Armadin, Assail, Cymulate and Picus Security

About Assail

Assail sells Ares, an autonomous offensive security platform that tests applications, APIs, mobile apps and AI systems and shows what an attacker could actually reach.^[1]

Assail says Ares continuously tests applications, APIs, mobile apps, and AI systems as they change. Ares follows attack paths, exploits weaknesses, and proves what an attacker could actually reach. Coordinated AI agents extend testing capacity, and Ares tests authenticated applications through the customer's existing identity provider. Ares also tracks changes across known and shadow APIs and delivers the evidence behind each confirmed risk.^[3]

Assail describes Ares as combining autonomous red teaming, attack surface management, and Shadow AI discovery across web, API, mobile, and supported AI environments, with applicable MITRE ATLAS coverage. The Ares platform is powered by Assail's domain-adapted model for security reasoning and tool use.^[3][7]

On deployment, Assail says Ares can run within the customer's own infrastructure, even in disconnected environments. With Assail Anywhere, the entire platform, including the AI model, deploys on-premises, inside isolated and air-gapped networks, in the customer's own cloud, or through Assail's SaaS. Assail has also announced that it expanded Reaper's sovereign deployment architecture to AWS GovCloud and Google Cloud Assured Workloads.^[3]

Assail names Ares, Reaper, and Scorpion as the products taken to the fight. Reaper is described as autonomous offensive cyber operations built for military, federal, and intelligence missions.^[3]

Assail publishes industry pages for manufacturing, financial services, federal and state government, automotive, retail, and defense. In manufacturing, Ares validates systems such as ERP, MES, PLM, supplier portals, industrial APIs, and connected products. In financial services, Ares validates APIs, payment rails, mobile banking apps, and open banking integrations. For retail, Ares validates e-commerce web apps, mobile shopping apps, loyalty APIs, and gift card platforms. In automotive it covers telematics APIs, OTA infrastructure, and mobile companion apps.^{[4][5][6][9][10]}

Assail says its team brings 26 years of offensive security experience. Assail also publishes original research on attack techniques and the exploitation of AI and API surfaces. A customer, Branch, says Ares helps its security team increase penetration testing frequency and validate remediations faster.^{[1][2][3][4][5][6][8]}

About Cymulate

Cymulate sells the Cymulate Platform, which turns validation into a continuous, adaptive process of agentic cyber defense engineering. Cymulate says manual testing and control updates can take days to adapt to new threats. With Vero AI, Cymulate says it understands new threats, tailors validation to the customer's environment and turns findings into prioritized actions and automated security control updates.^[1][3][5][7]

Cymulate says its threat library has full MITRE ATT&CK coverage. The platform includes a daily feed of the latest threats with a 24-hour SLA for updated attack simulations for new US Cert threat advisories. Cymulate safely simulates real-world attack techniques across endpoints, networks, email, web gateways and cloud environments, with integrations to the controls and SIEM to prove both prevention and detection. Testing results create scorecards and benchmarks for security controls, MITRE ATT&CK coverage and specific threats. Cymulate combines breach and attack simulation, exposure validation and actionable remediation guidance in a single platform.^[1][3][5][8]

For exposure management, Cymulate says customers can automate validation as part of a continuous threat exposure management program. Cymulate lets customers push vendor-specific threat mitigation and behavior rules for immediate prevention or detection. Cymulate Auto Mitigate deploys relevant IoCs to security controls after teams follow remediation guidance for validated gaps. The Cymulate + Bitsight integration creates a closed loop between adversary intelligence and continuous exposure validation. In the Cymulate Platform, Bitsight provides relevant adversaries, campaigns, ransomware groups, APTs, TTPs, IoCs and targeting trends that are then used to focus testing and validation workflows.^[3][5][6][7]

On detection, Cymulate Detection Studio automates SIEM rule validation and detection tuning against real-world attacks. Cymulate says it transforms detection engineering from a manual, resource-intensive process into a continuous, automated lifecycle. Vero AI maps rules to attack scenarios, tests detection performance, identifies gaps and recommends or generates new rules. Cymulate generates Sigma rules and vendor-specific detection rules from validated gaps and provides guided tuning for the rules customers already have. Once deployed, rules are retested against the original attack scenario to confirm they improved detection. Cymulate simulations are production-safe: they reproduce the techniques and behavior of real attacks without executing actual malicious payloads or causing damage to systems or data.^[3][7][8]

