Engagement
Red team testing: an objective, a defended estate and a measured response
Red team testing simulates a determined attacker pursuing one objective against your defended estate. So it measures more than vulnerabilities: it measures whether your people and tools notice, and how fast they respond.
- Signed scope before testing
- Fixed price agreed in writing
- OWASP and PTES methods
How red team testing differs from a penetration test
A penetration test tries to find as many weaknesses as possible within a scope. By contrast, red team testing pursues an agreed objective. Therefore the report reads as a route and a timeline rather than a list.
| Penetration test | Red team | |
|---|---|---|
| Goal | Find and prove weaknesses. | Reach an agreed objective. |
| Defenders | Usually aware. | Usually not told the timing. |
| Measures | Exposure. | Detection and response too. |
The rules of engagement for red team testing
Because the exercise is realistic, the rules matter more than in any other engagement. So the following are agreed in writing and signed by the system owner:
- The objectives, and what counts as reaching them
- Techniques that are permitted, and those that are not
- A small group of people who know the exercise is running
- A stop procedure and escalation contacts
Readiness for red team testing
Tick what is already true. Several gaps suggest a full assessment first.
Your result appears here as you tick, so you can see what is still open.
What red team testing delivers
You receive the attack route with evidence, a timeline of what was and was not detected, and prioritised fixes. In addition, a purple team replay walks your defenders through each step. As a result, the detections that failed can be tuned and tested again.
Is red team testing the right next step?
It suits organisations that already run regular penetration tests and have a monitoring capability. However, if neither is true, a full assessment usually teaches more for less. Our method follows the Penetration Testing Execution Standard.
Fees and timeline
Red team testing starts at $95,000 and runs six weeks or more, because objectives and rules take longer to agree. Full engagements overall run from $35,000 to $120,000, with a $25,000 floor.
Red team testing questions
How long does red team testing take?
Six weeks or more, because preparation and the exercise itself both take time.
Will red team testing disrupt operations?
The rules of engagement set limits and a stop procedure, so disruption is controlled.
Who knows the exercise is running?
Only a small control group, agreed in writing before the start.
Is the exercise legal?
Yes, on systems you own with the owner's written authorisation and agreed rules.
Related guides
Scope red team testing
Tell us the objective you most want tested. We reply with draft rules of engagement and one fixed fee. Nothing starts until the system owner signs.
Get a fixed price