Picus Security earns Best AI Solution honours for its AI-powered continuous validation platform, which aims to operationalise Continuous Threat Exposure Management (CTEM) through the safe emulation of real-world adversary techniques.

The platform uses agentic AI to transform threat intelligence, CVEs and attacker activity into complex attack simulations mapped to the MITRE ATT&CK framework. These simulations are designed to help organisations determine whether vulnerabilities, misconfigurations and risky behaviours are genuinely exploitable within their specific environments.

Picus differentiates itself through rapid simulation generation, minimal infrastructure requirements and broad validation capabilities spanning security controls, detections, attack paths, cloud environments, endpoints, identity systems and AI applications. The company says the platform delivers measurable business value through evidence-based remediation, reduced operational overhead and strong ROI, with reported outcomes including lower patching workloads, faster remediation cycles and significant analyst time savings.

Judges described Picus as one of the strongest submissions overall, praising the clear connection between its AI capabilities and measurable security outcomes. The judges highlighted the platform’s ability to turn threat intelligence, CVEs and even news events into executable ATT&CK-mapped attack simulations, calling the Smart Threat capability and adversary emulation approach both mature and highly relevant to enterprise security operations.

“A highly mature, evidence-backed AI security platform that delivers clear operational impact and stood out as a winning entry.”

The judging panel also pointed to Picus’ operational results, including an 86% reduction in patch backlogs, a reduction in mean time to remediation (MTTR) from 74 days to 14 days, and more than 100% year-on-year growth. Its ability to validate exploitability in live production environments and unify CTEM practices across hybrid and cloud estates was recognised as a robust, operationally focused-approach that helps organisations move from theoretical risk assessment to continuous, evidence-based prioritisation.

Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.