Vendor Evaluation for Red Teaming Engagements

This document is a guide designed to assist organizations in evaluating potential red team vendors. It outlines key evaluation dimensions that should be considered before selecting a vendor, including objectives and intent alignment, scenario design approach, threat modeling, evidence and decision support, people and process considerations, modern environment coverage, engagement style, and partnership model. Each dimension includes specific evaluation prompts that organizations can use to assess how vendors approach their services. The guide emphasizes the importance of understanding a vendor's methodology and their ability to tailor engagements to the organization's unique environment and maturity level. Additionally, it provides a confidence scoring legend to help quantify vendor capabilities based on the responses to the evaluation prompts. This structured approach aims to facilitate informed decision-making when selecting a red team vendor.