Initial Access Toolkit
Most intrusions begin at the front door. This toolkit lets an authorized red team test the entry points a real adversary would target first, and measure how quickly your team detects and responds.
Request AccessLicensed to verified organizations only. Access requires proof of authorized use.
What it is for
Perimeter scanning tells you what is exposed; it does not tell you whether an attacker could get a user to run their payload, or whether your controls would catch it if they did. Initial access, delivery, user execution, and establishing a foothold - is where the majority of real intrusions begin, and it is the phase most detection programmes test least.
The Initial Access Toolkit gives a verified red team a controlled, realistic way to exercise that phase end to end, so you can see whether delivery is blocked, whether execution is detected, and how fast your team responds, then fix the gaps before a real campaign finds them.
Capabilities
Payload delivery
Includes ClickOnce and related delivery paths so you can test whether your email, web and endpoint controls stop a realistic delivery attempt.
Launchers & loaders
Exercises user-execution and foothold-establishment tradecraft so your detection and response can be measured at the exact moment access is gained.
Campaign telemetry
Tracks the campaign from delivery through execution to callback, giving your team an evidence trail of what happened and what was seen at each step.
Who it is for
Professional red teams running authorized initial-access and phishing-simulation engagements.
Enterprise security teams validating their own delivery and user-execution defenses.
MSSPs and cybersecurity firms delivering adversary-simulation services under contract.
Licensing & responsible use
This is adversary-simulation tooling, and it is licensed accordingly. It is not sold to individuals and is not available for anonymous purchase.
- Access is granted only after organization verification (KYC) and a signed licence agreement.
- Use is limited to engagements you are explicitly authorized to perform, under written scope.
- Misuse, resale, or use outside an authorized engagement terminates the licence.
Test your front door
Tell us about your organization and your authorized use case, and we will walk you through verification and access.
Request Access