FourCore ATTACK vs OpenAEV
FourCore ATTACK
fourcore.ioOpenAEV
filigran.ioSide by side
| Figure | FourCore ATTACK | OpenAEV |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 2 |
| Spec score · Breach and Attack Simulation Software | 7.8 (#7) | 7.9 (#5) |
| Deployment | The FAQ says FourCore ATTACK is available as an AWS-hosted SaaS platform and invites customers to contact FourCore about on-premises solutions. | OpenAEV supports cloud, on-premise, and multi-tenant deployments, with or without an endpoint agent; Enterprise Edition also lists air-gapped and bring-your-own-cloud options. |
| Integrations | Listed integrations include CrowdStrike, SentinelOne, Microsoft Sentinel, QRadar, Trend Micro Vision One, Proofpoint, Cisco Secure Email, Cortex XDR, and ServiceNow. | The product page states that OpenAEV has 30+ integrations and describes connecting OpenCTI, threat feeds, EDR/XDR, SIEM, and SOC playbooks. |
| Intended users | The platform is presented for security teams responsible for detection, response, and control assurance, including SecOps and detection engineering teams. | Filigran describes OpenAEV as serving cybersecurity and crisis management teams, and says its Enterprise Edition is trusted by governments, financial institutions, and enterprises. |
| Purpose | FourCore ATTACK continuously simulates real-world cyberattacks to validate whether security controls work. | OpenAEV is an Adversarial Exposure Validation platform for creating attack simulations, stress tests, and crisis management exercises. |
Plans
In their own words
FourCore ATTACK
FourCore ATTACK is an adversarial exposure validation platform that simulates cyberattacks to assess how security controls respond. Its threat intelligence connects current threats with an organization’s environment to help prioritize tests, and controlled campaigns emulate adversary tactics, techniques, procedures, indicators, and artifacts. Coverage includes endpoints, email, WAF, network segmentation, SIEM, EDR, XDR, firewalls, DLP, and exfiltration controls. Results map to MITRE ATT&CK techniques and classify outcomes as detected, partially detected, blocked, or missed. Campaign evidence can connect simulated behavior with control responses, telemetry, alert timing, and recommended next actions. Teams can generate or refine Sigma, YARA, Snort, and configuration changes, then retest after updates. Listed integrations include CrowdStrike, SentinelOne, Microsoft Sentinel, QRadar, Proofpoint, Cisco Secure Email, and ServiceNow. FourCore describes the product as AWS-hosted SaaS, with on-premises solutions available by discussion. Lightweight Windows and Linux agents connect to the SaaS platform. Simulations are designed not to disrupt or destroy target systems. Pricing is on request.
OpenAEV
OpenAEV is an Adversarial Exposure Validation platform for creating cyberattack simulations, stress tests, and crisis exercises. Its breach and attack simulations draw on cyber threat intelligence and map scenarios to MITRE ATT&CK and ATLAS. Attack Chaining links actions into paths based on findings; teams can orchestrate these manually or use dedicated agents. Structured tabletop exercises are available for evaluating readiness, escalation, coordination, communication, and response. Adversarial Exposure Scoring tracks posture over time and maps coverage to MITRE ATT&CK and domain-based controls. The product lists more than 30 integrations and connections to OpenCTI, threat feeds, EDR/XDR, SIEM, and SOC playbooks. Deployment options include cloud, on-premise, and multi-tenant setups, with air-gapped and bring-your-own-cloud options listed for Enterprise Edition. Community Edition is free forever for on-premise core simulations and tabletop exercises, with community support. Enterprise Edition pricing is quote-based, and its SaaS trial lasts 30 days. Components are available as Docker images and manual installation packages; Kubernetes is recommended for production deployments.