University of Sydney Code Library Breach: Disclosed 18 Dec, 2025

Personal details of about 27,500 current and former staff exposed.

18 Dec 2025 - Syd Uni breached
Read more

Test your defences against
the threats that matter.

Threat-informed adversary simulation that validates your controls against techniques relevant to your organisation.

Focus on relevant threats

Understand the threat

Build a threat profile around the actors and behaviours relevant to your sector, critical assets and operating environment.
red-purple-teaming@2x

Validate your controls

Test representative attack techniques and observe where prevention and detection hold, where visibility is missing and which paths remain open.
adversary-simulation@2x

Prioritise relevant improvements

Connect observed gaps to the selected threat profile, giving your team an evidence-based roadmap for the changes that matter most.

How the simulation works

1. Profile the threat

Select the relevant threat actor or behaviour set, documenting the intelligence sources, assumptions and objectives.

2. Plan the campaign

Map representative techniques to MITRE ATT&CK and agree scope, operating boundaries and stop conditions with your trusted control group.

3. Simulate the activity

Execute the approved attack paths, using agreed safe substitutions where exact techniques would create unacceptable risk.

4. Explain the results

Connect the attack narrative to observed control performance and a prioritised remediation roadmap, with validation where contracted.

What you receive

Threat and control evidence

  • A documented threat profile and campaign plan.
  • An executive and technical report, with the attack narrative, MITRE ATT&CK mapping and observed control performance.

A focused improvement roadmap

  • Prioritised remediation linked to the selected threat profile.
  • A restricted readout, with remediation validation where contracted.

Adversary simulation questions

When is adversary simulation useful?

It suits mature organisations seeking targeted validation against a particular threat actor or set of behaviours. We agree the threat profile, critical assets and objectives before planning the simulation.

How does this differ from red and purple teaming?

The selected threat profile anchors an adversary simulation. Red teaming tests what an attacker could achieve against agreed objectives, while purple teaming brings attackers and defenders together to improve controls. Scoping defines the approach and level of defender involvement.

Will you reproduce every technique used by an actor?

Threat intelligence has limits. We distinguish known actor behaviour, assessment assumptions, safe substitutions and actual observations. Where exact techniques would create unacceptable risk, we agree alternatives and explain their effect on the assessment.

Is this an ongoing service?

Adversary simulation is a bounded, one-off engagement. For continuing validation as threats and your environment change, we can discuss Continuous Threat Emulation.

How would your defences perform?

Let’s identify the threat profile and objectives for your simulation.
Discuss your threat concerns