What Outflank does

Outflank B.V. is a Netherlands-based offensive security firm founded in 2016 and operating as a wholly-owned subsidiary of Fortra, LLC since its 2023 acquisition. The company builds and sells Outflank Security Tooling (OST), a cloud-native platform comprising over 30 specialized red team tools delivered through an online portal under a quote-based, multi-year subscription model. Core components include the proprietary Outflank C2 framework (formerly Stage1) with native implants for Windows, macOS, and Linux written in C/C++/ASM, a PE Payload Generator with EDR-evasion presets, Lateral Pack, Builder, PhisherPrice, Credential Pack, Sharpfuscator, Hidden Desktop, InfraRED infrastructure management, and a suite of BOFs and post-exploitation modules. The platform is engineered for advanced adversary simulation in hardened environments, with bi-weekly releases delivering OPSEC improvements and 1-2 new tools per quarter, and integrates directly with Fortra's Cobalt Strike (via BOFs and reflective DLL loading) and Core Impact products.

Outflank monetizes through multiple streams: (1) OST subscriptions on multi-year contracts, (2) bundled suites (Red Team Suite = Cobalt Strike + OST; Offensive Security Suite = Core Impact + Cobalt Strike + OST) with exclusive Cobalt Strike Research Labs access and certified operator training, (3) professional red teaming and TIBER testing services for the financial sector, and (4) in-company security training (DAMTA and WinADSec courses). Distribution is entirely direct enterprise field sales gated by a mandatory use-case vetting process, with no self-serve channel, and global availability through Fortra's infrastructure subject to export restrictions to a defined list of countries. The company also maintains a private Slack community for OST users that drives feedback-led R&D and peer collaboration. With a team of 11-15 highly experienced practitioners (each with 10+ years of red teaming experience), Outflank has trained over 1,000 security professionals, delivered more than a dozen TIBER tests, and supports named customers including BAE Systems, Van Lanschot Kempen, Boubyan Bank, and Secura.

Name

Outflank

Legal name

Outflank B.V.

Website

https://outflank.nl

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1–10 employees

Short description

Outflank is a Netherlands-based offensive security firm (Fortra subsidiary) that builds and sells Outflank Security Tooling, a subscription platform of 30+ red team tools, bundled with Cobalt Strike and Core Impact, for enterprise red teams and financial-sector TIBER testers.

Ownership category

akta.pro rank

Product category

Offensive Security Software (Red Team Tooling)

NAICS

Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKADAE)

akta.pro secondary industries

SOAR & Security Automation (HDADAGAB), Security Operations (SOC), Incident Response & Threat Hunting (EDAOAIAI)

Keywords

• Red team tooling
• Offensive security software
• Adversary simulation services
• EDR evasion tools
• Cybersecurity training

Headquarters

HQ city

Amsterdam

HQ country

Netherlands

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Outflank Security Tooling (OST) Subscription: OST is offered in a subscription model. The toolkit is accessible via an online portal with continuous updates, new tool additions, and support provided through a private Slack community. Pricing is quote-based and not publicly disclosed. Screening and export regulations apply.
2. Red Teaming Services: Outflank provides professional red teaming and attack simulation services, including TIBER testing for the financial sector. These are consultative engagements that complement the software tooling.
3. Security Training: Outflank offers instructor-led security training programs including the Defend Against Modern Targeted Attacks (DAMTA) course (3 days) and Windows and Active Directory Security (WinADSec) course (2 days). Trainings are available as in-company editions, with no public editions currently scheduled.
4. Cobalt Strike Distribution: Outflank resells and distributes Cobalt Strike as part of its product portfolio, including the Red Team Suite (Cobalt Strike + OST) and Offensive Security Suite (Core Impact + Cobalt Strike + OST). Revenue comes from software licensing in conjunction with the suites.
5. Cobalt Strike Research Labs Access: Access to CS:RL is included as an exclusive benefit of the Red Team Suite and Offensive Security Suite, providing specialized tooling developed by the combined Cobalt Strike and Outflank teams.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Outflank develops and sells Outflank Security Tooling (OST), a cloud-native subscription-based offensive security suite comprising 30+ specialized red team tools that cover every step of the attacker kill chain, including the proprietary Outflank C2 framework, PE Payload Generator with EDR-evasion presets, lateral movement tooling, credential extraction modules, and OPSEC-focused tradecraft. The company also resells Cobalt Strike and Core Impact, bundles them with OST into the Red Team Suite and Offensive Security Suite, operates the Cobalt Strike Research Labs (CS:RL) research initiative, and delivers professional red teaming services and instructor-led security training.

