Free Consultation
Home
VAPT Web Application PentestAPI PentestMobile App PentestInfrastructure PentestAI & LLM PentestOT / ICS PentestIoT PentestPenetration TestingAll VAPT services
Red Team Red Team EngagementAdversary SimulationAssumed BreachPurple TeamingSocial Engineering
Sectors Banking & Financial ServicesGovernment & Public SectorHealthcareOil, Gas & EnergyAviation & LogisticsRetail & E-commerceManufacturing & IndustryTelecommunicationsTechnology & SaaS
CompanyResourcesBlogFree Consultation

Field notes

The RedTeam Security blog

How engagements actually run, what UAE regulators are asking for, and the parts of this work nobody puts in a brochure. Written by the people who run the engagements.

A lone operator silhouetted at a terminal in a darkened room.

More articles

RSS
DetectionA dark desk holding a grid of small glass panes, most of them dim and three glowing red from behind, with thin copper wires running from the lit panes to a brass listening horn at the front edge.

What your monitoring should catch during a web app pentest

What your logs and alerts should show while a web application pentest runs, which fields make authorisation abuse visible, and how to close the gaps found.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
UAE regulationA ring binder open on a dark desk with tabbed dividers, a brass inspection stamp resting beside it, a half-unrolled technical drawing and a glass-fronted server cabinet behind.

The UAE rules that ask for a web application pentest

CBUAE, DESC, ADHICS and the UAE IAS all name security testing. What each asks of a web application, and the evidence an assessor reads.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
6 min read
MethodologyA brass patch panel on a workbench, rows of identical sockets with cloth-covered cords crossing from one row into another row's sockets, a hinged inspection mirror propped beside it and a coil of spare cord.

What a web application pentest covers, and what it does not

What a web application pentest tests: every role, object and function level authorisation, business logic and the OWASP classes, and what it leaves out.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
DetectionA workbench holding a tripwire strung between two brass posts, one post shifted so the wire sags, beside a calibration weight, a small oil can and a closed ledger.

Detection decay: keeping purple team rules working after the session

Purple team detection rules decay after the session. Soak, tune, record and re-run them so the content you paid for still fires months later.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
Buying adviceA thick bound document lying open on a dark desk, its pages held flat by a steel rule, coloured index tabs along the outer edge and a magnifying glass resting at the corner of the lower page.

What a penetration test report has to contain

The sections a penetration test report has to carry, how to judge a single finding, and what to send back to the tester before you accept the draft.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
Buying adviceThree unmarked paper documents fanned across a dark desk, each held open by a differently coloured metal clip, with a brass magnifying glass lying across the middle one and a small balance scale behind them.

How to compare penetration testing proposals

Compare pentest proposals on method, testers, days, deliverables, retest and contract terms, so the lowest quote is not just the shortest test.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
Buying adviceAn open hard-shell case on a workbench, its shaped foam holding a ring of keys, a coiled network cable and a stack of blank access cards, one cutout still empty beside a folded diagram.

What to have ready before a penetration test starts

Accounts, environments, documents and contacts to have ready before a penetration test starts, so the days you paid for go on testing rather than access.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
Buying adviceTwo identical control consoles facing each other on one long desk, joined by a single thick cable, one lit warm red and the other cool blue, with a stack of blank cards between them.

Purple team or Red Team: which exercise answers your question

Purple teaming builds detection your team owns. A Red Team engagement measures whether you would notice. Which to buy, in what order, and what each leaves.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
MethodologyA planning board holding a vertical column of blank index cards clipped in order, three of them lifted out into a shallow metal tray, with a magnifying lens resting across a card near the top.

How to build the technique list for a purple team session

Where a purple team technique list comes from, how to write each entry as a procedure a detection can key on, and what to leave off the list.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
8 min read
MethodologyA long workbench under a round wall clock, holding four steel trays in a row, with a single cable looping from the last tray back to the first and a stack of plain cards in the nearest tray.

How a purple team session runs, hour by hour

What happens in the room on a purple team day: the execute, observe, verdict and tune loop, who has to be present, and what leaves with your team.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read
DetectionA dense bundle of cables converging on a single lit junction panel, with several strands ending in darkness before they reach it.

The detection you need before a Red Team is worth buying

What must be in place before a Red Team engagement can measure anything: process and identity telemetry, retention, technique coverage and a response path.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
8 min read
Buying adviceA drafting table with a building plan on it, three rooms outlined in bright thread and pinned with markers while the rest of the plan stays faint

How to scope a penetration test, and what to leave out

Scope decides what a penetration test can find. How to name assets, hand over credentials, set exclusions and buy the number of days the work needs.

Joel Aviad OssiJoel Aviad OssiRed Team Lead, RedTeam Security
7 min read

Let's talk about your security

Tell us the objective you want tested. We will come back with a scope, a timeline and a quote.

Email [email protected]
IFZA Business Park, Building A2
Nadd Hessa, Dubai Silicon Oasis
Dubai, United Arab Emirates