Skip to content
SPECIFICTION
Get listed

FourCore ATTACK vs OpenAEV

FourCore ATTACK

fourcore.io

OpenAEV

filigran.io

Side by side

FigureFourCore ATTACKOpenAEV
Price from—Free
Free plan—Yes
Free trial—Yes
Open source——
WebYesYes
WindowsYes—
LinuxYesYes
API—Yes
Self-hostedYesYes
Plans published02
Spec score · Breach and Attack Simulation Software7.8 (#7)7.9 (#5)
DeploymentThe FAQ says FourCore ATTACK is available as an AWS-hosted SaaS platform and invites customers to contact FourCore about on-premises solutions.OpenAEV supports cloud, on-premise, and multi-tenant deployments, with or without an endpoint agent; Enterprise Edition also lists air-gapped and bring-your-own-cloud options.
IntegrationsListed integrations include CrowdStrike, SentinelOne, Microsoft Sentinel, QRadar, Trend Micro Vision One, Proofpoint, Cisco Secure Email, Cortex XDR, and ServiceNow.The product page states that OpenAEV has 30+ integrations and describes connecting OpenCTI, threat feeds, EDR/XDR, SIEM, and SOC playbooks.
Intended usersThe platform is presented for security teams responsible for detection, response, and control assurance, including SecOps and detection engineering teams.Filigran describes OpenAEV as serving cybersecurity and crisis management teams, and says its Enterprise Edition is trusted by governments, financial institutions, and enterprises.
PurposeFourCore ATTACK continuously simulates real-world cyberattacks to validate whether security controls work.OpenAEV is an Adversarial Exposure Validation platform for creating attack simulations, stress tests, and crisis management exercises.

Plans

FourCore ATTACK

No plans published.

FourCore ATTACK pricing →

OpenAEV

  • Community EditionFree
  • Enterprise EditionPriced on request

OpenAEV pricing →

In their own words

FourCore ATTACK

FourCore ATTACK is an adversarial exposure validation platform that simulates cyberattacks to assess how security controls respond. Its threat intelligence connects current threats with an organization’s environment to help prioritize tests, and controlled campaigns emulate adversary tactics, techniques, procedures, indicators, and artifacts. Coverage includes endpoints, email, WAF, network segmentation, SIEM, EDR, XDR, firewalls, DLP, and exfiltration controls. Results map to MITRE ATT&CK techniques and classify outcomes as detected, partially detected, blocked, or missed. Campaign evidence can connect simulated behavior with control responses, telemetry, alert timing, and recommended next actions. Teams can generate or refine Sigma, YARA, Snort, and configuration changes, then retest after updates. Listed integrations include CrowdStrike, SentinelOne, Microsoft Sentinel, QRadar, Proofpoint, Cisco Secure Email, and ServiceNow. FourCore describes the product as AWS-hosted SaaS, with on-premises solutions available by discussion. Lightweight Windows and Linux agents connect to the SaaS platform. Simulations are designed not to disrupt or destroy target systems. Pricing is on request.

Visit fourcore.io

OpenAEV

OpenAEV is an Adversarial Exposure Validation platform for creating cyberattack simulations, stress tests, and crisis exercises. Its breach and attack simulations draw on cyber threat intelligence and map scenarios to MITRE ATT&CK and ATLAS. Attack Chaining links actions into paths based on findings; teams can orchestrate these manually or use dedicated agents. Structured tabletop exercises are available for evaluating readiness, escalation, coordination, communication, and response. Adversarial Exposure Scoring tracks posture over time and maps coverage to MITRE ATT&CK and domain-based controls. The product lists more than 30 integrations and connections to OpenCTI, threat feeds, EDR/XDR, SIEM, and SOC playbooks. Deployment options include cloud, on-premise, and multi-tenant setups, with air-gapped and bring-your-own-cloud options listed for Enterprise Edition. Community Edition is free forever for on-premise core simulations and tabletop exercises, with community support. Enterprise Edition pricing is quote-based, and its SaaS trial lasts 30 days. Components are available as Docker images and manual installation packages; Kubernetes is recommended for production deployments.

Visit filigran.io