PHANTOM/X
OPS-LIVE
Phantom X is staffed by people who spent their careers inside offensive intelligence and product-security teams — NSA Tailored Access Operations, Unit 8200, GCHQ, and the red-team benches of CrowdStrike Services. You are buying years of operator judgment, not a junior analyst following a runbook.
Every Phantom X engagement is staffed by named operators you can vet before signing. No black-box staff-augmentation, no anonymous "senior consultants" — the people who scope your engagement are the people who run it.
US
11 years on offensive engagements across financial services and federal verticals. Leads Phantom X's continuous red-team program design and adversary-emulation playbooks.
IL
Specialist in cloud-identity attack paths and SaaS post-exploitation. Built the ATT&CK-mapped playbook library that underpins every Phantom X engagement.
UK
Leads Phantom X's purple-team exercise design and detection-evasion tradecraft. Frequent contributor to MITRE ATT&CK technique submissions.
US
Runs the bug-bounty triage partnership with two of the top-five U.S. banks. Designed the outcome-based pricing model now standard on Phantom X Tier-3 engagements.
The four profiles above are representative. Phantom X's full roster of 38 operators across the U.S., Israel, the U.K., Germany, Singapore, Canada, and Australia is provided to prospects during scoping under NDA.
These are not marketing ranges. They are the totals our delivery team reports against at quarterly review — and the figures an enterprise CISO can validate against CVEs, awards, and named publications.
At the 2023 Global Cyber Awards, our Lead Consultant Keren Lahav was named Red-Team Operator of the Year — recognized for sustained contribution to ATT&CK-mapped adversary emulation and for an unbroken record of pre-breach findings across regulated engagements.
"A real red team doesn't run a scanner and call it an engagement. Every Phantom X program is built around a named operator who owns the playbook end-to-end."
Keren Lahav · Lead Consultant
Tell us your environment, your threat model, and the questions your board is asking. We'll come back with a scoped engagement plan, a named operator team, and a fixed-fee proposal — typically within five business days.
Phantom X hires from NSA TAO, Unit 8200, GCHQ, and Fortune 100 red teams. If you have an active clearance and a portfolio of post-exploitation work, we want to hear from you. Submissions are reviewed by an operator, not a recruiter.