04DefianceX
Test your defences the way a real adversary would.
DefianceX is a closed, sovereign assurance platform for authorised adversary simulation and continuous security validation — scoped, controlled and fully auditable. It evaluates whether enterprise defences withstand sophisticated, evasive techniques, and turns every result into hardening.
Capabilities
DefianceX is a closed, sovereign assurance platform for authorised adversary simulation and continuous security validation — scoped, controlled and fully auditable. It evaluates whether enterprise defences withstand sophisticated, evasive techniques, and turns every result into hardening.
Posture validation
Built-in checks for ETW, AMSI, DLL-hook and in-memory execution integrity to validate detection coverage.
Network simulation & malleability
Configurable profiles over HTTPS/WSS and authorised tunnels to test egress monitoring and deep-packet inspection.
Audit & hardening loop
Granular day-by-day logging of every simulation action, feeding directly into defensive rule and EDR/XDR hardening.
Authorised & auditable
Every campaign runs under explicit authorisation, scoped and compliance-logged from first action to report.
Architecture
- 01Unrest UI
Operator management
Multi-user campaign orchestration, operator management and compliance auditing in one console.
- 02RIOT TeamServer
Secure coordination
Central coordination with REST API support and TLS-encrypted operator communications.
- 03Freedom / Rebel
Scoped simulation payloads
Position-independent code and dynamic API resolution for memory-safe execution within an authorised scope.
- 04Egress
Egress profiler
Simulation traffic shaped to validate DPI, egress monitoring and SaaS-tunnel detection.
Campaign console
Where it is used
Continuous validation
Prove defences keep holding against evolving, evasive techniques over time.
EDR/XDR hardening
Convert each simulated action into concrete detection and response rules.
Egress assurance
Confirm monitoring and DPI catch the traffic patterns that matter.
Red-team enablement
Give authorised teams a sovereign, auditable platform under NDA.
Authorised, sovereign, under your control.