Security professionals who simulate real-world attacks to test an organisation's defences comprehensively.
A red team is a group of security professionals who simulate real-world adversary attacks against an organisation. Unlike traditional penetration testing (focused on finding vulnerabilities), red teaming tests the entire security programme—people, processes, and technology—using realistic attack scenarios. Red teams may use social engineering, physical intrusion, and sustained campaigns to test detection and response capabilities. Blue teams are the defenders; purple team exercises combine both for collaborative improvement.
Why It Matters
The DSC Perspective:
Red teaming tests whether your security actually works against determined attackers, not just whether individual controls exist. It reveals gaps in detection and response that point-in-time assessments miss. Consider red team exercises for mature security programmes.