Scoping Your First Red Team Engagement
A practical guide for security teams commissioning their first red team operation — objectives, scope, rules of engagement, and what to expect.
2025 Threat Actor Landscape: Financial Services
An annual review of the threat actors, TTPs, and campaigns targeting financial institutions. Includes MITRE ATT&CK mapping and detection guidance.
Pre-Engagement Security Baseline Checklist
Verify your environment is ready for a penetration test or red team engagement. Covers network, AD, logging, and detection tooling.
Reading Your Penetration Test Report
How to interpret findings, CVSS scores, and remediation priorities. Written for technical leads and CISOs who receive pentest deliverables.
Common Active Directory Misconfigurations — 2025 Edition
Aggregated findings from hundreds of internal assessments. The AD misconfigurations we find in nearly every environment — with remediation steps.
Adversary Simulation Maturity Model
A framework for understanding where your organisation sits on the adversary simulation maturity curve — and a roadmap to advance your programme.