No. 2 of 19 ·Breach and Attack Simulation Software

Infection Monkey

Web · Windows · Linux · Self-hosted

Freedom report

Three barsScore 6.5

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely3 of 6 device platforms
DocumentedPlans, terms and facts published

Infection Monkey is ranked #2 of 19 in breach and attack simulation software on Freedom251. It runs on Linux, Self-hosted, Web, Windows. There is a free plan.

Infection Monkey plans and pricing

All plans

Free Free Open-source breach and attack simulation tool techdocs.akamai.com · 5 Oct 2026

Compared on breach and attack simulation software

Free plan: Yes
Attack simulation modes: agent-based
Included attack surfaces: local networks; internal servers; on-premises data centers; cloud-based data centers; open services
Custom attack scenarios: Yes
Deployment model: hybrid

Best Infection Monkey alternatives

See all 18

Two bars Atomic Red Team Free tier No. 1Free6.5 Two bars MITRE Caldera Free tier No. 3Free6.5 One bar OpenAEV Free tier No. 4Free6.5 One bar Pentera Platform Paid plans No. 5—5.6 No signal BlackNoise BAS Paid plans No. 6—5.4 No signal Cymulate Platform Paid plans No. 7—5.4

The record

Purpose: Infection Monkey is an open-source breach and attack simulation tool for testing data center resilience to perimeter breaches and internal server infection.
Architecture: It consists of Monkey Agent, which scans and simulates attack techniques, and Monkey Island Server, a C&C web server with a user GUI.
Network map: The product maps visible network machines, accessible services, and potential propagation routes.
Security report: Its report presents security issues discovered or exploited by the agents.
AWS integration: The documented integration uses AWS Systems Manager to execute Infection Monkey on EC2 instances.
Plugin support: Plugins extend functionality and can be installed, updated, removed, or uploaded through the Monkey Island interface.
Supported environments: Akamai says the product supports on-premises environments, containers, and public and private clouds.
Credential protection: The FAQ says sensitive data such as passwords, SSH keys, and hashes are stored encrypted in the Island database and sent to agents over HTTPS.
Account security: On first launch, users create credentials, after which the Monkey Island server is accessible only with those credentials.
Safe operation: The FAQ says the product avoids exploits or attacks that may impact victim systems, including EternalBlue.
Internet access: Internet access is not required for operation; when available, it is used to check for updates and whether machines can reach the internet.
Platform requirements: The documented Monkey Island runs on x86-64 processors, with Linux and Windows operating systems listed as supported.
Support: The project offers a public Slack workspace, support email, and GitHub issue reporting.
Intended users: Akamai describes the tool as a way for organizations to validate security controls and identify how attackers might exploit network security gaps.
Price from: Free

Where it ranks on Freedom251

Best Breach and Attack Simulation Software in 2026#2 of 19

Is Infection Monkey yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Infection Monkey

Sources

techdocs.akamai.com/infection-monkey/docs/welcome-infection· checked 5 Oct 2026
techdocs.akamai.com/infection-monkey/docs/integrations· checked 5 Oct 2026
techdocs.akamai.com/infection-monkey/docs/plugins· checked 5 Oct 2026
akamai.com/products/akamai-guardicore-segmentation· checked 5 Oct 2026
techdocs.akamai.com/infection-monkey/docs/frequently-asked-· checked 5 Oct 2026
techdocs.akamai.com/infection-monkey/docs/accounts-and-secu· checked 5 Oct 2026
techdocs.akamai.com/infection-monkey/docs/system-requiremen· checked 5 Oct 2026