Red teaming
Red Teaming, Social Engineering and Physical Testing
A full-force, goal-based attack on your people, processes and buildings. We find out how your defences really hold up.
Overview
What it is
A penetration test asks whether a system is secure. A red team asks a harder question: can a determined attacker achieve their goal, however they do it. We simulate a real adversary end to end.
That means phishing, pretext calls, tailgating, physical entry and chaining weaknesses across people, process and technology. You learn how your detection, response and staff stand up when it counts.
Who it is for and what you get
Who it is for
- Organisations with mature security that want a real-world test
- Teams that want to test detection and response, not just prevention
- Businesses worried about targeted attacks and insider threats
- Leaders who want to know how staff respond under pressure
What you get
- A narrative report walking through how the engagement unfolded, step by step.
- Every weakness we used, ranked by risk, with practical fixes.
- An honest assessment of how your detection and response performed.
- A debrief for leadership and a separate session for your technical team.
Our process
How the engagement runs
- 01
Objectives
We agree the goals, the rules of engagement and what is off limits, with a named point of contact.
- 02
Recon
We gather intelligence the way an attacker would, mapping people, technology and physical sites.
- 03
Engage
We attempt to achieve the agreed objectives through phishing, pretext, physical entry and technical attack.
- 04
Report
You get the full story, what worked, what stopped us and exactly how to improve.
FAQs
Frequently asked questions
How is red teaming different from a penetration test?
A penetration test is broad and finds as many issues as possible in a defined scope. A red team is narrow and goal-based, testing whether an attacker could achieve a specific objective and how well you detect and respond.
Does red teaming include physical testing?
It can. We offer social engineering, physical entry and tailgating as part of a red team, or as standalone exercises. We agree exactly what is in scope with you.
Is this safe and legal?
Yes. Every engagement is fully authorised by you in writing, with clear rules of engagement, a named contact and get-out procedures for our testers.
Do we need to be a large organisation?
No, but red teaming suits organisations that already have security controls to test. If you are earlier in your journey, penetration testing is often the better place to start.
Related services
You might also need
Penetration Testing
We attack your systems the way a real adversary would, then show you how to shut the door.
Learn moreSecurity Awareness Training and Phishing
Turn your staff from the weakest link into your first line of defence.
Learn moreIncident Response and Retainers
Under attack now, or want a team on standby for when it happens.
Learn moreGet started
Ready to scope your red teaming, social engineering and physical testing?
Tell us about your organisation and we will recommend the right approach. Quote only, no hard sell.