TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Metasploit

    Score9 out of 10
    N/AMetasploit is open source network security software described by Rapid7 as the world’s most used penetration testing framework, designed to help security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness.N/A

    Picus Security

    Score8.2 out of 10
    N/APicus Security, headquartered in San Francisco, offers Continuous Security Validation and Mitigation as the most proactive approach to ensure cyber-resilience. The Picus Platform measures the effectiveness of defenses by using emerging threat samples in production environments, providing the insight required to build the right security strategy to better manage complex operations.N/A
    Pricing
    MetasploitPicus Security
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    MetasploitPicus Security
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    User Ratings
    MetasploitPicus Security
    Likelihood to Recommend
    10.0
    (5 ratings)
    9.0
    (1 ratings)
    Support Rating
    7.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    MetasploitPicus Security
    Likelihood to Recommend
    Rapid7
    It is easy to use with sufficient documentation on how to use the tools for end users or newbies. Experienced testers will find it easy to customise and configure the test cases. Just wished that I could have taken up a course on using this tool in my study days so that I could had explored more and improved my familiarity with the tool, unlike when working where access and time to explore the other features of the tool is limited
    Incentivized
    Read full review
    Picus Security
    If you want to analyze the full path focusing on the signatures it’s the best product in the market. If you want to test phishing, data exfiltration/DLP, DNS I don’t recommend Picus. Scenario based attacks also lacking. However Picus support is awesome and I like the development team. When we open a case, they’ll always return with the right answer
    Incentivized
    Read full review
    Pros
    Rapid7
    • Easy to use.
    • Many exploits available.
    • Multi-platform.
    Incentivized
    Read full review
    Picus Security
    • It has thousands of signatures and up-to-date attack vectors (It's the largest set in the market)
    • Attack vectors are mapped with existing vendors like Checkpoint and Mcafee, where you don't spend time finding out which cve mapped to which protection
    • Ability to focus/highlght solely new threats, it's superb for 0days and up-to-date protections. As there are always timing issue between updates and apply the updates on the products.
    • Blocked vs not blocked ratios on the dashboard with drill down menu specifiying the set of protections or signatures on the defensive measures
    • Already mapped mitre att&ck framework on the dasboard. SOC and analyst team using the Mitre framework.
    • Detection analytics enhance the analytics capabilities with pinpoint accuracy where to focus and how to prevent
    • Timeline and scheduled reports from the dashboard in flexible format
    Incentivized
    Read full review
    Cons
    Rapid7
    • More robust menus
    • Better plugin inter-operation
    Incentivized
    Read full review
    Picus Security
    • Visualization of network and the products
    • Complex/Scenario based attacks
    • Phishing tests
    • DNS and Data exfiltration attacks
    • Automatic action through the apis for the products on the path
    • Strategical and tactical reports for Cisos
    • Automatic SOAR entegration with already builtin playbooks
    Incentivized
    Read full review
    Support Rating
    Rapid7
    We don't use it.
    Incentivized
    Read full review
    Picus Security
    No answers on this topic
    Alternatives Considered
    Rapid7
    Metasploit is the most well-known tool in the average pen tester's toolkit. It's hard to compare to its neighbor's due to its size and following.
    Incentivized
    Read full review
    Picus Security
    We use other vendors Verodin, AttackIQ, SafeBreach, Cymulate etc. All of them have their advantages and disadvantages. Please take a look at TrustRadius reviews of each product. I don’t want to go head to head for each product in this
    review. I select Picus because it's local startup company in our region. I like their support and engineering team. Support is marvelous. Product is giving what we expected from the product. Price is adequate. Reporting and dashboard is superb.
    Incentivized
    Read full review
    Return on Investment
    Rapid7
    • Positive: Improves efficiency of our network penetration testing operations.
    • Positive: Allows for collaboration and information sharing during a penetration test.
    Incentivized
    Read full review
    Picus Security
    • With Picus we have the tangible KPIs for the security
    • Detetcion and Prevention rates for the latest attacks are significantly increased
    • We work with many security vendors. We use picus scores and share specific outputs with the company in case of decreasing score rates where the development and product team analyzes their updates or product engines to increase the rates.
    • It helps our strategic plans where to focus and invest for the following years and planning/prioritizing the security budgets to specific highlighted areas
    Incentivized
    Read full review
    ScreenShots