Product overview

Outflank offers a comprehensive portfolio of offensive security products centered around Outflank Security Tooling (OST), a platform of over 30 specialized red team tools covering the entire attack kill chain. OST includes core components such as Outflank C2 (a custom C2 framework), Payload Generator (for EDR-evading payloads), Lateral Pack, Builder, PhisherPrice, Credential Pack, and various BOF utilities. The company resells and integrates with Cobalt Strike and Core Impact, offering bundled solutions: the Red Team Suite (Cobalt Strike + OST) and the Offensive Security Suite (Core Impact + Cobalt Strike + OST). Beyond software, Outflank provides professional red teaming services, security training courses (DAMTA, WinADSec), and operates Cobalt Strike Research Labs as a joint research initiative with Fortra's Cobalt Strike team. OST delivers tools via an online portal with subscription model, features a private Slack community, and maintains rapid development with releases every two weeks including new tools quarterly.

Differentiator

Problem solved

Functional benefit

Brands

• Outflank Security Tooling (OST): A broad set of evasive red team tools covering every step of the attacker kill chain, including Outflank C2, Payload Generator, Lateral Pack, and 30+ other tools for offensive security operations.
• Cobalt Strike
• Outflank C2
• PE Payload Generator

Products and services

• Outflank Security Tooling (OST) Comprehensive red team toolkit engineered by active practitioners for performing advanced adversary simulations in mature, security-hardened environments. OST covers every step of the attack kill chain with over 30 specialized tools focused on evasion techniques, anti-forensics, and EDR bypass capabilities, accessible via a cloud-native online portal with a subscription model.
• Outflank C2 Lightweight, purpose-built Command and Control (C2) framework (formerly known as Stage1) with advanced OPSEC features, native implants for Windows, macOS, and Linux, and out-of-the-box evasion techniques including sleep masking and ETW blinding. Ships as a core component of OST.
• PE Payload Generator OST tool for creating advanced, OPSEC-focused payloads with state-of-the-art evasion techniques, including EDR presets for one-click bypass configurations, 40+ manual obfuscation options, and anti-forensic capabilities. Ships as a core component of OST.
• Cobalt Strike Benchmark red teaming tool ideal for adversary simulations, particularly post-exploitation exercises. Features the signature Beacon payload and a flexible malleable C2 framework designed to be easily modified by red team operators. Distributed by Outflank under the Fortra portfolio.
• Core Impact Automated penetration testing solution that validates vulnerabilities across networks, applications, and endpoints with exploitation capabilities to effectively prioritize risk. Distributed by Outflank as part of the Fortra portfolio.
• Red Team Suite Combined offering of Cobalt Strike and Outflank Security Tooling (OST) that enables operators to execute diverse tasks across the entire attack chain. Includes exclusive access to Cobalt Strike Research Labs (CS:RL) and Certified Operator training.
• Offensive Security Suite Enterprise suite combining Core Impact, Cobalt Strike, and OST for comprehensive security assessments. Includes exclusive Cobalt Strike Research Labs access plus both Cobalt Strike and Core Impact operator training programs.
• Red Teaming Services Expert red teaming and attack simulation services applying realistic attacker techniques to prepare organizations for real incidents. Includes TIBER testing expertise for financial sector clients, with Outflank having delivered more than a dozen TIBER engagements.
• Defend Against Modern Targeted Attacks (DAMTA) Three-day intensive instructor-led training course teaching defensive techniques against modern offensive methodologies used by red teams and real-world attackers. Includes realistic lab environments with Cobalt Strike exercises. Delivered as in-company editions.
• Windows and Active Directory Security (WinADSec) Two-day technical deep-dive into Windows and Active Directory security, providing understanding of attack methodologies and security controls for detection. Delivered as in-company editions.
• Cobalt Strike Research Labs (CS:RL) Collaborative research initiative between Cobalt Strike and Outflank teams delivering cutting-edge research tooling for Cobalt Strike including custom UDRLs, Sleep Masks, UDC2 channels, and post-exploitation capabilities. Features Lucky Strike loader, Beacon Booster overhaul, and experimental process injection techniques. Available as part of Red Team Suite and Offensive Security Suite.

