Bruno Imperador
Pentester & Red Team Operator
Adversary SimulationLateral MovementDefense EvasionC2 & Evasion
Porão Security / Red Team
Having defenses is
one thing. Detecting
the attack is another.
We act as a real adversary — a continuous, stealthy attack that tests people, processes and technology, and measures whether your defense notices, responds and contains in time.
Tactical
MITRE ATT&CK
Social engineering
Red & Purple
T1566 · Initial AccessSpear phishingOne click on an attachment opens initial access.
undetected
T1134 · Privilege EscalationToken abuseFrom standard user to local administrator.
alert ignored
T1550 · Lateral MovementPass-the-HashJump to the file server with no password.
undetected
T1048 · ExfiltrationDNS exfiltrationSensitive data leaves disguised as legitimate traffic.
undetected
Time to detection: neverObjective reached
Illustrative example. Rules of engagement agreed before any action.
01 / Why a Red Team
Buying the tool isn't the same as being protected.
EDR, SIEM, SOC — you invested. But the only way to know it all works together, under pressure, is for someone to actually try to get through.
?
Do you detect?
An installed EDR doesn't guarantee the right alert reaches the right person. We measure what actually fires.
?
Do you respond in time?
Between the alert and the action there are minutes — or hours. The adversary counts on that window. We time it.
?
Do you contain?
Isolating what's compromised before it spreads is what separates a scare from a serious incident.
02 / What we do
An operation that covers the whole chain.
From reconnaissance to simulated exfiltration — every step mapped, documented and reproducible.
01
Social engineering
Controlled phishing, pretexting and physical access — the human link, tested.
02
Leaked credential hunting
Access exposed in breaches, dumps and open sources, used the way an attacker would.
03
Detection validation
We check whether critical events are actually logged, correlated and alerted.
04
Threat advisory
Modeling aligned to your sector, your assets and the adversaries that actually target you.
05
Technical & executive reports
From the command line to the boardroom decision — each finding with context and a path to fix.
06
Continuous assessment
Recurring tests to track whether the defense evolves along with the environment.
03 / Modes
Against the defense — or side by side with it.
We map every technique to MITRE ATT&CK, which eases correlation with SIEMs and EDRs and enriches the final report.
Stealth mode
Red Team
The defense team is not warned. We measure detection and response in the most realistic scenario possible — like a real attack.
Collaborative mode
Purple Team
Attack and defense work together, in real time. Each technique becomes a chance to tune detection and response on the spot.
04 / Team
Operators with real experience.
The same people who plan the operation run the engagement and sign the report.
Diogo Scrivano
Pentester & Red Team Tool Developer
Adversary SimulationSocial EngineeringTooling DevelopmentDetection Validation
05 / FAQ
Frequently asked questions
Have a specific question? Our team is ready to help.
Entre em contatoOperations are planned together with the client to minimize impact. We define clear rules of engagement up front, including out-of-scope systems and sensitive hours.
Risk is managed through the rules of engagement. Destructive actions are never carried out without explicit authorization. Our goal is to simulate the adversary, not cause real harm.
It depends on the engagement mode. In Purple Team operations, the Blue Team actively takes part. In a traditional Red Team, the defense team is not warned, to test detection realistically.
Red Team operations usually run 4 to 12 weeks, depending on the complexity of the environment and the defined objectives. Initial planning can add 1 to 2 weeks.
Yes. We map every technique and tactic used to the MITRE ATT&CK framework, which eases correlation with defensive tools such as SIEMs and EDRs and enriches the final report.
Next step
Find out if your
defense holds.
The difference between thinking you're protected and knowing it. Tell us your scenario and we'll reply within 1 business day.