AttackIQ Platform
attackiq.com
Spec sheet
- What it does
- AttackIQ is a continuous threat exposure management platform that links vulnerabilities, configurations, identities and detections to adversary-validated attack paths.Read 14 Oct 2026 · attackiq.com
- Purpose
- AttackIQ describes its platform as a CTEM platform for modeling adversary behavior, prioritizing attack paths, validating controls, and measuring security improvement.Read 8 Oct 2026 · attackiq.com
- Intended users
- AttackIQ says it serves Fortune 500 enterprises, federal agencies, and MSSPs.Read 8 Oct 2026 · attackiq.com
- Deployment
- AttackIQ offers SaaS and on-premises software, and its federal solution is described as designed for on-premises operation.Read 14 Oct 2026 · attackiq.com
- Integrations
- Published integration materials name Microsoft 365, Palo Alto Panorama, ServiceNow, Splunk, Elastic, IBM QRadar, LogRhythm, Azure Sentinel, Okta, Qualys, Tenable and AWS-related services.Read 14 Oct 2026 · assets.contentstack.io
- Support
- AttackIQ offers customer support through its portal, email, phone, a private Slack channel, knowledge base, and blueprints.Read 8 Oct 2026 · attackiq.com
- License
- The Enterprise agreement grants a limited, non-exclusive license and identifies the AttackIQ Solution and Content Library as AttackIQ proprietary property.Read 14 Oct 2026 · attackiq.com
- Headquarters
- AttackIQ lists its headquarters at 171 Main Street, Suite 656, Los Altos, California 94022.Read 8 Oct 2026 · attackiq.com
- Founded
- LinkedIn and Crunchbase list AttackIQ as founded in 2013.Read 14 Oct 2026 · linkedin.com
- Adversary emulation
- The platform executes more than 600 real-world MITRE ATT&CK techniques using authentic attacker commands and tools.Read 14 Oct 2026 · attackiq.com
- AI detection features
- Detection Rule Manager validates, measures, generates, and tunes detection rules across SIEMs, and lists Splunk, Microsoft Sentinel, Google Chronicle, Elastic Security, and QRadar integrations.Read 8 Oct 2026 · attackiq.com
- AI integrations
- AVA can be invoked from AttackIQ, ChatGPT, Claude, Cursor, Microsoft Copilot and AI-native partner applications.Read 14 Oct 2026 · attackiq.com
- AI operations
- AVA Agentic OS orchestrates specialized AI agents for CTI validation, detection coverage, control optimization, threat-debt reduction and AI security validation.Read 14 Oct 2026 · attackiq.com
- API capabilities
- The public-sector service listing says the API can create and run assessments and retrieve assessment results and test-point information.Read 14 Oct 2026 · applytosupply.digitalmarketplace.service.gov.uk
- API documentation
- The same listing says API documentation is available in OpenAPI/Swagger, HTML and PDF formats, without a sandbox environment.Read 14 Oct 2026 · applytosupply.digitalmarketplace.service.gov.uk
- Attack paths
- The platform maps attack paths to critical assets and prioritizes exposures using exploitability, reachability and business value.Read 14 Oct 2026 · attackiq.com
- Cloud marketplaces
- AttackIQ is available through AWS Marketplace and Azure Marketplace, with AWS ISV Accelerate and Microsoft IP Co-Sell Ready status stated by the vendor.Read 14 Oct 2026 · attackiq.com
- Company headquarters
- LinkedIn lists headquarters at 171 Main Street, Los Altos, California.Read 14 Oct 2026 · linkedin.com
- Company legal name
- AttackIQ, Inc. is identified as a Delaware corporation.Read 14 Oct 2026 · attackiq.com
- Company size
- LinkedIn lists AttackIQ as a privately held company with 51–200 employees.Read 14 Oct 2026 · linkedin.com
- Compliance mapping
- AttackIQ says it maps tests to MITRE ATT&CK and compliance frameworks including NIST CSF, PCI DSS and SOC 2, with audit evidence generation.Read 14 Oct 2026 · attackiq.com
- Control validation
- AttackIQ validates preventive and detective controls against real adversary behavior and measures performance across scenarios, assets and rules.Read 14 Oct 2026 · attackiq.com
- Detection engineering
- The Detection Rule Manager validates detection coverage, measures rule performance and generates detection logic.Read 14 Oct 2026 · attackiq.com
- Documentation and support
- AttackIQ provides a support portal, email and phone support, private Slack support, knowledge-base articles, blueprints, bi-weekly release notes and Academy training.Read 14 Oct 2026 · attackiq.com
- Enterprise scenarios
- AttackIQ Enterprise supports custom multi-stage attack simulations, enterprise-wide orchestration, centralized governance, role-based access, and framework-aligned reporting.Read 8 Oct 2026 · attackiq.com
- Framework
- AttackIQ says its automated security control validation and adversary emulations align with MITRE ATT&CK.Read 8 Oct 2026 · attackiq.com
- Funding
- AttackIQ announced a $44 million Series C round on July 13, 2021, bringing total funding to approximately $79 million.Read 14 Oct 2026 · attackiq.com
