A simulated attack, with a concrete goal, to see whether the company detects it and responds.
A pentest looks for as many flaws as possible in a set time. A Red Team operation is different: the team tries to reach a goal, such as critical data or a critical system, using the paths an attacker would use. The result shows whether detection and response work.
The test starts from a business goal, not from an open list of flaws.
Network, applications and people are in the path, as in a real attack.
We measure whether the company sees the attack and what the team does when it does.
At the end, the attack team and the defense team review together what got through and what was missed.