Red Team
Assessment
See how your organisation handles a realistic attack scenario. We test your defences and response within an agreed, authorised scope.
Overview
Test how you respond, not just what you have.
We emulate a chosen adversary profile across digital, social, and physical vectors — aligned to MITRE ATT&CK — working toward agreed objectives such as access to crown-jewel data. For physical and covert operations we partner with ex-intelligence professionals.
Scope
What a red team covers.
A single, goal-oriented adversary campaign across every vector.
- Threat-actor profile emulation
- External & internal digital attack
- Phishing & social engineering
- Physical access operations
- Lateral movement to objectives
- Detection & response evaluation
- Blue-team / purple-team collaboration
- Full attack narrative & debrief
FAQ
Red team assessment FAQ
Scope, cost, and what happens next.
How much does a red team assessment cost?
A red team engagement typically costs €15,000–35,000 over 15–30 days, depending on objectives, threat profile, and vectors in scope. Contact us for a scoped figure.
What is the difference between a red team and a penetration test?
A penetration test finds as many vulnerabilities as possible in a defined scope. A red team is goal-oriented and stealthy — it emulates a specific adversary to test whether your people and tooling detect and respond. Red teaming suits more mature organisations.
How long does a red team engagement take?
Typically 15 to 30 days of operations, plus planning and reporting.
Do you offer purple teaming?
Yes — collaborative exercises with your defenders to maximise detection improvement, standalone or as a debrief phase after the red team.
Is our security team told in advance?
Usually only a small control group knows, so the response is realistic. Scope, objectives, and safety rules are agreed with that group beforehand.
What do you need to scope a red team?
Your objectives (the "crown jewels"), the threat profile to emulate, in-scope vectors (digital/social/physical), and any no-go areas.
More questions about this service
How is a control group involved?
A small, trusted group authorises and oversees the engagement so your wider team’s detection and response stay realistic.
Do you provide an attack narrative?
Yes — a full timeline of actions, what was detected, what was missed, and exactly where to improve.
Can we run it as assumed-breach?
Yes — starting from a foothold focuses budget on detection and response rather than initial access.
Is a red team right for us?
It suits organisations with an existing security function; less mature teams usually get more value from penetration testing first.
Related services
Explore more.
Ready to test your response?
A 30-minute scoping call costs nothing. A real adversary costs considerably more.
Book a short call Send an email