// GLOSSARY

Offensive Security

A category of security practice that aims to produce defensible assurance by moving from the attacker's side. It is not the same as 'hacking' or 'cyber attack'; it is a discipline with scope, rules and evidence object defined in advance, running under controlled execution. Where it parts from defense is not a difference of tool or technique but of perspective: defense asks 'what must I protect, which control must I build' and constructs on assumptions; offensive security asks 'how does this break, where would an attacker get in' and brings the answer not with assumption but with evidence. The value of this perspective is this: whether a defensive control actually works is understood only when it is tested by someone trying to break it; an architecture that looks correct on paper may harbor an attack path in the field. Offensive security closes this gap: it surfaces the defense's blind spots through the attacker's eyes and methods, but without the attacker's intent and lack of a frame. The Red in Pulse category identity rests on this ground; all of the firm's services are framed as applications of this discipline.