No more typing reviews! Try our Samantha, our new voice AI agent.

CyCognito vs Cymulate comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyCognito
Ranking in Breach and Attack Simulation (BAS)
9th
Ranking in Attack Surface Management (ASM)
11th
Average Rating
7.0
Reviews Sentiment
3.3
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Cymulate
Ranking in Breach and Attack Simulation (BAS)
3rd
Ranking in Attack Surface Management (ASM)
16th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Threat Intelligence Platforms (TIP) (13th), Continuous Threat Exposure Management (CTEM) (7th)
 

Mindshare comparison

As of September 2026, in the Breach and Attack Simulation (BAS) category, the mindshare of CyCognito is 2.3%, up from 0.9% compared to the previous year. The mindshare of Cymulate is 14.9%, down from 20.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Breach and Attack Simulation (BAS) Mindshare Distribution
ProductMindshare (%)
Cymulate14.9%
CyCognito2.3%
Other82.8%
Breach and Attack Simulation (BAS)
 

Featured Reviews

VO
IT Specialist at Squemart
Automated attack surface mapping has improved risk visibility but still needs better guidance
I believe CyCognito could improve by lowering the false positive rate. When false positives occur with CyCognito, we experience frustrating delays in customer support. Standard support tickets for complaints often take too long to resolve. Additionally, the remediation workflow guidance is sometimes criticized for lacking clear step-by-step instructions on fixing vulnerabilities, requiring manual engineering research. Adding specific code fixes or configuration lines could prevent teams from manually figuring out corrections. Moreover, the tool is somewhat expensive, particularly for small to medium businesses such as ours, pushing smaller IT teams to utilize lower-cost or open-source alternatives. Ideally, a pricing tier favorable to these smaller organizations would be beneficial. I also suggest a consumption-based model based on testing frequency rather than total asset count to enhance platform accessibility. CyCognito also lacks native compliance questionnaire management and vendor scorecard tracking, which could improve overall utility. Finally, while it maps third-party parameters, it cannot fully address lateral movement paths as some other scanners can, requiring reliance on external API integration.
SB
Security Architec at Shikun & Binui
Support and integration enhance security posture over three years
I don't know if there's something that could be improved. They surprise me. As I mentioned, I returned a month ago. I haven't fully investigated the complete system yet. I must say that we have been with them for around three years. This is amazing because throughout these three years, they have supported us every week. We meet weekly to review results and fix issues together. Apart from occasional days off, this weekly support has been consistent for three years. It's remarkable because many products are sold and then the product teams forget about you, but this isn't the case with Cymulate.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Since using CyCognito, we have observed specific outcomes, for the last operational year, we had about 30 to 50 percent more risk surface with hidden internet-exposed assets that traditional internal scanning tools missed, MTTR was reduced by more than 60 percent, compressing timelines to patch critical vulnerabilities from weeks or months down to days, the prioritization engine filtered out noise, forcing the security team to focus on a small fraction of exploitable risks, we also saw a less than 5 percent false positive rate, which eliminated hours of manual validation work, and we have saved significantly annually due to automated external testing, reducing reliance on manual penetration testing and expensive external bug bounty programs."
"The reporting capabilities are very good."
"With Cymulate, the best features are the capacity to test the EDR or malware, anti-malware solution."
"The most valuable feature for us is the zero-day."
"Cymulate has positively impacted our organization by helping us to take care of the efficacy and reviewing the policies and configuration."
"Cymulate is easy to set up, install, and configure."
"The security validation feature helps my organization in assessing our security posture."
 

Cons

"When false positives occur with CyCognito, we experience frustrating delays in customer support."
"I will be honest, we have it, but in the last year, I didn't maintain the system until a month ago."
"The product must provide consultancy for initial setup."
"The way Cymulate works for EDR could be improved, as it drops payload and requires action from the EDR console for remediation, which can block the whole process of Cymulate execution."
"The reporting process requires significant improvement as it often takes longer than expected and the quality is lacking."
"We have had some trouble with the agents."
"The cost can be quite high, and it impacts scalability as more simulations require additional expenses."
 

Pricing and Cost Advice

Information not available
"Cymulate's services are expensive."
"The product is affordable."
report
Use our free recommendation engine to learn which Breach and Attack Simulation (BAS) solutions are best for your needs.
913,683 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Comms Service Provider
9%
Manufacturing Company
9%
Outsourcing Company
7%
Financial Services Firm
16%
Manufacturing Company
9%
Comms Service Provider
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business5
Large Enterprise3
 

Questions from the Community

What needs improvement with CyCognito?
I believe CyCognito could improve by lowering the false positive rate. When false positives occur with CyCognito, we experience frustrating delays in customer support. Standard support tickets for ...
What is your primary use case for CyCognito?
My main use case for CyCognito is attack surface management. It helps me bridge ethical considerations as it serves as a simulation of what an attacker would do in real life, allowing me to continu...
What advice do you have for others considering CyCognito?
CyCognito is deployed in our organization as a multi-tenant public cloud SaaS platform. It analyzes our infrastructure from an outside-in attacker perspective, so it is not deployed as a private cl...
What is your experience regarding pricing and costs for Cymulate?
I don't know if it's expensive. It depends on the modules that you want, or the time, because they give you a tenant. A tenant for you.
What needs improvement with Cymulate?
I don't know if that helped with quick decision making for my security team because I am the security team and you must have a dedicated team to work with this tool. I don't use the analytics modul...
What advice do you have for others considering Cymulate?
With Cymulate, I have experience using the vulnerability management tools. I don't know if I have used the Continuous Security Validation with Cymulate. I don't have that module licensed with Cymul...
 

Comparisons

 

Overview

 

Sample Customers

UTA, BERTELSMANN, WIPRO
Euronext, YMCA, Telit, Nemours 
Find out what your peers are saying about Horizon3.ai, Pentera, Cymulate and others in Breach and Attack Simulation (BAS). Updated: September 2026.
913,683 professionals have used our research since 2012.