Goal-based attack simulation across people, process and technology, with purple-team workshops to tune your detection.
Engagement
Fixed-scope project · 4–8 weeks
What it is
We act as a realistic adversary with a defined goal, such as reaching a payment system or customer database, using the same tactics real attackers use. Afterwards we work with your defenders to tune detection and response.
Who it's for
Organisations with a mature security programme that want to test their detection and response.
The outcome
Evidence of how far an attacker could get, and a stronger team for having been tested.
Step 1
Objectives
Agree goals, boundaries and a small control group who know the test is running.
Step 2
Reconnaissance
Gather intelligence as a real attacker would.
Step 3
Execution
Attempt to reach the objectives while avoiding detection.
Step 4
Purple team
Replay the attack with your defenders to improve detection.
Yes, within agreed rules of engagement. A control group can stop the exercise at any time.
Usually. Red teaming gives the most value once common weaknesses found by VAPT are fixed.
More from Shield
Vulnerability Assessment & Penetration Testing (VAPT)
Find and prove exploitable weaknesses in your applications, networks and cloud before attackers do.
Social Engineering & Phishing Simulation
Phishing, vishing and physical-access tests that show how your people respond, with results fed into training.
Wireless & Physical Network Security
Wi-Fi assessments, rogue access point detection and network control for venues and mass gatherings.