Cymulate says it is built for security teams that need continuous validation across their environment, including security operations, detection engineering, red teams and exposure management teams. Cymulate says it supports organizations of all sizes, from mid-market to enterprise, especially those with complex or evolving security stacks. Cymulate says it empowers executives, security operations and the whole security program to continuously prove, prioritize and adapt security for specific threats and exposures.^[3][5][8]

Cymulate was founded by former IDF intelligence officers and cyber researchers. Cymulate says its platform runs on a private AWS tenant engineered for isolation, high availability, and redundancy across multiple regions. Cymulate does not collect or store sensitive Personal Identifying Information or PCI-DSS cardholder data. Cymulate states that data stored in databases and AWS is encrypted with AES-256. Cymulate has independent external auditor attestation across the Security, Availability, Confidentiality and Privacy Trust Services Criteria, and a public SOC 3 report.^[3][8]

About Picus Security

Picus Security sells a platform that proves what attackers can exploit and what defenses stop. Picus Security says it enables security teams to continuously validate and enhance organizations' cyber resilience. Autonomous Penetration Testing is one part of the Picus Platform. The capabilities of the Picus Platform converge into one continuous validation loop, from attack surface to controls to exploitable exposures.^{[3][6][10][12]}

Picus runs autonomous agents that chain real attacks across the full environment to show which exposures are genuinely exploitable. Autonomous Penetration Testing continuously enumerates external assets, internal networks, identities, and misconfigurations across the environment. Autonomous Penetration Testing can run fully autonomous, fully supervised, or anywhere in between. Every action and decision in Autonomous Penetration Testing is logged end to end. Autonomous Penetration Testing prioritizes exposures by validated risk and blast radius, then verifies the fix.

Exposure Validation proves exploitability without firing an exploit, covering restricted assets that no live test can touch and CVEs with no public or safe exploit. Picus Exposure Validation prioritizes exposures based on exploitability, security control performance, and asset criticality. Breach and Attack Simulation continuously tests what EDR, SIEM, firewall, WAF, and other security controls block and detect against the newest attacker techniques. Picus Breach and Attack Simulation evaluates whether defenses block or detect attacks, including attempted data exfiltration. The Picus Platform supplies vendor-specific prevention signatures and detection rules to optimize tools that fail to provide the protection required. Prevention signatures and detection rules from the Picus Mitigation Library are applied, then retested to confirm that the identified security gaps have been closed.^[6][11][12]

The Picus Platform simulates real-world threats and analyzes the security logs captured by a SIEM. Picus Detection Analytics identifies which attacks trigger alerts, which are missed, and where visibility gaps exist. Picus validation reports, MITRE ATT&CK mappings, and customizable dashboards show which threats were blocked or detected, where gaps remain, and whether fixes closed those gaps. The Picus URL testing module safely simulates outbound HTTP/HTTPS requests to harmful, malicious, or objectionable websites to test whether those requests are correctly blocked. The Picus URL Filtering Testing Module simulates access to real malicious and inappropriate sites across 31 categories, confirming whether controls block what they should. Recurring tests can be scheduled to maintain consistent control effectiveness.^{[2][11][13][14][15]}

Picus Cloud Security Validation runs a continuous loop across the customer's cloud. Picus Cloud Security Validation scans core AWS, Azure, and Google Cloud services, then safely simulates real attacks against what it finds. Picus gathers cloud identities and runs them through a local policy simulator to reveal which roles, policies, and entitlements can actually be abused. Picus validates with read-only access and feeds validated exposures into existing CSPM, CNAPP, and security data tooling. Cloud security audits can be scheduled weekly or run on demand after any change.^[16]

Juventus Football Club uses Picus Exposure Validation to simulate real-world attacks and continuously verify that its cybersecurity defenses protect critical systems across stadium, training, hospitality, and medical operations. Oil and gas operators use Picus to validate their defenses across connected IT and OT environments, simulating ransomware, ICS malware, and adversary techniques. Picus Threat Templates for Oil and Gas validate defenses against campaigns targeting pipelines, refineries, and industrial control systems, including Sandworm, TRITON, and Dragonfly. Picus offers audit ready reports aligned with IEC 62443, API 1164, NIST CSF, and TSA pipeline directives. Picus helps Critical Infrastructure (CI) operators continuously test the effectiveness of cybersecurity controls required by the Hong Kong CoP. Picus generates automated validation reports to demonstrate the effectiveness of security controls in maintaining compliance with CCoP 2.0 requirements and support audit reviews. Picus holds ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 22301, and ISO/IEC 20000-1 certificates and a SOC 2 Type 2 report.^{[1][3][4][6][7][8][9][10][12][14][15][17][18]}