Red team: test a scenario
Use an agreed adversary objective to assess attack paths and defensive response within a controlled engagement.
Security services Test the attack path.
SPECIALIST SECURITY / IT MOUNTAIN
Test the attack path.
Strengthen the response.
Explore a realistic security scenario and learn how your controls and people respond. Set a useful objective, agree the rules and turn the exercise into better defensive practice.
Defined scopePractical supportClear responsibilities
THE SERVICE IN PRACTICE
A clearer scope.
A stronger next step.
Choose the activities that address your actual risks. Your service schedule confirms the supported estate, deliverables and responsibilities.
Blue team: build the defence
Review monitoring, investigation and response practices around the systems and techniques in scope.
Purple team: learn together
Share offensive and defensive observations to improve visibility, detection and response.
White team: coordinate safely
Agree oversight, permissions, communications, evaluation and stop conditions for the exercise.
THE RIGHT LEVEL OF KNOWLEDGE
Choose the test perspective.
An outside perspective.
Little prior knowledge is supplied. This can help explore what is visible or accessible to an outsider within agreed targets and time. It is not automatically the deepest assessment.
A realistic level of access.
Provide selected credentials or system knowledge to focus testing on relevant workflows, user roles or an agreed attack scenario.
Depth through detailed access.
Provide architecture, configuration, source code or administrative access where appropriate, to enable a more informed review within the agreed scope.
BUILT AROUND YOUR BUSINESS
Useful outcomes.
Understood responsibilities.
Start with the concern you want to address. Then agree the systems, people and evidence that belong in scope, including any specialist delivery needed.
Set the objective
Choose a scenario, participants and the business question to answer.
Agree the rules
Record authorised targets, techniques, exclusions and safety controls.
Run the exercise
Evaluate the scoped attack and response while maintaining agreed oversight.
A PLANNED START
From first conversation.
To a service you understand.
Set the objective
Choose a scenario, participants and the business question to answer.
Agree the rules
Record authorised targets, techniques, exclusions and safety controls.
Run the exercise
Evaluate the scoped attack and response while maintaining agreed oversight.
Improve & repeat
Turn observations into detection changes, action owners and follow-up checks.
A CONTRACT YOU CAN UNDERSTAND
Know who acts.
Know what is included.
Your named delivery model
IT Mountain coordinates the agreed service. Specialist assessment or security operations may be delivered by an appointed provider. The proposal identifies responsibilities, access and the route to support.
Your agreed service schedule
Define supported users, devices and systems, monitoring hours, response commitments and approval points. Licences, testing, major changes and specialist recovery are itemised where separately scoped.
Your next improvement
Keep findings, action owners and unresolved risks visible. Agree a review cadence so the service follows changes in your organisation rather than standing still.
Start with your business, not a product list.
Build my security brief Tell us what needs protecting and what a better service would look like.
TECHNOLOGY WITH A PURPOSE
Protection you can understand.
Capabilities that fit your business.
Explore what each capability does and where it could help. We’ll confirm the selected technology, licensing, delivery team and support responsibilities in your proposal.
Testing & assurance
Technical testing & readiness
Get testing evidence and practical support for assurance requirements.
Explore this capability
Technical testing & readiness
Use specialist testing to understand weaknesses in agreed networks, applications and cloud environments. Assessment scope, report deliverables and any independent certification route are confirmed for the engagement.
Network, cloud and application testingClear remediation reportingCyber Essentials readiness support
Discuss this capability Application & infrastructure testing
Explore weaknesses across the systems your business relies on.
Explore this capability
Application & infrastructure testing
Agree the targets, test perspective and deliverables before technical assessment begins. Findings should help your team understand the weakness, its impact and the route to remediation.
Web, mobile and API testingInternal and perimeter assessmentCloud configuration and code review options
Discuss this capability Specialist security assurance
Get an objective view of your critical systems and configurations.
Explore this capability
Specialist security assurance
Choose assessments around the applications, infrastructure and cloud settings that matter to your organisation. Confirm the testing specialists, engagement credentials and reporting scope before delivery.
Application and infrastructure testingCloud and configuration reviewsObjective-led security consultancy
Discuss this capability Adversary simulation
Explore the route an attacker could take and how your defences respond.
Explore this capability
Adversary simulation
Define a realistic business objective, permitted techniques and the defensive response to evaluate. An exercise needs agreed rules, safety boundaries and clear learning outcomes.
Objective-led offensive testingRed-team exercise optionsDefensive evaluation and lessons
Discuss this capability Expert-led penetration testing
Investigate exploitable weaknesses within an authorised scope.
Explore this capability
Expert-led penetration testing
Plan specialist assessment around agreed targets, test windows and business priorities. Reports explain evidence and remediation, with follow-up or retesting defined in the engagement.
Penetration testing engagementsOffensive security assessmentScoped reporting and follow-up
Discuss this capability Continuous testing & follow-up
Connect recurring assessment with reporting and remediation.
Explore this capability
Continuous testing & follow-up
Build a testing rhythm around meaningful changes and the systems you need to assess. Agree engagement coverage, access to findings and how remediation is reviewed over time.
Recurring testing optionsCollaborative remediation reportingAgreed follow-up and retesting
Discuss this capability Capabilities are selected and scoped for your environment. Your agreement identifies the appointed technology and delivery providers before the service begins.
YOUR QUESTIONS
Clear answers.
Before you choose.
Is this the same as a penetration test?
A penetration test often focuses on weaknesses in defined systems. An objective-led team exercise can assess attack paths and the response across selected technology and people. The written scope establishes what is being evaluated.
Can you include social engineering?
Only where explicitly authorised and carefully scoped. The engagement must define permitted scenarios, participants, data handling, safeguarding and stop conditions.
What about yellow, orange and green teams?
Those labels are sometimes used for secure design, offensive insight shared with builders and defensive feedback to engineering. Terminology varies. We specify the actual activities and outcomes rather than promising a colour alone.