Valitrix BAS Platform

What Valitrix BAS Platform is

Valitrix BAS Platform is a breach and attack simulation service that continuously checks security controls against adversary techniques mapped to MITRE ATT&CK. Its attack library covers 200+ techniques across all 14 tactical categories. Agent-based simulations validate endpoint, email, network and SIEM controls; the platform describes them as controlled and non-destructive, using synthetic payloads intended not to cause damage or interrupt production.

Teams can configure the simulation scope, target systems, timing windows and technique categories. Enterprise customers can additionally set exclusions and restrict tests to selected network segments or system groups. Results are mapped to MITRE ATT&CK and delivered through real-time dashboards and exportable reports. Valitrix says it supports evidence reporting for ISO 27001, SOC 2, NIST and Cyber Essentials. It names Splunk, Microsoft Sentinel, IBM QRadar and Elastic among the SIEMs it validates, and describes Enterprise API access for workflows that include Jira and ServiceNow. Valitrix says its agents collect simulation telemetry and control-response data for reporting, not customers’ underlying business data. Pricing is on request, and the available tiers vary in agent and user limits, attack coverage and support. Qualified Enterprise prospects can request a scoped proof-of-concept engagement.

Who it suits

Valitrix says it serves enterprise customers in financial services, healthcare, critical infrastructure and technology. It is aimed at CISOs, SOC teams and security architects who want to assess security controls against ATT&CK-mapped simulations and review evidence in reports.

Limits

Basic includes up to 1 agent, up to 1 user and 50 threat group attacks. Professional includes up to 4 agents and up to 3 users; Enterprise allows a custom agent count and up to 10 users. Basic and Professional provide the Full Valitrix Attack Library only in Professional and Enterprise; Basic lists 50 threat group attacks.

Getting started

1. Visit https://valitrix.com/ to contact the provider about plans and pricing.
2. Request a scoped proof-of-concept engagement if you are a qualified Enterprise prospect.
3. Choose a plan: Basic, Professional or Enterprise; pricing is on request.
4. Install supported agents on Windows Server 2016 or later, Windows 10/11, Debian, Ubuntu, RHEL, CentOS or macOS 11 and later.
5. Configure the simulation scope, target systems, timing windows and technique categories.
6. Enterprise customers can set exclusions or limit tests to selected network segments or system groups.

Verdict

Consider Valitrix if your organization needs continuous, ATT&CK-mapped simulations across several control layers and report-based evidence. Look elsewhere if you require a free plan or need pricing before contacting the provider.