Purple

Defender or thinker (organisations, politicians or managers) learning from attacker.

  • A proactive vs. reactive mindset
  • Using resource circles
  • Pattern and timing
  • Focus on understanding and integration of that which seems mysterious

Purple integrates the defensive tactics and controls from blue teams with the threats and vulnerabilities found by red teams into a single narrative that maximizes both. They are bridgers with a stake in the narrative. The true purpose of a red team is to find ways to improve the blue team. Purple teams do not exist to facilitate red team/blue team interactions. If the red and blue team are not communicating in a healthy way and do not function properly, the solution is to fix their interaction dynamic — not to create a separate group that’s tasked with doing their job for them.


  • Last modified: 2019/11/13 08:15