Red team exercises

A red team exercise is a goal-driven simulated attack run over weeks, not days. Rather than cataloguing weaknesses in one system, it pursues an objective, reaching a dataset, a system, a level of access, and in doing so tests whether your defences actually detect and respond.

What we test

With a small trusted group aware and everyone else responding as they would to a real incident, we combine technical attack, and where agreed social engineering and physical approaches, to pursue an agreed objective within strict rules of engagement.

How we report it

You receive a narrative of how the objective was pursued, what worked, what your team detected and where the gaps are, with evidence and prioritised recommendations across people, process and technology.

What we look for

• Whether a realistic intrusion is detected, and how fast
• How far an attacker can progress towards a real objective
• Gaps across people and process, not just technology
• The effectiveness of monitoring and response in practice
• Attack paths that single-system tests never reveal