Contact Us

Contact Us

Please get in touch using the form below

I prefer to be contacted by:
View our privacy policy
Learn about the techniques attackers use to evade detection and how to defend against them. Sign up for our webinar on June 9th.

Overview

What is red teaming?

Of all the available cyber security assessments, a simulated cyber-attack is as close as you can get to understanding how prepared your organisation is to defend against a skilled and persistent hacker.

A Red Team Operation from Redscan is designed to far exceed the remit of traditional security test by rigorously challenging the effectiveness of technology, personnel and processes to detect and respond to a highly targeted attack conducted over an extended period of time.

Benefits

Evaluate your response to attack

Learn how prepared your organisation is to respond to a targeted attack designed to test the effectiveness of people and technology.

Identify and classify security risks

Learn whether systems, data and other critical assets are at risk and how easily they could be targeted by adversaries.

Uncover hidden vulnerabilities

By mirroring the latest adversarial tactics, red reaming can help identify hidden vulnerabilities that attackers might seek to exploit.

Address identified exposures

Receive important post-operation support to address any vulnerabilities identified and mitigate the risk of suffering real-life attacks

Enhance blue team effectiveness

By simulating a range of scenarios, red team testing helps your security team to identify and address gaps in threat coverage and visibility.

Prioritise future investments

Better understand your organisation's security weaknesses and ensure that future investments deliver the greatest benefit.

Objectives

Example goals of a Red Team Operation

A range of security assessment services
  • Gaining access to a segmented environment holding sensitive data
  • Taking control of an IoT device or a specialist piece of equipment
  • Compromising the account credentials of a company director
  • Obtaining physical access to a server room
Image of a virtual data centre processing data Image of a virtual data centre processing data

Features

Key features of our Red Teaming service

What you can expect from a Red Team Operation conducted by Redscan:

Offensive security experts
Our red team experts use their knowledge of how genuine attackers breach defences to comprehensively challenge your organisation's virtual and physical cyber security controls and incident response procedures.
Intelligence-led testing
To ensure that engagements reflect the approach of real-life criminal attackers, Red Team Operations use evasion, deception and stealth techniques similar to those used by sophisticated threat actors.
Multi-blended attack methods
To achieve an agreed objective, red team testing adopts a ‘no holds barred’ approach. A wide range of techniques are used, often including social engineering, Command and Control (C2) activity and physical intrusion.
In-depth reporting
A detailed post-engagement report provides your key stakeholders with a complete overview of the exercise undertaken and actionable insights to support the remediation of any risks identified.

Interested in learning more?

Get In Touch

Outcomes

Actionable outcomes to secure your business

Throughout an engagement, our CREST certified ethical hackers provide regular feedback to ensure that your key stakeholders stay informed. Here’s what you can expect to receive post-assessment:

Executive summary

A high-level overview of the red team operation for executive and management teams.

Technical details

Detailed technical feedback to enable technical teams to understand and replicate findings.

Expert risk analysis

A comprehensive analysis of all security risks identified, their severity and possible impact.

Actionable intelligence

Tactical and strategic recommendations, including clear advice to help address risks.

Expertise

Our security qualifications

Redscan’s London based team of ethical hacking experts possess the skills and experience to identify the latest threats.

Approach and methodology

Our Red Teaming methodology

Redscan’s Red Team Operations experts adopt a systematic approach to comprehensively test your organisation’s threat detection and response capabilities.

01. Reconnaissance
02. Staging
03. Attack delivery
04. Internal compromise
05. Reporting and analysis
01.

Reconnaissance

Quality intelligence is critical to the success of any red team test. Our ethical hackers utilise a variety of OSINT tools, techniques and resources to collect information that could be used to successfully compromise the target. This includes details about networks, employees and in use security systems.

02.

Staging

Once any vulnerabilities have been identified and a plan of attack formulated, the next stage of any engagement is staging. Staging involves setting up and concealing the infrastructure and resources needed to launch attacks. This can include setting up servers to perform Command & Control (C2) and social engineering activity.

03.

Attack delivery

The attack delivery phase of a Red Team Operation involves compromising and obtaining a foothold on the target network. In the course of pursuing their objective, our ethical hackers may attempt to exploit discovered vulnerabilities, use bruteforce to crack weak employee passwords, and create fake email communications to launch phishing attacks and drop malicious payloads.

04.

Internal compromise

Once a foothold is obtained on the target network, the next phase of the engagement is focussed on achieving the objective(s) of the Red Team Operation. Activities at this stage can include lateral movement across the network, privilege escalation and data extraction.

05.

Reporting and analysis

Following completion of the red team assessment, a comprehensive final report is prepared to help technical and non-technical personnel understand the success of the exercise, including an overview of vulnerabilities discovered, attack vectors used and recommendations about how to remediate and mitigate risks.

