The pinnacle of Red Teaming — under the watchful eye of the regulator.
“Exploit Labs doesn’t offer Threat Intelligence services?”
Correct. Not for the market — but absolutely for ourselves.
Born out of sheer frustration with poor input during TIBER and Red Team attack simulations, we built an internal TI capability that actually delivers value: attack-specific, adversary-driven, regulator-ready. No feed noise. No recycled PDFs.
Why can we do this?
Years of contribution to the ENISA Threat Landscape Work Group
Advisory support for FSIs building contextualized TI functions
Decades of threat modeling experience through Red Teaming and Pentesting
What’s in it for you?
Actionable, high-fidelity input for threat-led testing — aligned with TIBER-EU, DORA, NIS2, or local regulations. No marketing fluff, just operationally relevant insights.
➡ Book your intro call now and execute your TIBER test with confidence.
1. What is TIBER-EU?
TIBER-EU is a framework established by the European Central Bank (ECB) and national supervisory authorities for threat intelligence-based ethical red teaming. Its purpose is to test the critical functions of financial institutions using realistic attack scenarios.
The framework was introduced in 2018 to strengthen the cyber resilience of the financial system.
2. What does TIBER-DE mean?
TIBER-DE is the national implementation of TIBER-EU in Germany, coordinated by the Deutsche Bundesbank and the Federal Ministry of Finance.
3. What phases does a TIBER test include?
A typical TIBER test is divided into three phases:
Preparation – Scoping (definition of critical functions, selection of service providers), procurement, and initiation
Execution – Red Team operation based on threat intelligence scenarios, conducted against live production systems
Closure – Reporting, replay sessions, derivation of countermeasures, and defensive improvement
4. Who is the target group for TIBER-DE?
Target groups include major financial institutions, insurance companies, financial market infrastructures, and their critical IT service providers.
5. What are the benefits of a TIBER test?
A well-executed TIBER test simulates realistic attacks — including modern tactics, techniques, and procedures (TTPs) — on critical functions. This enhances resilience against targeted cyberattacks and improves alignment with regulatory expectations.
6. What are the service provider requirements under TIBER?
The Guidance for Service Provider Procurement outlines clear minimum requirements for Threat Intelligence Providers (TIPs) and Red Team Testers (RTTs):
Proven experience with Red Team engagements and/or threat intelligence
Robust methodology, ethical execution, and absence of conflicts of interest
For large-scale tests: at least three references for TIPs, and five or more for RTTs
7. What are the risks and challenges in TIBER tests?
Since tests are conducted in live production environments, there are inherent risks to confidentiality, integrity, or availability. Careful risk assessment and coordination with service providers is essential.
8. How does a qualified service provider support the TIBER process?
An experienced TIBER provider brings key advantages:
Deep understanding of regulatory and procedural requirements
Expertise in developing and executing threat intelligence-based attack scenarios
Capability to deliver high-quality Red Team operations
Reporting aligned with supervisory and governance standards