Adversary simulation
Exercises that test people, process and detection as well as technology: objective-led red teaming, controlled social engineering and on-site physical intrusion testing.
- Red team, assumed breach, social and physical
- Rules of engagement first
- Detection measured
-
Rules firstObjectives and limits in writing
-
Detection measuredWhat was seen, and when
-
People and processNot only technology
-
Physical, if agreedUnder a signed authorisation letter
Assessments in this area
Red team assessment
Objective-led attack simulation that measures detection and response.
Explore →Assumed breach assessment
Starts from a user account, laptop or VPN foothold and tests how far an attacker could get, and what is detected.
Explore →Social engineering and phishing
Controlled phishing and pretext campaigns that test people, process and email controls.
Explore →Physical penetration testing
On-site intrusion under a signed authorisation letter: tailgating, badges, locks, reception pretexting, device drops and response observation.
Explore →Frequently asked questions
Is a red team right for us?
If you have monitoring and want to know whether it works, yes. If not, an internal test or an assumed breach assessment usually comes first.
Can phishing be the starting point of a red team?
Yes, where agreed in writing.
Red team assumed-breach engagement
Anonymised assumed-breach red team pattern: multi-surface objectives, detection gaps and board-ready narrative without TTP dumps.
Read the case study →- Rules of engagement first
- Detection measured
- Scoped before any active work
Not sure which one fits?
Describe the system and what worries you. We reply with a suggested scope.
Request a free scope review →