Red team, blue team & authorised penetration testing
Authorised security testing with red and blue teams
Controlled attack simulation, detection, technical hardening and retests, strictly within a scope approved in writing.
Only with written approval
Every test starts with a scope agreed in writing: which systems are tested, in what time window and with which methods. Without that approval, no testing takes place.
Attack and defence together
The red team simulates realistic attacks; the blue team checks whether they are detected and alerts reach the right people. That way weaknesses are not only found, but also detected and properly fixed.
Hardening and retest
You receive a prioritised action plan. Once the fixes are in, a retest checks that the weaknesses are actually closed.
How getting started works
- Initial call You describe your environment and what should be tested. The call is free of charge.
- Written scope Systems, time window, methods and contacts are set out in writing. No test starts without this approval.
- Test and report We test within the scope and document weaknesses with a priority and a proposed fix.
- Fixes and retest Once the fixes are in, a retest checks whether the weaknesses are closed.
What this deliberately does not include
- No tests without written approval.
- No tests on systems outside the agreed scope.
- No security certificate and no guarantee that no weaknesses remain afterwards.
Frequently asked questions
Who has to approve the test?
Someone who is responsible for the systems involved and confirms it in writing. For hosted systems, the provider's consent may also be needed.
Can the test disrupt day-to-day operations?
The risk is accounted for in the scope, for example through fixed test windows or excluded systems. We agree critical tests in advance.
What is the difference between a red team and a blue team?
The red team simulates attacks; the blue team checks whether they are detected and reported correctly.
What does a security test cost?
That depends on the scope. After the initial call you receive a quote before any costs arise. We start with a focused first phase, and if the result does not meet your needs, we do not charge you for that phase.
Which systems should be tested?
Briefly describe your environment and what should be tested. Together we agree a clear scope in writing.
