Different teams test and improve security posture.
Red Team
- Simulates real attackers
- Full-scope engagements
- Tests people, process, technology
- Goal: Find weaknessesBlue Team
- Defensive security
- Monitors and responds
- Operates security controls
- Goal: Detect and defendPurple Team
- Collaboration between red/blue
- Knowledge sharing
- Continuous improvement
- Goal: Maximize effectiveness