.
What do you dislike about the product?
You have to apply some exclusions to your security controls
What problems is the product solving and how is that benefiting you?
It helps me to validate the effectiveness of my security and detection controls such as NGFW, AV/EDR/EPP, WAF, IPS, PROXY, SIEM, etc. From multiple vendors.
showing 1 - 10