VLAIO · Packages

Extension #1 — Red Team

A realistic attack simulation by external ethical hackers — see how far an attacker would actually get.

Duration: 4 to 6 weeks
Excl. VAT: €14,750
Net cost after 50% subsidy: €7,375

Who it's for

Organisations that want to stress-test their existing security controls and verify that their detection and response capabilities work in practice. Requires written consent and a clearly scoped engagement.

What's included

OSINT phase: what does the internet know about your organisation?
External attack surface mapping
Targeted phishing campaign (optional)
Exploitation attempts on identified weaknesses
Optional social engineering or physical test
Full rules of engagement upfront
Debrief and knowledge transfer with your IT team

What you get

Technical report with reproducible findings
Executive summary with business impact
Attack chain timeline
Recommendations per finding
Live debrief session

How it runs

01Week 1 — Scoping and rules of engagement
02Week 1-2 — OSINT and reconnaissance
03Week 2-4 — Active testing
04Week 5 — Reporting
05Week 6 — Debrief and delivery

Packages

START

A thorough baseline assessment and a concrete action plan to start working on.

MEDIUM

Everything in START, plus guidance to actually fix the most important findings.

PLUS

End-to-end program from analysis to executed improvements — including tooling and training.

Extension #2 — Extra guidance

Additional budget for implementation, follow-up, or audit and certification preparation.