Picus Security

Picus Security develops a platform for testing whether an organisation's security defences actually stop attacks. It grew out of breach and attack simulation and describes its approach as continuous security validation. The company is independent of any one security vendor or technology.

What Picus Security offers

• Breach and attack simulation — runs emerging threat samples in production environments to measure how well defences perform.
• Exposure validation — checks whether a known weakness could really be exploited against a customer's own controls.
• Automated pentesting — combined with simulation in one loop of validating, deciding, fixing and re-validating.
• AI agents — a team of agents, with autonomy the customer can tune from manual to fully autonomous.
• Control tuning — gets more from existing tools such as EDR, SIEM and firewalls.

Who it works with

Security teams in large multinational corporations and government agencies.

Key facts

• Approach: continuous security validation
• Team: founders who have worked together for more than ten years