Secureworks Adversary Group

The Secureworks Adversary Group is Secureworks' offensive security team, which became part of Sophos when Sophos completed its acquisition of Secureworks in February 2025. The group runs red team, penetration testing and adversary emulation engagements that show how real attackers could get into an organization and what they could reach once inside.

Engagements are goal-based rather than checklist-driven. Testers use tactics, techniques and procedures observed by the Secureworks Counter Threat Unit and by incident responders, and can cover external and internal networks, web applications, cloud environments, social engineering, phishing, wireless networks and physical intrusion. Each engagement ends with a report describing the attack paths used, their business impact and prioritized remediation, with findings mapped to MITRE ATT&CK.

Organizations use the Adversary Group to test whether their defenses and detection hold up against a skilled attacker, meet regulatory testing obligations such as PCI DSS and threat-led testing schemes, and give leadership an evidence-based picture of cyber risk.