Picus Security vs XM Cyber comparison

The compared Picus Security and XM Cyber solutions aren't in the same category. Picus Security is ranked #3 in BAS , with an average rating of 9.0, and holds a 16.8% mindshare in the category. XM Cyber is ranked #2 in CTEM , with an average rating of 8.0, and holds a 35.9% mindshare. Additionally, 100% of Picus Security users are willing to recommend the solution, compared to 100% of XM Cyber users who would recommend it.

Picus Security

Read 6 Picus Security reviews

2,617 Views
1,853 Comparison Views

100% willing to recommend

XM Cyber

Read 2 XM Cyber reviews

460 Views
275 Comparison Views

100% willing to recommend

Picus Security

XM Cyber

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Picus Security and XM Cyber based on real PeerSpot user reviews.

Find out in this report how the two Breach and Attack Simulation (BAS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Picus Security vs. XM Cyber Report (Updated: December 2024).

Buyer's Guide

Picus Security vs. XM Cyber

December 2024

Download the complete report

Helped 831,020 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Picus Security

Average Rating

9.0

Number of Reviews

Ranking in other categories

Breach and Attack Simulation (BAS) (3rd)

XM Cyber

Average Rating

8.0

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Vulnerability Management (29th), Cloud Security Posture Management (CSPM) (26th), Continuous Threat Exposure Management (CTEM) (2nd)

Mindshare comparison

Picus Security and XM Cyber aren’t in the same category and serve different purposes. Picus Security is designed for Breach and Attack Simulation (BAS) and holds a mindshare of 16.8%, up 14.0% compared to last year.
XM Cyber, on the other hand, focuses on Continuous Threat Exposure Management (CTEM), holds 35.9% mindshare, down 47.5% since last year.

Breach and Attack Simulation (BAS)

Continuous Threat Exposure Management (CTEM)

Featured Reviews

erdemerdag

Cybersecurity Operations Engineer at a tech services company with 201-500 employees

Breach and attack simulation software that provides network, endpoint, and email vectors

According to the attack vectors, you cannot specify which product is failing or which product is working well because there's no agent. The best case scenario is to add an agent solution where an agent would have the ability to actually detect which programs aren't working. For the attack software, you put a peer on the cloud site, and you have another peer internal network. There is IPS, firewall, WAF, and DBS amongst these peers. The cloud's peer is trying to send the attack file to the internal network. Maybe the firewall is blocking it, maybe the IP, maybe the WAF, but you cannot see the details. You can say, "Yes, my security product is blocking that attack scenario," or, "I cannot block this attack."

Read full review

HolgerHeimann

Ffounder at It.sec

Reliable with no false-positives and helpful support

There's a lot of improvement possible, however, most of it is in the details. I personally like the concept, as it's pretty straightforward and the product is not trying to overload functionality. It's a clean and straightforward approach. You know what you get. Most of the improvements are detail improvements. They're pretty open to future requests as well, so we send them a lot of suggestions. For example, at the moment, they have something called Battleground. That's a visualization of the network, and it's a visualization of the attack paths that are possible. The program uses so-called scenarios, and we say, "Okay, I'm watching traffic for maybe 24 hours," and then you get a result for that scenario, what happens in that time with what the attack paths are, et cetera. The result of the same scenario yesterday or tomorrow may be different as something might change. In that, one of the things I'm currently missing, which is on the list to be added, is some kind of diff visualization. For example, showing a two-screen split of activity. On the left side of the screen, that's how it was yesterday; on the right side, that's how it is today; and here are the differences. We'd like to see a cheaper price.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Picus Security is its threat intelligence, providing suggestions to block and prevent attacks by identifying malicious files and providing threat IDs."

"It's very useful software because the customer mostly configures their IPS and manages their firewalls, WAF, and the DBS according to the latest update, latest news, or according to the situation."

"One of the most valuable features would be the detection capability, specifically the ability to detect alarms and logs collected from SIEM tools."

"It provides good reports and offers signature-based solutions."

"The most valuable feature of the solution is its integration capabilities with the other security tools."

"You have the liberty of physically executing a specific set of rules in your environment."

"What I personally like very much, from my experience, is that it is very reliable."

"The platform's most valuable feature is attack simulation."

Cons

"The reporting and data analysis could be improved. Specifically, the analysis of the results."

