Book a scoping callBook a call

One objective. Every surface. Quietly

A goal-based, multi-stage engagement that pursues an agreed objective across the people, applications, identity and infrastructure included in scope.

The kill chain

A kill chain showing what defenders detected

The timeline records how far the team moved toward the objective and what your monitoring detected, interrupted or missed at each stage. It is reviewed alongside your defenders' logs during the debrief.

Undetected
Detected by blue team
operation / kill-chain timeline
D+0
Recon
OSINT and external mapping of people and perimeter
undetected
D+2
Initial access
Spear-phish to a single foothold on a workstation
undetected
D+3
C2 established
Beacon over HTTPS, blending into normal traffic
undetected
D+6
Lateral movement
EDR alert on credential dump: raised, not escalated
detected
D+9
Objective reached
Crown-jewel data staged for exfiltration
undetected
What we look for

Test the path to the objective and the response around it

A red-team engagement is run against MITRE ATT&CK tactics (initial access, privilege escalation, lateral movement, persistence, defense evasion, and exfiltration), all in pursuit of one agreed objective.

An agreed objective pursued end to end

a goal such as reaching a crown-jewel system, pursued within the approved rules.

Multi-surface chaining: people, network, apps

a phish into a foothold into a cloud role, however the path actually runs.

Stealth and detection-evasion in scope

working quietly to see which steps your preventive and detective controls identify.

Blue-team detection and response

what your team catches, when the signal appears and how the response develops.

Findings mapped to a full kill chain

every step laid out against MITRE ATT&CK, from entry to objective.

5 checks
An agreed objective pursued end to end

a goal such as reaching a crown-jewel system, pursued within the approved rules.

Multi-surface chaining: people, network, apps

a phish into a foothold into a cloud role, however the path actually runs.

Stealth and detection-evasion in scope

working quietly to see which steps your preventive and detective controls identify.

Blue-team detection and response

what your team catches, when the signal appears and how the response develops.

Findings mapped to a full kill chain

every step laid out against MITRE ATT&CK, from entry to objective.

How we test

Agree the objective, pursue it and debrief both teams

Step 01

Agree the objective

We define the crown jewel and the rules of engagement together.

Step 02

Gain & expand access

Initial access, then quiet movement toward the goal across every surface.

Step 03

Debrief both teams

What we did, what was caught, and exactly where the gaps are.

What you get

A report for leadership and the defending team

01

An objective-based narrative report

The whole operation as a story: from first foothold to the crown jewel.

02

A kill-chain and detection timeline

Every stage, timestamped and marked against your defenders' response.

03

A joint debrief with your defenders

Red and blue in one room, walking the timeline to close the gaps.

The kill chain above is reconstructed in Outer Core: each stage with its timestamp and detection status, replayable beside your defenders' logs at the joint debrief.

See how delivery works

Explore more services

Web ApplicationAPINetworkCloudMobileSource CodeAI / LLM
Get started

Find out how far a real adversary gets

Red teaming is scoped per engagement. Book a call and we'll agree the objective, the rules and what "caught" means, together.

Book a scoping call