Valitrix is a breach and attack simulation (BAS) platform that continuously validates your security controls against real-world adversary techniques mapped to the MITRE ATT&CK framework. Unlike point-in-time assessments, Valitrix runs automatically so you always know your current security posture.
FAQ
Frequently Asked Questions.
Answers to common questions about breach and attack simulation, security control validation, and how Valitrix helps security teams measure and improve their defences.
Platform & ProductAbout the
About the
Valitrix platform.
Valitrix deploys lightweight agents across your infrastructure. These agents execute attack simulations — from initial access through to exfiltration — and report on which security controls detected, blocked, or missed each technique. Results are presented in real-time dashboards and exportable reports.
Valitrix covers 200+ techniques across all 14 MITRE ATT&CK tactical categories, including reconnaissance, initial access, execution, persistence, privilege escalation, defense evasion, credential access, discovery, lateral movement, collection, command & control, exfiltration, and impact. The library is continuously updated.
Valitrix agents support Windows (Server 2016+, Windows 10/11), Linux (Debian, Ubuntu, RHEL, CentOS), and macOS (11+). Cross-platform campaigns test lateral movement across mixed-OS environments.
No. All Valitrix simulations are non-destructive. Agents execute controlled, inert simulations that trigger security controls without causing data loss, system instability, or service interruption. Payloads are synthetic — they cannot cause real damage.
Plans & PricingPlans, pricing,
Plans, pricing,
and trials.
Valitrix offers three tiers: Basic (1 agent, 1 user, 50 threat group attacks), Professional (4 agents, 3 users, full attack library with priority support), and Enterprise (custom agents, up to 10 users, full library with 24/7 incident response). Contact us for custom pricing on larger deployments.
Yes. We offer a scoped proof-of-concept engagement for qualified Enterprise prospects. Contact our sales team via the schedule meeting page to discuss your requirements and arrange a PoC.
Valitrix is priced as a subscription based on the number of agents and users. All plans include platform access, the attack library, reporting, and support at the tier level. Contact us for a customized quote.
Security & ComplianceSecurity, privacy,
Security, privacy,
and compliance.
Yes. Valitrix is designed for regulated industries. Simulations are non-destructive, results remain within your environment, and the platform supports compliance frameworks including ISO 27001, SOC 2, NIST, and Cyber Essentials. Talk to our team about your specific regulatory requirements.
Valitrix agents collect simulation telemetry and security control response data within your environment. This data is used to generate your reports. We do not collect or retain your business data. For full details, see our Privacy Policy.
Yes. Simulation scope, target systems, timing windows, and technique categories are all configurable. Enterprise customers can define exclusion lists and limit simulations to specific network segments or system groups.
ImplementationDeployment,
Deployment,
onboarding, and integrations.
Basic and Professional deployments typically complete agent installation within a few hours. Enterprise deployments with custom scoping and large agent counts are typically completed within 1-2 weeks including onboarding and first simulation review.
No. Valitrix is designed to be usable by security teams of all sizes, including organisations without a dedicated red team. The platform guides you through simulation setup and provides clear remediation guidance. Our support team is available to assist with initial configuration.
Valitrix generates standardized output (JSON/CSV) compatible with major SIEM platforms. Enterprise customers receive API access to push findings directly into security workflows, ticketing systems (Jira, ServiceNow), and dashboards.
Still have questions?
Still Have Questions?
Our team is happy to walk through any aspect of breach and attack simulation that matters to your organisation.