"To improve, Picus Security could consider establishing a data center in India to address trust issues and increase interest from Indian customers."

"There is room for improvement in the response rate provided by customer support."

"Let's say if a customer's environment has 10 security devices and they need to know that there is an attack that has bypassed their devices, they cannot go and inspect every device and every rule in their security devices."

"The amount of integrations that the product can handle is an area of concern, making it one of the aspects where improvements are required."

"According to the attack vectors, you cannot specify which product is failing or which product is working well because there's no agent."

"We'd like to see a cheaper price."

"XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas."

Pricing and Cost Advice

"There is a yearly license according to the number of vectors. The pricing is moderate."

"They have certain price ranges for their products, depending upon the use cases, and the number of applications the customer wants to try."

"We have to pay standard licensing fees."

See which vendors are best for you

Use our free recommendation engine to learn which Breach and Attack Simulation (BAS) solutions are best for your needs.

See recommendations

831,020 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

26%

Computer Software Company

12%

Manufacturing Company

Government

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Picus Security?

The most valuable feature of Picus Security is its threat intelligence, providing suggestions to block and prevent attacks by identifying malicious files and providing threat IDs.

See all answers

What is your experience regarding pricing and costs for Picus Security?

The pricing of Picus Security is average, and it offers a good value for money.

See all answers

What needs improvement with Picus Security?

There is room for improvement in the response rate provided by customer support. Picus Security could improve the response time.

See all answers

What do you like most about XM Cyber?

The platform's most valuable feature is attack simulation.

See all answers

What is your experience regarding pricing and costs for XM Cyber?

We have to pay standard licensing fees. There are no additional costs. It is an expensive product. I rate the pricing a seven out of ten.

See all answers

What needs improvement with XM Cyber?

XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.

See all answers

Comparisons

Pentera vs Picus Security

Compared 36% of the time

Cymulate vs Picus Security

Compared 30% of the time

AttackIQ vs Picus Security

Compared 11% of the time

SafeBreach vs Picus Security

Compared 10% of the time

Tenable One Exposure Management Platform vs Picus Security

Compared 4% of the time

More Picus Security Competitors

Pentera vs XM Cyber

Compared 26% of the time

Cymulate vs XM Cyber

Compared 15% of the time

SafeBreach vs XM Cyber

Compared 10% of the time

Wiz vs XM Cyber

Compared 8% of the time

Qualys VMDR vs XM Cyber

Compared 5% of the time

More XM Cyber Competitors

Product Reports

Buyer's Guide

Picus Security

December 2024

Download Picus Security product report

Buyer's Guide

Cymulate vs. XM Cyber

December 2024

Download XM Cyber product report

Learn More

Picus Security

XM Cyber

Overview

Independent from any vendor or technology, the unparalleled Picus Platform is designed to continuously measure the effectiveness of security defenses by using emerging threat samples in production environments. Created by a team that’s been working together more than 10 years already and has proven their expertise in enterprise cybersecurity, Picus is trusted by many large multinational corporations and government agencies.

XM Cyber is a leading hybrid cloud security company that’s changing the way innovative organizations approach cyber risk. Our attack path management platform continuously uncovers hidden attack paths to your critical assets across cloud and on-prem environments, so you can cut them off at key junctures and eradicate risk with a fraction of the effort. This overcomes the big disconnect that security teams experience when they’re presented with endless alerts, yet can’t see which exposures impact risk the most, how they come together to be exploited by an attacker, or how to efficiently eliminate them. This approach is a complete game-changer, which is why some of the world’s largest, most complex organizations choose XM Cyber to help eradicate risk. Founded by top executives from the Israeli cyber intelligence community, XM Cyber has offices in North America, Europe, and Israel.

Sample Customers

Akbank, Exclusive Networks, Garanti, ING Bank, QNB Finansbank, Turkcell, Vodafone, Yapı Kredi

Hamburg Port Authority, Plymouth Rock Corporation

Buyer's Guide

Picus Security vs. XM Cyber

December 2024

Free Report: Picus Security vs. XM Cyber

Find out what your peers are saying about Picus Security vs. XM Cyber and other solutions. Updated: December 2024.

DOWNLOAD NOW

831,020 professionals have used our research since 2012.

See our Picus Security vs. XM Cyber report.

We monitor all Breach and Attack Simulation (BAS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.