Picus Security

Picus Security

Tampa, FL, United States

Offensive SecurityPenetration TestingDetection & ResponseThreat Intelligence
Founded 2013Serves Enterprise
Profile last updated: August 14, 2026

About

Founded in 2013, Picus Security is a cybersecurity company based in Tampa, United States working in offensive security, penetration testing, detection & response +2 more.

Picus Security is a cybersecurity vendor specialising in security validation. Its platform combines Breach and Attack Simulation, automated penetration testing and exposure validation into a single continuous validation loop. It tests whether security controls such as EDR, SIEM, firewalls, WAFs, email and web gateways, and DLP actually prevent, detect and log real-world attack techniques, and provides vendor-specific mitigation and detection content to close gaps, followed by re-validation. Picus Labs, its research group, maintains the threat library and produces threat research and the Blue Report benchmark. The company was founded in 2013 and has received funding from investors including Riverwood Capital, Turkven, Bek Ventures and Mastercard. The platform is offered as SaaS, with on-premises and air-gapped deployment options for regulated environments.

Location

Tampa, United States

Founded

2013

Focus areas

Breach and Attack SimulationAutomated Penetration TestingExposure ValidationContinuous Threat Exposure ManagementSecurity Control Validation

Languages

ENTR

Services & products

Security domains

Offensive SecurityPenetration TestingDetection & ResponseThreat IntelligenceCloud Security

How they deliver

Software

Products

Picus Security Validation Platform

Breach and Attack Simulation

Continuously simulates real-world adversary techniques against security controls such as EDR, SIEM, firewalls, WAF and email security to validate whether they prevent, detect and log attacks, and provides vendor-specific mitigation guidance for re-validation.

Picus Swarm

AI security validation

A swarm of specialist AI agents that synthesizes threat signals, runs adversary-informed simulations, validates defenses and supports remediation, with configurable autonomy levels.

Picus Threat Library

Threat intelligence content

Library of attack techniques, threat scenarios and mitigation and detection content maintained by Picus Labs, updated daily.

Customers

Enterprise

Industries served

Financial InstitutionsOil & Gas

Compliance & partners

Compliance frameworks

GDPRISO 27001PCI DSSNIST 800-53SOC 2

Technology partners

CrowdStrikePalo Alto NetworksFortinetSplunkMicrosoft SentinelAWS Security HubMastercard

Credentials & affiliations

Certifications

SOC 2 Type 2

Awards

Cool Vendor

Gartner2019

Global Company of the Year

Frost & Sullivan2026

People

Management & team (3)

Other cybersecurity companies in United States

View all