Audience
Threat intelligence solution for organizations
About MITRE ATT&CK
MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. With the creation of ATT&CK, MITRE is fulfilling its mission to solve problems for a safer world — by bringing communities together to develop more effective cybersecurity. ATT&CK is open and available to any person or organization for use at no charge. Adversaries may execute active reconnaissance scans to gather information that can be used during targeting. Active scans are those where the adversary probes victim infrastructure via network traffic, as opposed to other forms of reconnaissance that do not involve direct interaction.
Other Popular Alternatives & Related Software
Recorded Future
Recorded Future is the world’s largest provider of intelligence for enterprise security. By combining persistent and pervasive automated data collection and analytics with human analysis, Recorded Future delivers intelligence that is timely, accurate, and actionable. In a world of ever-increasing chaos and uncertainty, Recorded Future empowers organizations with the visibility they need to identify and detect threats faster; take proactive action to disrupt adversaries; and protect their people, systems, and assets, so business can be conducted with confidence. Recorded Future is trusted by more than 1,000 businesses and government organizations around the world. The Recorded Future Security Intelligence Platform produces superior security intelligence that disrupts adversaries at scale. It combines analytics with human expertise to unite an unrivaled variety of open source, dark web, technical sources, and original research.
Learn more
Validato
Validato allows IT and Security teams to test the effectiveness of security controls by simulating adversarial behaviors based on known threat scenarios.
Validato provides unbiased data and finding on how effective security controls are at detecting and protecting against exploitation of MITRE ATT&CK Techniques.
If you are looking to implement a Threat-Informed Defense approach to cyber defense, then Validato is an excellent choice for you.
Learn more
SCYTHE
SCYTHE is an adversary emulation platform for the enterprise and cybersecurity consulting market. The SCYTHE platform enables Red, Blue, and Purple teams to build and emulate real-world adversarial campaigns in a matter of minutes. SCYTHE allows organizations to continuously assess their risk posture and exposure. SCYTHE moves beyond just assessing vulnerabilities. It facilitates the evolution from Common Vulnerabilities and Exposures (CVE) to Tactics, Techniques, and Procedures (TTPs). Organizations know they will be breached and should focus on assessing detective and alerting controls. Campaigns are mapped to the MITRE ATT&CK framework, the industry standard and common language between Cyber Threat Intelligence, Blue Teams, and Red Teams. Adversaries leverage multiple communication channels to communicate with compromised systems in your environment. SCYTHE allows you to test detective and preventive controls for various channels.
Learn more
Saner CVEM
SecPod Saner CVEM is a continuous vulnerability and exposure management platform designed to help organizations discover, prioritize, and remediate risks before attackers can exploit them. The platform unifies asset discovery, vulnerability detection, compliance management, endpoint management, posture anomaly detection, patch management, exposure visibility, and risk prioritization in one workflow. Saner CVEM uses AI-powered asset visibility, machine-learning anomaly detection, and intelligent prioritization to identify both known vulnerabilities and exposure gaps that traditional scanners may miss. It evaluates risk using factors such as EPSS, CISA KEV status, SSVC, asset criticality, business context, MITRE ATT&CK mapping, and CWE mapping. The platform also supports integrated patch deployment, posture improvement, compliance automation, and continuous scanning across Windows, Linux, macOS, AIX, servers, endpoints, and third-party applications.
Learn more
Integrations
Company Information
MITRE ATT&CK
United States
attack.mitre.org
Videos and Screen Captures
Other Useful Business Software
$300 Free Credits to Build on Google Cloud
Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
Product Details
Platforms Supported
Cloud
Training
Documentation
Support
Online
