What are red teams and blue teams?

In security exercises, the red team plays the attacker and the blue team defends. A red team exercise is broader than a penetration test: it tries to reach a goal, such as reading the finance share, by any realistic means, while staying hidden, so it tests people and processes as well as technology. The blue team is whoever detects and responds, often the IT or security team. When both sides work together openly and share what worked, it is called purple teaming. NetSenX's breach and attack simulation, on the Business plan, runs safe simulated attack steps so you can check what your detection notices.

← All 69 questions on What is…? Network and security termsAll topics