Outflank

Ten years of red-teaming, research, tooling, and tradecraft.

Since 2016, Outflank has been red teaming and building OST to help other red teams replicate real-world attack scenarios and put defensive capabilities to the test.

Thank you to everyone who has contributed to the journey: our customers, partners, and the wider offensive security community.

Here’s to the next decade of evolving tradecraft.

Read about our journey and the free goodie give away in the blog post. outflank.nl/blog/2026/11/1…

We are honored to be a technical partner in NATO @ccdcoe #CrossedSwords2026, an advanced cyber operations exercise with 40+ countries, designed to train cyber defenders on defensive and full-spectrum offensive cyber operations within a simulated crisis. Read more: ccdcoe.org/news/2026/exer…

On Nov 9th the Outflank R&D team will host a live demo of their offensive security product OST.

What to expect during 60 minutes?
☁️ Initial access techniques for cloud
🥷 Evasion of leading EDR products
📡 Next-gen C2 framework
⚙️ Kernel tradecraft
register.gotowebinar.com/register/66928…

Your MCP server works fine, but the agent can't find a tool, ignores your constraints, or misses key output. Why?
The client decides what the model sees. We dug into Codex and Claude Code to find out what they truncate, change, or drop entirely. ow.ly/h7L750ZTvaF

See what we're brewing at Outflank! No, it's not pumpkin spice security, but new tooling and tradecraft are always on the menu for OST. Join us on Sept 14 at 9:00am CDT for a live demo of our evasive offensive toolset for red teamers. Register now: register.gotowebinar.com/register/59662…