What an AI attacker finds tomorrow. Validated by an expert, today.
Automated tools and AI agents will soon probe companies' attack surface around the clock. The Red Teaming Starter brings that forward: our security expert attacks your systems from the outside with AI support — and shows you the weaknesses before anyone else finds them. Fixed price €2,500.
Tomorrow's attacker is automated
A targeted attack on a mid-sized company used to cost attackers time and skill. That is changing: AI-assisted tools increasingly handle reconnaissance, target selection and first attack attempts on their own — against many targets at once and without pause. What is overlooked today because nobody bothers will be found systematically tomorrow. The Red Teaming Starter brings that perspective forward. Our expert works with the same AI tools an attacker will soon use — but they decide, review every finding by hand and judge what it means for your business. You learn what an automated attacker can discover about your public systems while you can still act on it.
Pentest or red teaming: which do you need first? Red teaming vs. pentest: the comparison
The starter, and what goes beyond it
An affordable entry from the outside, with clear extensions on request
Red Teaming Starter (external)
Our expert attacks from the outside with AI support — no credentials, on a clearly bounded public attack surface, against one agreed objective. Fixed price €2,500, report in 10 business days.
Assumed Breach
On request: we start from an assumed internal foothold and work towards a crown jewel. For companies that want to know what happens after the first step.
Social Engineering & Phishing
On request: targeted campaigns instead of mass awareness — how do your staff react to an attack genuinely tailored to your company?
Detection Check
On request: we document every action with a timestamp and reconcile it with your logs and alerts — what was detected, what was not, and why.
Purple Teaming
On request: attack and defence in the same room. We demonstrate attack techniques under control, your team tunes detection and response as we go.
Full campaign
On request: multi-week, with a reconnaissance phase, dedicated infrastructure and a realistic threat scenario. A few engagements per year, planned well ahead.
The starter in numbers
Fixed price, fixed scope, no small print
How the starter runs
Controlled, documented, with a fixed result at the end
In a short call we agree which public systems are in scope and which single objective is tested. Not 'check security', but a concrete question — for example: can an outside attacker reach the protected export endpoint?
Written sign-off, the exact target systems, clear boundaries, a defined emergency stop and named contacts on both sides. No test begins without this basis.
Our expert probes the approved attack surface — with AI support for reconnaissance and selection, but with a human decision at every step. Priority weaknesses are validated by hand and followed to the agreed proof point. No destructive tests, no bulk download.
Every finding is reviewed by a second expert before it enters the report. The German security lead checks the conclusions, rates severity in business context and signs off the report.
Within 10 business days you receive a report with a management summary, technical findings and an editable action register — plus a 60-minute results meeting. What was tested and what was not is stated explicitly.
Once your team has fixed the findings, we verify on request that the corrections hold — for a fixed €300, requested within 30 days of the report.
Fixed scope, honest limits
The starter is deliberately small and affordable. For that to work, what is included — and what is not — is spelled out.
- Attack from the outside, no credentials, from an attacker's perspective
- One domain, up to five systems, one public application, one objective
- Security expert with AI support instead of raw scanner output
- Manual validation of priority findings to the agreed proof point
- Report with an action register and a 60-minute results meeting
- Independent second review, signed off by the German security lead
- Optional retest at a fixed €300
- Internal attacks and assumed breach — on request as a separate service
- Authenticated areas, user roles, tenant separation — separate scope
- Phishing and social engineering — separately commissioned
- Measuring your detection — a separate exercise with log access
- Destructive tests, denial of service, bulk data extraction
- TLPT under TIBER-DE or DORA — that requires accredited providers
The starter answers one outside question for a fixed price. If your environment is larger, or you need authenticated areas, roles or an internal view, we focus the starter on what matters most or turn it into a quote for a broader pentest — we tell you in scoping, before any extra effort begins.
Why the starter
Low price, a real attacker, a result you can act on
An expert with AI, not just a scanner
Scanners produce lists full of false positives. Our expert uses AI for speed and breadth, but decides themselves, validates every finding by hand and judges what it really means. A human is always accountable.
The view from outside
You see your company the way an attacker does who knows nothing about you except what is publicly reachable — exactly the vantage point the next wave of attacks comes from.
A result to act on
Not an 80-page raw dump, but a prioritised action register and a clear answer: the objective was reached — or not, and why. With an optional retest that confirms the fix.
Reviewed and accountable
Every report goes through a second expert review and is signed off by the German security lead. Delivery is handled by the team in Vietnam, accountability visibly in Germany.
Red teaming pricing
A fixed price for the starter, individual pricing for everything beyond
Red Teaming Starter
The external entry at a fixed price
- Attack from the outside, no credentials
- One domain, up to five systems, one objective
- Expert with AI support
- Report with an action register and a results meeting
- Second review, signed off by the German lead
- Report in 10 business days
Retest
Confirmation of your fixes
- Re-check of the selected findings
- Request within 30 days of the report
- Addendum to the original report
- Clearly marked: fixed, partial, open
- Bookable independently of the starter
Beyond the starter
Assumed breach, phishing, detection, campaign
- Internal foothold (assumed breach)
- Social engineering and phishing
- Measuring your detection with log access
- Authenticated areas and user roles
- Multi-week campaigns, a few per year
- Scope and price after scoping
Frequently asked questions about the starter
What customers want to know before the first test
A one-off external security test at a fixed price of €2,500. Our expert attacks a clearly bounded public attack surface from the outside — no credentials, with one agreed objective. You get a reviewed report with prioritised findings, an action register and a 60-minute results meeting. No subscription, no hidden costs.
No. A security expert runs the attack and is accountable for it — they decide what is tested, assess every finding and draw the conclusions. AI assists with reconnaissance, research and drafting, just as it soon will on the attacker's side. That is what makes us fast and affordable. The report is additionally reviewed by a second expert and signed off by the German security lead. We do not upload your data to unapproved AI services.
A pentest is coverage-oriented: it works systematically through an application — including authenticated areas and roles — and lists what is vulnerable. The starter is objective-oriented: an outside attacker tries to reach one concrete goal, on a deliberately small surface. The starter is the affordable first look from the outside; what it finds is often the reason to examine individual systems more thoroughly in a pentest afterwards.
The retest is optional and costs a fixed €300. Once your team has fixed the findings, we re-check the selected items and confirm in an addendum what is actually fixed, what is partial and what is still open. Request it within 30 days of the report.
Not deliberately. We use techniques aimed at access and proof, not destruction: no deletion, no encryption, no denial-of-service tests, no bulk download. We agree test windows, boundaries and an emergency stop beforehand — a named contact on each side who can halt the test at any time. Some residual risk can never be fully ruled out, so particularly sensitive systems are tested only after separate agreement.
The starter deliberately begins from the outside and without an account. It does not include internal attacks and assumed-breach scenarios, authenticated areas with user roles, phishing and social engineering, or measuring your detection. We offer all of these on request as separate services — with the necessary approvals, access and safeguards.
No. Threat-Led Penetration Testing under TIBER-DE or DORA targets a small set of named financial institutions, requires accredited providers and at least twelve weeks of testing, and is in a different price league. We offer TIBER-inspired scenarios for the Mittelstand — and say openly that this is not a regulatorily recognised TLPT.
Fixed price, fixed scope
See your systems before the next AI attacker does
In a short scoping call we confirm the target systems and the objective. After that you know exactly what gets tested — for a fixed €2,500, with a report in 10 business days.
Yen Ngoc Phan · Manuel Gruschka