No more typing reviews! Try our Samantha, our new voice AI agent.

CyCognito vs Cymulate comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyCognito
Ranking in Breach and Attack Simulation (BAS)
9th
Ranking in Attack Surface Management (ASM)
12th
Average Rating
7.0
Reviews Sentiment
3.3
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Cymulate
Ranking in Breach and Attack Simulation (BAS)
3rd
Ranking in Attack Surface Management (ASM)
17th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Threat Intelligence Platforms (TIP) (14th), Continuous Threat Exposure Management (CTEM) (7th)
 

Mindshare comparison

As of August 2026, in the Breach and Attack Simulation (BAS) category, the mindshare of CyCognito is 2.2%, up from 0.9% compared to the previous year. The mindshare of Cymulate is 15.2%, down from 21.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Breach and Attack Simulation (BAS) Mindshare Distribution
ProductMindshare (%)
Cymulate15.2%
CyCognito2.2%
Other82.6%
Breach and Attack Simulation (BAS)
 

Featured Reviews

VO
IT Specialist at Squemart
Automated attack surface mapping has improved risk visibility but still needs better guidance
I believe CyCognito could improve by lowering the false positive rate. When false positives occur with CyCognito, we experience frustrating delays in customer support. Standard support tickets for complaints often take too long to resolve. Additionally, the remediation workflow guidance is sometimes criticized for lacking clear step-by-step instructions on fixing vulnerabilities, requiring manual engineering research. Adding specific code fixes or configuration lines could prevent teams from manually figuring out corrections. Moreover, the tool is somewhat expensive, particularly for small to medium businesses such as ours, pushing smaller IT teams to utilize lower-cost or open-source alternatives. Ideally, a pricing tier favorable to these smaller organizations would be beneficial. I also suggest a consumption-based model based on testing frequency rather than total asset count to enhance platform accessibility. CyCognito also lacks native compliance questionnaire management and vendor scorecard tracking, which could improve overall utility. Finally, while it maps third-party parameters, it cannot fully address lateral movement paths as some other scanners can, requiring reliance on external API integration.
SB
Deputy Manager at a financial services firm with 10,001+ employees
Experience seamless integration and effective dashboard while considering improved EDR configuration support
The way Cymulate works for EDR could be improved, as it drops payload and requires action from the EDR console for remediation, which can block the whole process of Cymulate execution. They should create some KB articles for the granular exclusion from different platforms and improve their technical assistance support.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Since using CyCognito, we have observed specific outcomes, for the last operational year, we had about 30 to 50 percent more risk surface with hidden internet-exposed assets that traditional internal scanning tools missed, MTTR was reduced by more than 60 percent, compressing timelines to patch critical vulnerabilities from weeks or months down to days, the prioritization engine filtered out noise, forcing the security team to focus on a small fraction of exploitable risks, we also saw a less than 5 percent false positive rate, which eliminated hours of manual validation work, and we have saved significantly annually due to automated external testing, reducing reliance on manual penetration testing and expensive external bug bounty programs."
"The reporting capabilities are very good."
"The security validation feature helps my organization in assessing our security posture."
"With Cymulate, the best features are the capacity to test the EDR or malware, anti-malware solution."
"Cymulate has positively impacted our organization by helping us to take care of the efficacy and reviewing the policies and configuration."
"The most valuable feature for us is the zero-day."
"Cymulate is easy to set up, install, and configure."
 

Cons

"When false positives occur with CyCognito, we experience frustrating delays in customer support."
"We have had some trouble with the agents."
"The way Cymulate works for EDR could be improved, as it drops payload and requires action from the EDR console for remediation, which can block the whole process of Cymulate execution."
"The product must provide consultancy for initial setup."
"The reporting process requires significant improvement as it often takes longer than expected and the quality is lacking."
"The cost can be quite high, and it impacts scalability as more simulations require additional expenses."
"I will be honest, we have it, but in the last year, I didn't maintain the system until a month ago."
 

Pricing and Cost Advice

Information not available
"The product is affordable."
"Cymulate's services are expensive."
report
Use our free recommendation engine to learn which Breach and Attack Simulation (BAS) solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
10%
Retailer
8%
Construction Company
7%
Financial Services Firm
14%
Manufacturing Company
10%
Comms Service Provider
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business5
Large Enterprise3
 

Questions from the Community

What needs improvement with CyCognito?
I believe CyCognito could improve by lowering the false positive rate. When false positives occur with CyCognito, we experience frustrating delays in customer support. Standard support tickets for ...
What is your primary use case for CyCognito?
My main use case for CyCognito is attack surface management. It helps me bridge ethical considerations as it serves as a simulation of what an attacker would do in real life, allowing me to continu...
What advice do you have for others considering CyCognito?
CyCognito is deployed in our organization as a multi-tenant public cloud SaaS platform. It analyzes our infrastructure from an outside-in attacker perspective, so it is not deployed as a private cl...
What is your experience regarding pricing and costs for Cymulate?
I don't know if it's expensive. It depends on the modules that you want, or the time, because they give you a tenant. A tenant for you.
What needs improvement with Cymulate?
I don't know if that helped with quick decision making for my security team because I am the security team and you must have a dedicated team to work with this tool. I don't use the analytics modul...
What advice do you have for others considering Cymulate?
With Cymulate, I have experience using the vulnerability management tools. I don't know if I have used the Continuous Security Validation with Cymulate. I don't have that module licensed with Cymul...
 

Comparisons

 

Overview

 

Sample Customers

UTA, BERTELSMANN, WIPRO
Euronext, YMCA, Telit, Nemours 
Find out what your peers are saying about Horizon3.ai, Pentera, Cymulate and others in Breach and Attack Simulation (BAS). Updated: August 2026.
908,800 professionals have used our research since 2012.