Share your experience using Cymulate

I tried some of the modules of Cymulate, specifically two or three modules including Email Security, Endpoint, and another one. The use cases involved trying to test the effectiveness of the EDR solution that I have.

With Cymulate, the best features are the capacity to test the EDR or malware, anti-malware solution. That is the best case for us. Cymulate has a very friendly interface.

I don't know if that helped with quick decision making for my security team because I am the security team and you must have a dedicated team to work with this tool. I don't use the analytics module with Cymulate. They open and manage cases with Cymulate, and we have had some trouble with the agents.

I have about two or three years of experience with Cymulate.

The support is given by the MSSP. They open and manage cases with Cymulate, and we have had some trouble with the agents. They manage the cases.

Positive

Regarding the initial setup, I don't know if it's straightforward or complex.

Our MSSP is doing this as a service. They deal with the price with the brand. We are deploying the solution in this company. It's not in production yet.

I don't know if it's expensive. It depends on the modules that you want, or the time, because they give you a tenant. A tenant for you.

With Cymulate, I have experience using the vulnerability management tools. I don't know if I have used the Continuous Security Validation with Cymulate. I don't have that module licensed with Cymulate. We are doing that exercise with another solution. They give us a tenant for Cymulate. They manage that tenant, and we install the agents on our endpoints. It's cloud for most of the setup, but the agents run locally on our endpoint. It might be Cymulate.com. I rate Cymulate a seven out of ten.

I use Cymulate for many things. Basically, for example, when we first used Cymulate, we used it to determine which EDR we would prefer and which EDR is the best. We ran a scenario of attacks on some computers, and each computer had a different EDR. On these computers, we then saw the results, and according to them, we determined which EDR was better for us. We also use the WAF and the WAF service. We basically use everything in Cymulate.

I will be honest, we have it, but in the last year, I didn't maintain the system until a month ago. I returned to maintain the system with one of my employees, so I'm not fully involved, but it was my advice after we did a POC with Cymulate to purchase it.

What I appreciate most about Cymulate is that the reports are good for my executives. We integrated connections to Microsoft ATP, CrowdStrike, and similar EDRs, and it can tell you if we would receive alerts on specific events. This gives you a really good status on your network's security level and whether you get alerts or not.

The security validation feature helps my organization in assessing our security posture. Basically, we use it for maintaining our security. For example, if we see that certain file types are passing through our emails, we block them and then rerun the test. Since we are a worldwide company, we use it for all of our headquarters around the world. This provides a perspective on how each branch or headquarters is performing, which ones need more attention, and where we need to allocate more resources.

The intuitive dashboards in Cymulate are great. They inform you if it's running, and if you determine the base score, you can see if you got any higher or lower from that score. While we don't frequently use the dashboards, you can see the last run and the results clearly. Through using Cymulate, we discovered vulnerabilities we thought couldn't exist or believed we were already protected against. We fixed these issues and retested with the system, verifying the fixes without the system as needed.

The flexible deployment options in Cymulate are very straightforward. When setting up an agent, you send it to someone, install it, and that's it - the computer just needs to be online. We are based in Israel and have a branch in the US, and despite the significant time difference, we don't have any problems except during crises. It's essentially a one-time setup. Once installed and online, you can leave the computer aside, and it works perfectly. Any agent can be set up with new scheduled tasks very intuitively.

Overall, using Cymulate is straightforward. It depends on the user's expertise. For instance, if someone tests their WAF for XSS attacks but doesn't understand what XSS is, then it won't be helpful. This isn't a limitation of Cymulate but rather depends on the operator's knowledge.

I don't know if there's something that could be improved. They surprise me. As I mentioned, I returned a month ago. I haven't fully investigated the complete system yet. I must say that we have been with them for around three years. This is amazing because throughout these three years, they have supported us every week. We meet weekly to review results and fix issues together. Apart from occasional days off, this weekly support has been consistent for three years. It's remarkable because many products are sold and then the product teams forget about you, but this isn't the case with Cymulate.

I have been using Cymulate for approximately three years and have renewed it twice already.

The scalability with Cymulate is quite good. As mentioned, we have agents in Africa and the USA, and we can test them all.

I don't need to engage with their customer support team separately. They have weekly meetings with us where we resolve everything. I have changed several team members over the last three years, and whenever I introduce a new person, they provide a system guide. After one hour, the new team member can run the operation. If they have questions, they can ask me or the Cymulate support representative in the next meeting.

The initial setup and deployment with Cymulate is easy. They handle it for you. You only need to set up a computer and install the agents, and then you can start testing.

I don't currently recall the specific pricing details as I last reviewed them two years ago. I initially thought it would be more expensive, but I found it reasonable because you can purchase modules separately. You can buy only WAF or only EDR. We bought everything because we used it frequently, and it was a good price for our needs.

I evaluated other options before choosing Cymulate but prefer not to mention their names. We heard about other competitors but didn't appreciate what we saw because they don't show you everything. I didn't feel any connection between myself and their device.

I have used the continuous security validation feature but am uncertain about secure email validation. I am a customer with Cymulate, not a partner. I use many products but need to check with my supervisor about providing another review.

On a scale of 1-10, I rate Cymulate a 9.