What Our Customers Say

5/5 - based on 14 Reviews
“With so much organisational change, this is a time of incredible pressure on our small team. Partnering with Redscan is making it easier for us to address the security challenges of business consolidation.”
Head of IT Security
IPL Plastics
“If you want a solution where someone will look after you 24/7 and give you a very flexible, professional and agile service - you want Redscan.”
Lead IT Infrastructure Architect
Pizza Hut Restaurants
“Redscan staff are always on hand to provide swift, clear advice. They help us keep a constant eye on our network and respond quickly to incidents to ensure systems remain operational.”
IT Director
King Edward VII's Hospital
“I can offer a higher level of assurance at board level about our information security now. Redscan gives us a broader lens on a complex and changing environment.”
IT Director
ICG
"Redscan's cost effective service gives us peace of mind that we are doing all we can to protect our clients, our business, our staff, our counterparties and other partners."
Head of IT Infrastructure
TT International
“Faster incident alerting enables us to better understand what is going on in our network and react more quickly. From an advice side of things, it’s great to be able to talk to knowledgeable people and discuss solutions to help mitigate our security risks.”
Head of IT Security
IPL Plastics
“With Redscan, we are able to understand and quickly identify any threats. Redscan’s support gives us the freedom to feel more secure and be more productive.”  
Head of IT
Bernhard Schulte Shipmanagement
“Redscan’s hands on approach identified security flaws that had previously been overlooked by other vendors.”  
Technical Operations Manager
Spread Betting Firm
“I definitely recommend ThreatDetect. It’s an incredible managed security service. By working in partnership with Redscan, we have significantly improved our operational resilience.”  
Head of Cyber Security
Specialist bank
“Thanks to Redscan we now have a solution that gives us the ability to monitor, isolate and eliminate threats across our IT infrastructure.”
Head of IT
King Edward VII's Hospital
“We have been very impressed by the quality of Redscan’s engagement, communication and reporting. We will not hesitate to use them for any future testing requirements.”      
Information Security Officer
White Oak (formerly LDF)
“The human factor is something I’m always looking for. This personal approach is something I noticed from my first engagement with Redscan and it is still true today. We have 30 locations worldwide and it is valuable to have a third party being proactive in identifying potential security issues.”
Head of IT
Bernhard Schulte Shipmanagement
“Services like ThreatDetect are few and far between.”
Head of IT Infrastructure
TT International
“I value the fact that Redscan aggregates insight about the cyber-attacks it sees on other customers and retrospectively applies it to other organisations, so we all benefit from that knowledge.”  
Head of Cyber Security
Specialist bank

FAQ

Frequently Asked Questions

What is a red team exercise?

Performed by a team of qualified ethical hackers, a red team exercise leverages the latest hacking tools and techniques to launch a simulated cyber-attack designed to thoroughly test an organisation’s security robustness as well as threat detection and response capabilities.

How long does it take to conduct a red teaming operation?

The duration of a Red Team Operation is dependent upon the scope and objective(s) of the exercise. A full end-to-end red team engagement is typically performed over one to two months however specific scenario-based operations with a narrower focus can be performed over 11-18 days. Shorter operations, such as those designed to simulate insider threats, are usually based on an assumed compromise.

What is the difference between pen testing and red teaming?

A penetration test is a focused form of cyber security assessment designed to identify and exploit as many vulnerabilities as possible over a short period of time, often just a few days. Pen tests are often performed to assess specific areas such as networks and web applications.

A Red Team Operation is an extended form of engagement conducted over a period of weeks and designed to achieve a set objective such as data exfiltration, and in the process test an organisation’s detection and response capabilities. Unlike many forms of Penetration Testing, Red Team Operations are conducted to a black-box methodology in order to ensure that engagements accurately reflect the approach of genuine attackers.

Could a red team operation cause any damage or disruption?

Unlike genuine cyber-attacks, Red Team Operations are designed to be non-destructive and non-disruptive. By choosing a CREST accredited provider of ethical hacking services, you can be sure that all engagements will be carried out in line with pre-agreed rules of engagement and the highest technical, legal and ethical standards.

Why Redscan

Redscan, your partner for Red Teaming

  • Among highest accredited UK red teaming companies
  • A deep understanding of how hackers operate
  • In-depth threat analysis and advice you can trust
  • Complete post-test care for effective risk remediation
  • Multi award-winning offensive security services
  • Avg. >9/10 customer satisfaction, 95% retention rate

Discuss your requirements

Complete the form for a prompt response from our team.

Two Redscan team members analysing cyber security intelligence

I prefer to be contacted by:
View our privacy policy

Resources

Discover our latest content and resources

From the blog
From the blog Case studies Latest news
22nd May 2020
Cybersecurity cited by WEF as one of the top COVID-19 fallout issues
Cybersecurity is one of the ‘Top 10 Fallout’ issues from COVID-19 according to a new Global Risks report published by the Word Economic Forum. Nearly 38% of risk professionals surveyed say changing work patterns will lead to increases in cyber security and fraud incidents
15th May 2020
CISA and FBI publishes list of top 10 security vulnerabilities
A new reported authored by CISA and the FBI reveals that vulnerabilities in Microsoft Office and Apache Struts were among the software vulnerabilities most commonly exploited between 2016 and 2019.
7th May 2020
Cyber security warning issued to healthcare providers
Healthcare bodies and medical research organisations are being targeted by advanced persistent threat groups and must take steps to minimise the risk of ‘password spraying’ campaigns, according to a joint security advisory issued by the NCSC in the UK and CISA in the US.
1st May 2020
FCA extends SCA deadline to September 2021
Due to the COVID-19 crisis, The UK's Financial Conduct Authority has announced that it is to delay the implementation of strong customer authentication rules by a further six months.