Red team exercises

A red team exercise is an objective-driven simulated attack run over weeks rather than days. Instead of cataloguing weaknesses in one system, it pursues a goal, a dataset, a system or a level of access, and in doing so tests whether your defences actually notice and respond.

What we test

With a small trusted circle aware and everyone else responding as they would to a genuine incident, we combine technical attack with, where agreed, social engineering and physical approaches, pursuing an agreed objective under strict rules of engagement.

How we report it

You receive a narrative of how the objective was pursued, what succeeded, what your team detected and where the gaps lie, with evidence and prioritised recommendations across people, process and technology.

What we look for

• Whether a realistic intrusion is detected, and how quickly
• How far an attacker can progress towards a real objective
• Gaps across people and process, not only technology
• How monitoring and response perform in practice
• Attack paths that single-system tests never surface