MITRE Caldera review
A flexible, ATT&CK-based framework for automated and manual red-team operations.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
MITRE Caldera is an open-source adversary emulation platform for cybersecurity teams conducting breach-and-attack simulation and red-team work. It supports automated operations, manual red-team engagements, and automated incident response through deployed agents. Its ATT&CK-based abilities and adversary profiles make it suited to teams that want structured exercises across hosts, networks, endpoint security, and operational-technology environments.
The published pricing model is open source, rather than a tiered subscription structure. Caldera runs through a web interface and REST API and supports Linux, macOS, and self-hosted deployments. Its plugin architecture extends the framework with agents, reporting, TTP collections, training, and OT capabilities. This combination gives red teams room to shape operations around custom scenarios while retaining a common platform for execution and reporting.
Its standout strength is operational flexibility. Teams can configure agents and beaconing, choose atomic, batch, or tactic-bucket operation planners, and work with ATT&CK abilities and adversary profiles. Caldera also produces JSON operation reports and event-log exports, supporting review after an exercise. The trade-off is its on-premises, self-hosted deployment model and agent-based simulation mode. Teams seeking a hosted product or a different simulation approach should consider an alternative. Caldera is a strong fit for red teams that value extensibility, ATT&CK alignment, and control over their testing environment.
MITRE Caldera pros and cons
- Where it wins
- Automates adversary emulation with ATT&CK abilities and profiles
- Supports agents, operation planners, a web interface, and REST API
- Extends across endpoints, networks, hosts, and OT through plugins
- Where it doesn't
- Uses an on-premises, self-hosted deployment model
- Simulation mode is agent-based
- Broader capabilities depend on configuring its plugin architecture
MITRE Caldera fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update