A Red Team exercise is a simulated attack on your organisation, carried out by people who think and act like the criminals you want to keep out. We combine technical, physical and human tactics to find out what a determined attacker could reach, and how quickly your team would notice.
RED TEAM VS. PENETRATION TESTING
More than a pentest
Penetration test
Our ethical hackers examine one application, network or environment as thoroughly as possible. You get a complete list of vulnerabilities, how easy each one is to exploit and what the impact would be.
Red Team exercise
We pick a goal, such as reaching sensitive data or taking over an admin account, and chase it the way an attacker would. Small weaknesses get combined into a route, people and buildings become part of the attack surface, and your detection and response are put to the test along the way.
THREE FORMATS
Three ways to put your defences to the test
| Criterion | Targeted Attack AssessmentA fast, focused look at the most likely way into your organisation. | Assumed BreachWe start inside your network, as if an attacker already found a way in. | Full Black BoxA real adversary simulation, from first reconnaissance to final objective. |
|---|---|---|---|
| What we test | |||
| Gaining initial access | Yes | NoAccess is given at the start | Yes |
| Detection and response | Response onlyNoisy approach | Detection and responseStealth approach | Detection and responseStealth approach |
| Route to compromise | Focus on the most likely attack path | Validates multiple technical attack paths | Validates multiple technical and human attack paths |
| How we attack | |||
| Open source intelligence (OSINT) | Limited | None | Full |
| Social engineering | Physical | None | Yes |
| How tailored the attack is | Ready made toolsIndustry standard attack tools | Built for youAttack code written for your systems | Built for youAttack code written for your systems |
| Request a quote for a Targeted Attack Assessment | Request a quote for an Assumed Breach | Request a quote for a Full Black Box |
Let’s get in touch
WHICH ONE FITS YOU?
Three questions, three answers
Targeted Attack Assessment
Does the most obvious way in actually work?
A fast and focused first answer. We go after the most likely attack path and see how your team responds once an attack starts making noise. A good starting point when Red Teaming is new to you.
Assumed Breach
What happens after the first click?
Sooner or later someone gets in: a phished password, a stolen laptop. We start from that moment, inside your network, and test how far we can move without being spotted.
Full Black Box
Could we stop a real, determined attacker?
We start with nothing but your company name, research your organisation like a criminal would and use every route available, technical, physical and human. Your defenders face what a genuinely bad day looks like.
ATTACK SCENARIOS
What an attack can look like
Every exercise is different, because every organisation is. Depending on the format you choose, these are some of the routes we might take.
01
Phishing and phone calls
A convincing email or a well prepared phone call is often all it takes to get a password or have malware installed. A little research on the people involved makes these attempts remarkably believable.
02
Walking in through the front door
Most people avoid confrontation, so following someone through a secured door works more often than you would hope. Once inside, we might leave a small device behind that lets us reach your network from a distance.
03
Weak network services
Unpatched or misconfigured services can open the way to systems and information that should be out of reach. Real attackers like to leave a hidden way back in, so we show you where that would be possible.
04
Websites and portals
Your web applications are usually the first thing an attacker sees. One vulnerability there can give a solid foothold for everything that follows.
05
WiFi from the street
With a long range antenna, a car parked outside your office can be close enough to attack your wireless network.
06
Moving through your network
Once inside, an attacker hunts for accounts with more rights and systems with more value. This is exactly where an Assumed Breach exercise begins.
WHAT IT GIVES YOU
Lessons you would rather learn from us
See the gaps that matter
Learn which weaknesses, big and small, an attacker can actually chain together to reach your most valuable data.
Know what to fix first
Understand which issues could lead to a real breach, so your time and budget go where they make the biggest difference.
Sharpen your defenders
Find out how well your team detects and responds to an attack in progress, and improve your procedures before it really counts.
THE PROCESS
How an exercise runs
Agree on the goal
Together with your CISO or IT manager we decide what an attacker would be after, what is off limits and how we stay in touch. Only a small group inside your organisation knows the test is happening.
Reconnaissance
We map your organisation the way an attacker would: people, systems, buildings and suppliers. How deep we go depends on the format.
The attack
We go after the goal and combine the weaknesses we find along the way, always within the boundaries we agreed on together.
Report and debrief
You receive the full story of the attack: the routes we took, what worked, what was detected and what to fix first. We walk through it with both your technical team and management.