01
Agreement and scope
Bilateral NDA and proposal with scope, rules of engagement and windows defined in writing. Nothing starts without authorization.
← All services// Services · Offensive
Red Team Operations
Complete APT attack simulations, with social engineering and physical and digital intrusion, to assess your organization's real resilience.
// What it is
What it is about
Red team is a team that simulates, with authorization, the methods of a real attacker. While the pentest looks for the largest number of flaws, the red team operation pursues a goal, such as reaching a financial system or sensitive data, and measures whether your defense notices and reacts.
The operation combines digital techniques, social engineering and, when contracted, physical intrusion, with tactics mapped in MITRE ATT&CK.
// When to hire
When it makes sense
- When the organization already runs pentests and wants to test detection and response, not only the flaws.
- To validate investments in SOC, EDR and SIEM against a realistic adversary.
- To train the defense team (blue team) in a scenario close to the real thing.
// How we do it
From first contact to delivery
A predictable flow, under NDA, with the client informed at every step.
02
Threat planning
Definition of the operation's objectives and of the tactics to simulate, based on MITRE ATT&CK and on your sector's threat profile.
03
Execution
Activities within the authorized scope, with controlled access and every record kept.
04
Reporting and lessons
Timeline of the attack, what was and what was not detected, and recommendations for the defense.
// Deliverables
What you get
- Executive and technical report of the operation.
- Timeline of attack actions, to compare against the alerts of your defense.
- Detection, response and hardening recommendations.
Every engagement starts with a bilateral NDA. We do not disclose client names, vulnerabilities or incidents without written authorization, and sensitive communication uses encrypted channels (Signal and PGP).
// Related services
You may also like
Pentest and Intrusion Testing
Our team runs real intrusion tests on networks, applications and infrastructure to identify and exploit vulnerabilities before the adversary does.
See the serviceCrisis Simulations (Cyber Drills)
Tabletop exercises and realistic crisis simulations to train technical and executive teams for the worst-case scenario.
See the serviceOSINT and Intelligence
Collection and analysis of open source information to map the attack surface, track threat actors and protect your digital exposure.
See the service