01
PRIMARY
Book a Red-Team Scoping Call
Pick a 30-minute slot with an operator. You leave the call with a written engagement brief — scope, adversary profile, price band, and timeline.
// contact // engagement intake
Book a red-team scoping call.
Book a red-team scoping call.
Not a sales call.
30 minutes with an operator — not an SDR. You leave with a scoped engagement brief, a rough adversary profile, and a clear price band. Sensitive buyers (federal, banking, critical infra) have a hardened intake path below.
// intake paths
Four ways in. Pick the one that matches your risk profile.
Standard path for most buyers. Hardened path for federal, banking, and critical-infrastructure teams who need to send sensitive scope details without exposing them to a public form.
Federal / Cleared Intake
For agencies and contractors under CMMC, FedRAMP, or CUI handling rules. Uses our FIPS-validated intake form over TLS 1.3, with scope artifacts exchanged in a CJIS-aligned enclave.
Request Federal Intake FormPGP-Encrypted Brief
Send sensitive scope, architecture diagrams, or asset lists via PGP. We acknowledge within 15 minutes, decrypt in an air-gapped review box, and return a sanitized engagement brief.
PGP 0x4F2A9C7B3E11DD04 · [email protected]
After-Hours & Incident Pivot
Already in an incident or post-breach posture? Our IR pivot team can be engaged off-cycle. Use the war-room line or the encrypted form — both reach a duty operator, not a queue.
+1 (703) 555-0184 — Duty Operator
// why us, specifically
Four specific signals. No "trusted by thousands."
- 41 Published CVE credits since 2019, including 3 vendor-acknowledged criticals.
- CSO Named to CSO Online's "Top 10 Boutique Red-Team Firms" in 2023 and 2024.
- 2023 "Red-Team Operator of the Year" — Global Cyber Awards (Keren Lahav, Lead Consultant).
- FedRAMP Moderate authorization. SOC 2 Type II. ISO 27001. U.S. SECRET facility.
// operations layer
What your security architect will ask before authorizing outreach — answered here.
Operator response on every active engagement channel. Acknowledged in writing within 15 minutes during 09:00–21:00 ET business hours; after-hours via the duty line.
Dedicated Slack or Signal channel per engagement, joined by lead operator and engagement manager. Sub-15-minute response from a named human, not a bot.
Engagement data stored in U.S. EAST (Reston, VA) by default. Tel Aviv ops hub available for clients requiring EU/IL-adjacent residency. CJIS-aligned enclave for federal work.
Cleared facility (Reston HQ). 38 operators across 7 countries. 70% from offensive roles at NSA TAO, Unit 8200, GCHQ, and Fortune 100 red teams.
// what you leave with
30 minutes. A scoped engagement brief in your inbox by Friday — not a sales deck.
Your scoping call is run by an operator who has run engagements against environments like yours. You leave with a written brief: scope, adversary profile, price band, timeline, and the one thing every other firm skips — a candid list of what we will not test until you authorize it.
Phantom X Offensive Security, Inc. · 11710 Plaza America Drive, Suite 420, Reston, VA 20190 · +1 (703) 555-0184 · [email protected]