Picus Security Reviews

I have used Picus Security to see what it can do. I use Picus Security for continuous security validation and control effectiveness.

The most valuable feature of the solution is its integration capabilities with the other security tools.

I can simulate an attack into a live environment and test whether my controls are working properly. It checks if the controls can stop and mitigate the attacks.

One valuable feature of Picus Security is security control validation. It provides good reports and offers signature-based solutions. I can simulate an attack into a live environment, testing whether my controls are operational and able to stop or mitigate attacks.

Picus Security is a breach and attack simulation software. It has a dictionary attack. According to your peers and attack vectors, it's trying to attack with the files. It also has some lateral movement attacks. They need to install or configure the peers or attack vectors so we can support it.

The solution updates almost daily because the dictionary updates. The latest version is 4273. We have some customers using the on cloud platform. We also have some military customers who are using the on-prem solution.

The system managers or administrators are managing this product, so I don't have a specific number of clients that are using the solution.

Picus Security has improved and is still improving the security level of my organization. As we all know, everyday new vulnerabilities, attack methods and tactics are developed and applied to attack to the organizations. In this situation it is extremely hard to follow up every single payload, virus, trojan, and related application versions. Picus Security is continuously running attack scenarios on my live system on test servers and bringing up the level of my security situation.

In general terms, our clients use Picus Security to verify the security controls in their environments.

One of the most valuable features would be the detection capability, specifically the ability to detect alarms and logs collected from SIEM tools.

We enagage with customers in the Middle East to check the visibility of the use cases that we create, using the Picus solution. We want to check the strength of their infrastructure, their application servers. This is the type of integration exercise we do for our customers. We check if there are any loopholes or weak links that can be hardened using a visibility tool, of course like Picus Security. Customers in the Middle East are concerned about cloud solutions, the data or software component has to reside within their premise or at least inside the boundaries of this country. The majority of them prefer the on-premise solution, and sometimes we use cloud-based solutions as well. When using the cloud they have a SaaS service available and it's hosted on Amazon cloud. 

Primarily it's the visibility that they have in their infrastructure. It's just like a penetration testing exercise, where you don't require specific expertise or a pen-testing team. However, have to be IT aware to be able to use this tool. The Picus Security team configure this in your environment.

Picus Security is used for BAS, helping companies test their network security layers by simulating attacks from the cloud. It installs an agent behind the firewall to assess security configurations and policies, enabling both blue teaming and red teaming scenarios. Additionally, it provides prevention measures like URL bypass blocking to enhance firewall security.

The most valuable feature of Picus Security is its threat intelligence, providing suggestions to block and prevent attacks by identifying malicious files and providing threat IDs. This helps organizations prevent the latest ransomware and modern attacks from exploiting vulnerabilities in their systems.