Red team
Find out whether an adversary could reach an objective that matters to the business. One agreed scenario tests technology, people and your response together.
Red team in detailFive ways to test how you would hold up.
Each engagement is scoped to a question you need answered. Most clients start with one service and add another once the first has shown where to look.
Reconnaissance
Learn what an adversary can find out about you before they try anything. We map the digital exposure you agree to and show where closer testing is worth the time.
Reconnaissance in detail
Penetration testing
Find the weaknesses in your applications and infrastructure, and learn what each one would let an attacker do.
Penetration testing in detail
Physical and human testing
Test the doors and people around your systems. Safety limits and stop conditions are agreed before anyone arrives on site.
On-site physical security and social-engineering assessments under explicit written authorization.
Physical and human testing in detail
Blue team and incident response
Put experienced defenders beside your team for a fixed period, focused on the threats and detection gaps you name, and reach them at any hour when an incident starts.
Time-bound secondment, threat hunting, detection validation and a 24-hour incident response retainer.
Blue team and incident response in detail
Choosing between them.
Start from what you need to learn. If you are unsure, describe the concern in your first message and we will suggest where to begin.
- You do not yet know everything you have on the internet.
- Start with reconnaissance. It shows what is exposed and tells you where deeper testing is worth the money.
- You have named systems and want their weaknesses found and fixed.
- Commission a penetration test. It aims for breadth across the systems in scope and ends with a retest.
- You want to know whether one outcome that matters could be reached end to end.
- Run a red team. It follows a single objective and tests your detection and response along the way.
- Your concern is the building, the front desk or how staff handle a stranger.
- Choose physical and human testing, on its own or as an authorized part of a red team.
- You need more defenders for a period, or want your monitoring checked from the inside.
- Bring in blue team support. It works best after an offensive engagement has shown where to look.
What do you need to find out?
Write from your organization's email address. Tell us what is in scope, your deadline and who can authorize testing. Leave sensitive details out of the first message.