Picus Security

What it does

Breach and Attack Simulation (BAS) automates attack simulations to validate and optimize security controls like firewalls, SIEMs, and EDRs. BAS equips security teams with insights to ensure defenses are effective and ready against cyber threats.

Picus proves what attackers can exploit and what your defenses stop, turning every exposure into a defensible decision at the speed AI-era threats demand.

One platform that proves what attackers can exploit and what your defenses stop, turning every exposure into a defensible decision, at the speed AI-powered threats now demand. Adversaries now weaponize new CVEs in hours, not weeks, and break out in under 30 minutes. Finding the exposure was never the hard part, proving the right call is. Patch, mitigate, monitor, or accept, every call rests on scores or assumptions. When attacks happen in minutes, teams cannot prove which is defensible. Known exposure accumulates faster than any team can safely remediate. With ~132 new CVEs a day and fewer than 0.5% ever patched, the backlog grows and the risk window never closes. Teams know which…from picussecurity.com

• 
  Persistent Security IndustriesApr 2026 · persistent-security.net · ▲68

  Attack simulations that prove your defenses work

• 
  Endgame – An AWS Pentesting tool to backdoor or expose AWS resources2021 · github.com · ▲368
• 
  Confidential computing for high-assurance RISC-V embedded systems2025 · github.com · ▲103

  Dear HN community! Looking forward to hearing your feedback on ACE (assured confidential execution), technology that implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware. We target high-assurance systems that can benefit from compartmentalization and hardware-backed isolation. The key ingredient called security monitor (firmware) is implemented in Rust. The formal specification is defined as annotations directly in code and gets translated to Coq using RefinedRust automation. ACE design is now part of the…

• 
  SOOS2021 · soos.io · ▲68

  Developer security, license, compliance and testing platform

• 
  Breach Insider – Detect a data breach using realistic pseudo-users2017 · breachinsider.com · ▲71
• 
  Automatic account and SSH access provisioning tool for server admins2013 · bastio.com · ▲15

  Discover secure AI from Bastio AI Security. Govern Shadow AI and ensure EU AI Act compliance with our enterprise platform. Start your AI security audit today.

• 
  SimCity, but with Permits▲936

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 4d ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 16d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 17d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 11d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 15d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 25d ago · space.bl2.net

• 
  Lovable▲1,477

  Hey HN! Previous CERN physicist turned hacker here. We've developed a way to make AI coding actually work by systematically identifying and fixing places where LLMs typically fail in full-stack development. Today we're launching as Lovable (previously gptengineer.app) since it's such a big change. The problem? AI writing code typically make small mistakes and then get stuck. Those who tried know the frustration. We fixed most of this by mapping out where LLMs fail in full-stack dev and engineering around those pitfalls with prompt chains. Thanks to this, in all comparisons I found with: v0,…

  AI · 2024 · lovable.dev

• 
  Superchat▲1,427

  AI Agents for WhatsApp Business, Instagram & Co

  Growth · 2024 · superchat.com

• 
  Postiz▲1,188

  Streamline your social media with Postiz. Schedule posts, analyze performance, and manage all accounts in one place.

  Dev tools · 2024 · postiz.com

• 
  I built a(nother) house optimized for LAN parties▲1,117

  I wasn't quite sure if this qualified as "Show HN" given you can't really download it and try it out. However, dang said[0]: > If it's hardware or something that's not so easy to try out over the internet, find a different way to show how it actually works—a video, for example, or a detailed post with photos. Hopefully I did that? Additionally, I've put code and a detailed guide for the netboot computer management setup on GitHub: https://github.com/kentonv/lanparty Anyway, if this shouldn't have been Show HN, I apologize! [0]…

  Dev tools · 2024 · lanparty.house

• 
  Raycast Notes▲1,058

  Unlock a new level productivity with AI, Cloud Sync and more

  Work · 2024 · raycast.com

• 
  Cap▲1,047

  Beautiful screen recordings, owned by you. 100% open source.

  Dev tools · 2024 · cap.so