team

Six people. One surface: yours.

TENEBRA operates as a compact six-person red team, aligned on one goal: mapping the real attack paths in your environment — before someone else does. Active together since 2023.

O1 / “VECTOR”

lead operator · engagement design

Designs full-scope operations, from initial recon to objective mapping. Responsible for rules of engagement, threat modeling and overall signal quality.

threat modeling ops design red team mgmt

O2 / “EMBER”

initial access · infrastructure

Focused on footholds: exposed services, weak perimeters, misconfigurations and forgotten assets. Builds and maintains covert operator infrastructure.

recon infra osint

O3 / “FAULTLINE”

exploitation · zero-days & n-days

Responsible for exploit development and chaining. Takes bugs from “interesting” to “impactful” under realistic constraints.

exploit dev web/appsec research

O4 / “GHOSTWIRE”

lateral movement · AD & identity

Lives inside identity systems. Maps privilege boundaries, abuses trust edges and turns one compromised account into meaningful access.

active directory identity lateral movement

O5 / “CIPHERLINE”

blueteam evasion · telemetry shaping

Designs operations around your detection stack. Ensures that activity is detectable in theory — but rarely in practice.

evasion telemetry purple teaming

O6 / “TRACE”

reporting · narrative & remediation

Turns raw attack paths into something executives and engineers can act on: concise narratives, prioritized fixes and realistic follow-up scenarios.

reporting remediation exec briefings