What do you get in the result?

The goal of red teaming is to test an organization's detection and response capabilities: can the internal security systems detect and render harmless malicious attacker before he gains access to important company data? Thus, the red team evaluates the actual effectiveness of your IT security mechanisms as a whole to strengthen the resilience of organizations against hostile attacks in the long term. 
By analyzing cyber-attacks that have happened to our customers, we gain a lot of insight into how attackers work. We incorporate knowledge gained from this into the ESKA's RED Team Assessment method and can therefore offer our customers current and practice-oriented attack scenarios. Therefore, our know-how is based on violations that happened to other companies.

The names of the red team and blue team tests originate from the military exercises that ensure the fighters are ready for the battle. The colors are used to define their role in training. The red color refers to the attacker's role, while the blue one is for the defensive position of the team participants. The realm of cybersecurity has thoroughly copied this realm with the difference that the battlefield is digital.
Red Team A Red team is formed of security professionals to identify and assess vulnerabilities who try to get past existing cybersecurity controls. The designated groups usually consist of independent ethical hackers who objectively assess the security of a system. They use every available know-how to find weak spots in an enterprise's cybersecurity to gain unauthorized access so they can reveal the security risks in an organization's security posture.
Blue TeamThe task of a blue team is the protection of the company's critical assets against any threat type. The blue team consists of security professionals who obtain an inside-out view of the organization's infrastructure and valuable assets. Blue teams are highly aware of the enterprise's business objectives and security strategy, constantly evaluating the environment to prepare for the potential threats. Therefore, their main task is to strengthen the castle's walls so no intruder can compromise its defenses. When the attack simulation occurs, their goal is prompt identification of breach so they can successfully stop the invaders.
Purple TeamThe goal of the purple team is to blend both blue and red team members while encouraging them to work for a common purpose of detecting threats, sharing ideas, and getting constant feedback. It is not red vs. the blue team - it rather should be perceived as the cooperation between both teams through an adequate exchange of resources, reports, and knowledge, essential for the continuous improvement of the organization's security.

Red teaming is an evolutionary development of penetration testing that could be described as an attack simulation. Our IT security experts act as "free" attackers who work with thoroughly chosen tactics, methods, and goals of real actors from the fields of economic/industrial espionage, and organized cyber-crime.

In contrast to classic penetration tests, the focus here is not on identifying technical weaknesses in selected IT systems but on identifying and defending critical assets and core organization processes against real threats. For this purpose, concrete targets of a fictitious attacker are taken as a basis, giving the red team a realistic motivation and applying the methods the hackers do.

As part of this attack simulation, the IT security consultants of our Red Team reach out to the entire environment of your company to achieve these goals. After individual consultation with those responsible for the company, they act freely and can act as an attacker - without:
● predetermined target systems● defined time windows and execution times of the activities● restrictive test scope, and restrictions on methods of action.
If necessary, there is a regular feedback loop to the company's defense team to start a worthwhile defense step by step.

At the end of the Red Teaming project, the detailed final report examines and evaluates timing, attack indicators, and countermeasures are taken and recommends further organizational and technical measures to strengthen your organization's defensive capabilities over the long term.

We tailor the concrete missions of the red teaming to your company and the current IT security situation. The duration, therefore, depends on various factors:
● Number of mission objectives● Maturity of your IT security organization● Procedures of the (simulated) attackers
After the preliminary discussion, you will receive a free, non-binding offer.