Published · By the Aesparrow Security Research Team
Short answer
A penetration test tries to find as many exploitable vulnerabilities as possible within a defined scope and time. A red team assessment emulates a specific real-world adversary, using stealth across people, process and technology, to test whether your security team can detect and respond. Pentests measure vulnerabilities; red teams measure resilience.
How do red teaming and penetration testing compare?
| Penetration testing | Red teaming | |
|---|---|---|
| Objective | Find and fix vulnerabilities | Test detection and response |
| Scope | Defined systems | Organisation-wide, goal-based |
| Stealth | Not required | Essential |
| Defenders informed | Usually yes | Usually no |
| Duration | Days to weeks | Weeks to months |
| Framework | OWASP, PTES, NIST | MITRE ATT&CK, threat intelligence |
What is purple teaming?
Purple teaming is a collaborative exercise where the red team (attackers) and blue team (defenders) work together, replaying techniques and tuning detections in real time. It is the fastest way to turn red-team findings into improved monitoring.
FAQ
Frequently Asked Questions
Clear answers about what we do — and what we don’t. If you have any other questions, feel free to reach out to our team.
When should an organisation do a red team assessment?
After it has a reasonably mature security programme — regular penetration testing, patching and a monitoring capability — and wants to test how well those defences work against a realistic attacker.