AttackIQ Platform vs Stratus Red Team
AttackIQ Platform
attackiq.comStratus Red Team
stratus-red-team.cloudSide by side
| Figure | AttackIQ Platform | Stratus Red Team |
|---|---|---|
| Price from | $4,995/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 9 | 0 |
| Spec score · Offensive Security | 9.4 (#1) | 7.3 (#14) |
| Spec score · Breach and Attack Simulation Software | 9.5 (#1) | 7.3 (#12) |
| Founded | LinkedIn and Crunchbase list AttackIQ as founded in 2013. | 2010 |
| Headquarters | AttackIQ lists its headquarters at 171 Main Street, Suite 656, Los Altos, California 94022. | New York City, New York, USA |
| Purpose | AttackIQ describes its platform as a CTEM platform for modeling adversary behavior, prioritizing attack paths, validating controls, and measuring security improvement. | Stratus Red Team is a self-contained binary for running granular offensive attack techniques against a live cloud environment to validate detections. |
Plans
AttackIQ Platform
- Flex FreeFree
- FreeFree
- Flex Pay-as-you-go$300, paid once
- Pay-as-you-go$300, paid once
- Flex Monthly$4,995 a month
- Monthly$4,995 a month
- AttackIQ EnterprisePriced on request
- Flex YearlyPrice not published
- YearlyPriced on request
In their own words
AttackIQ Platform
AttackIQ Platform has no write-up on Specifiction yet; its figures are above.
Stratus Red Team
Stratus Red Team is a free, open-source Go binary for running specific offensive attack techniques against a live cloud environment and checking detections. Its techniques map to MITRE ATT&CK, with coverage for AWS, Azure, GCP, Kubernetes, Amazon EKS, and Entra ID. For each technique, it can prepare prerequisites, detonate the activity, reverse side effects, and remove prerequisites. Terraform creates and removes required infrastructure, and Stratus downloads its own Terraform binary. Installation options include Go, Homebrew, pre-built Linux, Windows, and macOS binaries, and Docker. The tool can also operate as a Go library for automation and custom techniques. It supports Linux, macOS, Windows, API use, and self-hosting. Documentation recommends an administrator role in a sandbox account or test cluster, not production infrastructure. Kubernetes clusters must already exist, AWS customer-provided detonation infrastructure is unsupported, and Azure resources are fixed to West US.