No more typing reviews! Try our Samantha, our new voice AI agent.

Cymulate vs Rapid7 Penetration Testing Services comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cymulate
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Threat Intelligence Platforms (TIP) (11th), Breach and Attack Simulation (BAS) (2nd), Attack Surface Management (ASM) (10th), Continuous Threat Exposure Management (CTEM) (3rd)
Rapid7 Penetration Testing ...
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
1
Ranking in other categories
Penetration Testing Services (9th)
 

Featured Reviews

SB
Security Architec at Shikun & Binui
Support and integration enhance security posture over three years
I don't know if there's something that could be improved. They surprise me. As I mentioned, I returned a month ago. I haven't fully investigated the complete system yet. I must say that we have been with them for around three years. This is amazing because throughout these three years, they have supported us every week. We meet weekly to review results and fix issues together. Apart from occasional days off, this weekly support has been consistent for three years. It's remarkable because many products are sold and then the product teams forget about you, but this isn't the case with Cymulate.
Gabriel Woolverton - PeerSpot reviewer
Penetration Tester at a tech consulting company with 1-10 employees
Wide range of coverage and free
A useful improvement would be to have white papers for specific vulnerabilities readily available. It seems like they are not always linked when you are looking for a vulnerability identifier in the database. It would be useful to ensure that that information is readily available. That way, if you need to dive deeper into a vulnerability, you would have the capability to do so basically right there on the website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature for us is the zero-day."
"The security validation feature helps my organization in assessing our security posture."
"The reporting capabilities are very good."
"Cymulate is easy to set up, install, and configure."
"With Cymulate, the best features are the capacity to test the EDR or malware, anti-malware solution."
"Cymulate has positively impacted our organization by helping us to take care of the efficacy and reviewing the policies and configuration."
"The initial setup is very straightforward. This is not a tool that you have to set up yourself. All you have to do is just access their web-based vulnerability database application, which is open source and available to pretty much anyone."
"Rapid7's wide range of coverage, in terms of vulnerabilities and exploits linked to vulnerabilities, is its most valuable feature."
 

Cons

"We have had some trouble with the agents."
"The reporting process requires significant improvement as it often takes longer than expected and the quality is lacking."
"The product must provide consultancy for initial setup."
"The cost can be quite high, and it impacts scalability as more simulations require additional expenses."
"The way Cymulate works for EDR could be improved, as it drops payload and requires action from the EDR console for remediation, which can block the whole process of Cymulate execution."
"I will be honest, we have it, but in the last year, I didn't maintain the system until a month ago."
"A useful improvement would be to have white papers for specific vulnerabilities readily available. It seems like they are not always linked when you are looking for a vulnerability identifier in the database."
"A useful improvement would be to have white papers for specific vulnerabilities readily available."
 

Pricing and Cost Advice

"The product is affordable."
"Cymulate's services are expensive."
Information not available
report
Use our free recommendation engine to learn which Penetration Testing Services solutions are best for your needs.
885,667 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Manufacturing Company
9%
Comms Service Provider
7%
Financial Services Firm
13%
University
10%
Manufacturing Company
7%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Large Enterprise3
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cymulate?
I don't know if it's expensive. It depends on the modules that you want, or the time, because they give you a tenant. A tenant for you.
What needs improvement with Cymulate?
I don't know if that helped with quick decision making for my security team because I am the security team and you must have a dedicated team to work with this tool. I don't use the analytics modul...
What advice do you have for others considering Cymulate?
With Cymulate, I have experience using the vulnerability management tools. I don't know if I have used the Continuous Security Validation with Cymulate. I don't have that module licensed with Cymul...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

Euronext, YMCA, Telit, Nemours 
Motorola, Liberty wines, Kaman Corporation
Find out what your peers are saying about Horizon3.ai, HackerOne, Bugcrowd and others in Penetration Testing Services. Updated: March 2026.
885,667 professionals have used our research since 2012.