Specialist / enquire
Red Team Assessments
Objective-led assessment of whether realistic intrusion paths are prevented, detected and contained.
A red team assessment tests a defined business objective across people, process and technology. Rather than maximising finding counts, the exercise follows realistic intrusion paths and records where preventative, detective and response controls succeed or fail.
Founder-led technical delivery
Why Safestorm for this assessment
Felix brings hands-on red-team, adversary-simulation and enterprise attack-path experience. Scenarios can span external exposure, identity, Active Directory, command-and-control assumptions, privilege escalation and network movement, but every technique is selected against an agreed objective and safety boundary.
- More than six years’ offensive-security experience
- OSCP and OSEP certified
- Red teaming, adversary simulation and control validation
- Published IPv6 research presented at BSides London
Felix’s prior experience includes identifying high-impact weaknesses in healthcare environments. Client identities and engagement details remain confidential.
What the assessment covers
Final coverage is agreed during scoping and reflects your technologies, user roles, threat model and operational constraints.
- Threat and objective-led scenario design
- External foothold, identity and assumed-breach starting positions
- Credential access, privilege escalation, lateral movement and pivoting
- Command-and-control and defence-evasion validation under explicit constraints
- Detection, triage, containment and escalation observations
Common risks identified
Testing is not limited to this list. These examples illustrate the types of material risk the assessment is designed to uncover.
- Preventative controls that can be bypassed by realistic attacker behaviour
- Security activity that is not visible to the expected monitoring controls
- Response procedures that do not operate as expected under test conditions
A controlled process
How the engagement works
- Step 1
Define objectives, threat assumptions and success criteria
- Step 2
Design scenarios, safeguards and rules of engagement
- Step 3
Prepare stakeholders, communications and stop conditions
- Step 4
Perform controlled testing and collect proportionate evidence
- Step 5
Analyse control performance, visibility and response
- Step 6
Debrief stakeholders, prioritise improvements and verify agreed changes
Who this service is suitable for
- Organisations with a defined assurance objective and authorised scope
- Security teams seeking focused validation beyond a conventional penetration test
Not sure whether this is the right assessment? Safestorm can help define the assurance question before recommending a scope.
Methodology and industry references
Testing is risk-led and tailored rather than reduced to a checklist. Relevant, recognised guidance helps structure coverage and communicate results.
Referencing a framework does not represent certification against it or guarantee compliance with every control.
Frequently asked questions
How is the engagement scoped?
Safestorm begins with an objectives workshop and prepares a tailored proposal and rules of engagement. No assumptions are made about techniques, targets or operational risk.
Is a fixed price available?
A quote follows scope definition. Specialist requirements vary materially, so the proposal reflects the agreed scenario, duration and safety requirements.
Define the right scope
Tell us what you need to assess, your timescale and the assurance outcome you need. We will propose a proportionate scope and clear rules of engagement.
Discuss your requirements