Closed engagement · Adversary simulation

Find the attack before
the attacker does.

Authex Red duplicates real-world email attackers against your authorized domains. Wire fraud, invoice redirect, executive impersonation. We run controlled production tests against approved recipients and deliver evidence of where the message lands, what controls responded, and what business risk remains.

FBI IC3 reported over $55B in exposed losses from business email compromise between 2013 and 2023. Authex Red is $3,500.

Request brief

The Request

Start with one
short request.

Tell us your domains, the recipients you control, and what you want to learn. We reply within two business days. Authority over each domain is verified by a DNS TXT challenge during onboarding, before any work begins.

→ Request reviewed first. Payment reserves the engagement.
→ Testing begins only after authority and written scope are verified.
→ Full refund within 5 business days if we cannot proceed.

Engagement Fixed scope

$3,500

1 organization · up to 3 authorized domains · up to 5 approved recipients

A managed offensive email security assessment. We map your authentication posture, run controlled offensive testing in production against the agreed scope, and deliver an executive report with remediation guidance. Optional implementation support is available through Authex Labs.

✓ Authentication posture mapped across your authorized domains
✓ Controlled offensive testing in production against approved recipients
✓ Documentary evidence captured at every step
✓ Executive report with severity-ranked findings
✓ Remediation guidance, with optional implementation support through Authex Labs
✓ One retest after remediation

Pilot pricing available for early friendly customers. Multi-organization or bespoke scope quoted separately. Email red@authexlabs.com.

Full name

Work email

Organization

Role / title

Domains in scope (up to 3)

Authority over each domain is verified by a DNS TXT challenge during onboarding.

Recipients in scope (up to 5)

Mailboxes you control and can monitor. Leave blank to confirm during onboarding.

What do you want to learn?

I have authority to authorize security testing against this domain and any recipient mailboxes listed, on behalf of the named organization. I understand Authex Red is a closed, request-only service. Payment reserves the engagement; testing begins only after authority and written scope are verified. Authex Labs may decline at its discretion, in which case the deposit is refunded in full. I have read and agree to the Privacy Notice and Service Terms. I consent to Authex Labs processing this submission to review and respond to my request.

Authex Labs will use this submission only to evaluate and respond to your request. Submissions are not shared with third parties. Data retention details are in the Privacy Notice.

Request reviewed first. Payment reserves a fixed-scope engagement. Testing begins only after authority and written scope are verified. Refundable in full if we cannot proceed.

Find the attack beforethe attacker does.

Start with oneshort request.

Find the attack before
the attacker does.

Start with one
short request.