- Limit: G2 awareness
- That G2 reviewer said the product needs more advertising so potential users know about it.Read 14 Oct 2026 · g2.com
- Limit: Gartner analytics and integrations
- A Gartner reviewer reported confusing analytics, weak SIEM event-correlation customization, imprecise EDR correlation and limited agent configuration options.Read 14 Oct 2026 · gartner.com
- Limit: learning curve
- TrustRadius review commentary identifies a learning curve for new users and room to improve reporting, customization and remediation guidance.Read 14 Oct 2026 · peerspot.ai
- Limit: operational maturity
- A PeerSpot reviewer advised that buyers need a mature SOC process capable of acting on findings.Read 14 Oct 2026 · aws.amazon.com
- Limits
- AttackIQ Flex contains a smaller subset of content than Enterprise, and users can only run packages available in its menu rather than generate custom reports.Read 8 Oct 2026 · attackiq.com
- Notable news
- AttackIQ announced AVA Agentic OS on July 30, 2026 as an operating system for continuous threat exposure management.Read 14 Oct 2026 · attackiq.com
- Open API
- The Splunk integration is described as using an open API to verify event forwarding and alert generation.Read 14 Oct 2026 · attackiq.com
- Praise: AWS reviewers
- AWS and PeerSpot reviewers credited AttackIQ with validating controls, improving detection of real threats, producing straightforward output and saving manpower.Read 14 Oct 2026 · aws.amazon.com
- Praise: G2 ease of use
- The sole G2 reviewer praised the platform as easy to use and feature-rich.Read 14 Oct 2026 · g2.com
- Praise: Gartner usability and content
- The same Gartner review described navigation as intuitive and praised the large, frequently updated scenario library.Read 14 Oct 2026 · gartner.com
- Rating on AWS Marketplace
- 4.4 out of 5 from 7 ratingsRead 14 Oct 2026 · aws.amazon.com
- Rating on G2
- 4.5 out of 5 from 1 reviewRead 14 Oct 2026 · g2.com
- Rating on Gartner Peer Insights
- 4.5 out of 5 from 141 reviewsRead 14 Oct 2026 · gartner.com
- Rating on GetApp
- 0 out of 5 from 0 reviewsRead 14 Oct 2026 · getapp.com
- Rating on TrustRadius
- 9.1 out of 10 from 3 reviewsRead 14 Oct 2026 · trustradius.com
- Safe production testing
- AttackIQ states that its scoped, read-only testing can run safely in production environments.Read 14 Oct 2026 · attackiq.com
- Safety
- Ready says it uses production-aware emulations reviewed in advance to avoid disrupting operations, outages, or data issues.Read 8 Oct 2026 · attackiq.com
- Security certification
- The UK government service listing states that AttackIQ holds SOC 2 certification.Read 14 Oct 2026 · applytosupply.digitalmarketplace.service.gov.uk
- Supported OS
- AttackIQ Flex states that Windows is currently the only supported operating system.Read 8 Oct 2026 · attackiq.com
- System requirements
- The UK government listing specifies Chrome, Edge, Firefox and Safari support, compatibility with Linux or Unix, macOS and Windows, and a web-based interface; it says mobile use is not supported.Read 14 Oct 2026 · applytosupply.digitalmarketplace.service.gov.uk
- Testing
- AttackIQ Flex provides agentless, on-demand exposure validation using production-safe adversary emulations and self-contained test packages.Read 8 Oct 2026 · attackiq.com
- Threat intelligence
- The Watchtower module identifies adversaries likely to target an organization and turns that intelligence into testable scenarios.Read 14 Oct 2026 · attackiq.com
Plans and prices
Flex Free Free Free testing packages · Adversary research Read 14 Oct 2026 · attackiq.com
Free Free Access to Free Testing Packages · Access to Adversary Research Read 8 Oct 2026 · attackiq.com
Flex Pay-as-you-go $300, paid once Credit-based purchases · Value-based discounts · Adversary research Read 14 Oct 2026 · attackiq.com
Pay-as-you-go $300, paid once Credit-based Purchases · Access to Value-based Discounts · Access to Adversary Research Read 8 Oct 2026 · attackiq.com
Flex Monthly $4,995 a month Unlimited testing for 30 days · Adversary research · 1 hour professional services Read 14 Oct 2026 · attackiq.com
Monthly $4,995 a month Unlimited Testing (30 Days) · Access to Adversary Research · 1 Hour of Professional Services Read 8 Oct 2026 · attackiq.com
AttackIQ Enterprise Priced on request Quarterly subscription Pricing details available by contacting a channel partner or requesting a quote Read 8 Oct 2026 · attackiq.com
Flex Yearly Price not published Contact us Programmatic testing all year Read 14 Oct 2026 · attackiq.com
Yearly Priced on request Unlimited Testing · Access to Adversary Research · 6 Hours of Professional Services Read 8 Oct 2026 · attackiq.com
Where Specifiction places it
- Attack Surface Management Software#1 of 339.4
- Offensive Security#1 of 229.4
- Breach and Attack Simulation Software#1 of 209.5
- Exposure Management Software#1 of 209.5