MITRE Caldera
MITRE Caldera: A flexible, ATT&CK-based framework for automated and manual red-team operations. Ranked #13 of 20 in Breach and Attack Simulation Software by our editors (6.0/10); pricing: Open source; best for red teams wanting a flexible open-source framework.
At a glance
- Editor score6.0 / 10
- PricingOpen source
- Best forRed teams wanting a flexible open-source framework
- Paid fromNone
- Facts checked20 Sep 2026
Where it wins
- Automates adversary emulation with ATT&CK abilities and profiles
- Supports agents, operation planners, a web interface, and REST API
- Extends across endpoints, networks, hosts, and OT through plugins
Where it doesn't
- Uses an on-premises, self-hosted deployment model
- Simulation mode is agent-based
- Broader capabilities depend on configuring its plugin architecture
Our verdict on MITRE Caldera
MITRE Caldera is an open-source adversary emulation platform for cybersecurity teams conducting breach-and-attack simulation and red-team work. It supports automated operations, manual red-team engagements, and automated incident response through deployed agents. Its ATT&CK-based abilities and adversary profiles make it suited to teams that want structured exercises across hosts, networks, endpoint security, and operational-technology environments.
The published pricing model is open source, rather than a tiered subscription structure. Caldera runs through a web interface and REST API and supports Linux, macOS, and self-hosted deployments. Its plugin architecture extends the framework with agents, reporting, TTP collections, training, and OT capabilities. This combination gives red teams room to shape operations around custom scenarios while retaining a common platform for execution and reporting.
Its standout strength is operational flexibility. Teams can configure agents and beaconing, choose atomic, batch, or tactic-bucket operation planners, and work with ATT&CK abilities and adversary profiles. Caldera also produces JSON operation reports and event-log exports, supporting review after an exercise. The trade-off is its on-premises, self-hosted deployment model and agent-based simulation mode. Teams seeking a hosted product or a different simulation approach should consider an alternative. Caldera is a strong fit for red teams that value extensibility, ATT&CK alignment, and control over their testing environment.
MITRE Caldera pricing
MITRE Caldera fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | None |
| Attack simulation modes | Agent-based |
| Included attack surfaces | hosts, networks, endpoint security, OT environments |
| MITRE ATT&CK mapping | Yes |
| Custom attack scenarios | Yes |
| Continuous scheduling | Not verified |
| Deployment model | On-premises |
| Scenario library size | Not verified |
| Deployment | Self-hosted |
| Platforms | Web, Linux, macOS |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Open source |
| Website | caldera.apache.org |
| Facts checked | 20 Sep 2026 |
Alternatives to MITRE Caldera
- SafeBreach ValidateBroad, continuous BAS with custom attack creation and extensive security integrations.9.0
- Picus Security PlatformDeep, multi-surface validation for teams that need threat-library coverage.8.2
- SCYTHEA broad hybrid platform for validating defenses against named threat actors.7.8
See all MITRE Caldera alternatives →
Used MITRE Caldera? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used MITRE Caldera for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
MITRE Caldera is listed in our Breach and Attack Simulation Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/mitre-caldera/"><img src="https://www.itechguides.com/best/badge/mitre-caldera.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update