Infection Monkey
An open-source security tool that simulates network breaches by self-propagating across data centers to test organizational resilience against lateral movement attacks.
An open-source security tool that simulates network breaches by self-propagating across data centers to test organizational resilience against lateral movement attacks.
Checked October 2026.
Infection Monkey is an open-source security tool designed to test data center resilience against perimeter breaches and internal server infections.
The tool consists of two main components:
The system operates by deploying the Monkey agent, which attempts to spread laterally through the network infrastructure, simulating how an actual breach might propagate within an organization's data center environment. All activities and results are reported back to the Monkey Island server for analysis and visualization.
The tool helps organizations identify vulnerabilities in their network segmentation, access controls, and internal security measures by demonstrating potential attack paths that malicious actors could exploit.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Infection Monkey: features, pricing and alternatives.
Infection Monkey is a product in the Breach & Attack Simulation category. It covers Red Team, Lateral Movement and Open Source.
Infection Monkey is free. Download and setup instructions are at https://github.com/guardicore/monkey/.
Alternatives to Infection Monkey listed on CybersecTools:
Compare all Infection Monkey alternatives at https://cybersectools.com/alternatives/infection-monkey
Infection Monkey is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Open-source threat-informed exposure validation platform for attack simulation
FourCore ATTACK is an adversary emulation platform to manage cyber risk with evidence
Cloud-based DDoS attack simulation & monitoring platform for defense testing.
Tests email security gateways by simulating real-world email threats
Security and application traffic generator for high-scale network security testing.
Cyber range for hands-on security operations training and incident-response drills.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