Quantifiable outcome

• Time reduction: weeks of development time to create EDR-evading payloads reduced to minutes using Payload Generator's EDR presets
• +3 more outcomes

Named customers8 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability4 records

Feature16 records

Partnerships

Six partnerships are on record, tiered core, secondary and minor.

• Zero-Point SecuritycoreStrategic or Co-development Partner · 26 March 2026Fortra acquired Zero-Point Security in 2026. Zero-Point Security founder Daniel Duggan (RastaMouse) joined the Fortra/Outflank team. Zero-Point's CRTO and CRTL courses (Red Team Ops I and II) are now part of Fortra's training portfolio. A dedicated Cobalt Strike training course was previously launched as a collaboration in 2025. CS:RL provides access to Zero-Point Security's dedicated Cobalt Strike training.
• FortracoreStrategic or Co-development PartnerOutflank is a wholly-owned part of Fortra's comprehensive cybersecurity portfolio. Fortra brings complementary solutions together to solve problems innovatively. The acquisition allows Outflank to provide its combination of software and expert-led services to more organizations globally. Outflank's security tooling fits perfectly in Fortra's portfolio alongside Cobalt Strike.
• Cobalt Strike (Fortra)coreTechnology or IntegrationOST was specifically developed to work in tandem with Cobalt Strike. OST integrates directly with Cobalt Strike through BOFs and reflective DLL loading, providing OPSEC-safe post-exploitation capabilities. OST tools can obfuscate Cobalt Strike payloads, and Cobalt Strike can be used for post-exploitation after Outflank C2 initial access. Together they form the Red Team Suite.
• Core Impact (Fortra)secondaryTechnology or IntegrationOST is compatible with Core Impact, Fortra's automated penetration testing solution. Core Impact users can leverage OST's Payload Generator to increase payload evasiveness. Together with Cobalt Strike, all three tools form the Offensive Security Suite.
• Cobalt Strike Research Labs (CS:RL)coreStrategic or Co-development PartnerCS:RL is a joint initiative between the Cobalt Strike and Outflank teams, combining their research expertise. It delivers cutting-edge, ready-to-use research tooling for Cobalt Strike including custom UDRLs, Sleep Masks, UDC2 channels, post-exploitation capabilities, and experimental beta features. Available as part of Red Team Suite and Offensive Security Suite.
• Black Hat ConferenceminorOthersOutflank team members present research at Black Hat conferences (Black Hat USA, Black Hat Asia) and other major security conferences including DefCon, Troopers, BruCON, DerbyCon, x33fcon, Hack in Paris, FIRST, Nullcon, SANS Hackfest.

Scale indicators7 records

Recent moves6 records

Expansion highlights7 records

Direct peers

• Brute Ratel C4 (Dark Vortex): Commercial adversary simulation and C2 framework with a similar focus on EDR evasion and OPSEC. Directly comparable to Outflank C2 as a paid, vetted, red-team-oriented C2 platform.
• Prelude Operator: Red team automation platform offering tooling and adversary emulation capabilities targeted at enterprise security teams. Closely comparable to OST in scope (multi-tool platform covering the attack chain) and buyer profile.
• Nighthawk C2: Commercial command-and-control framework purpose-built for red team engagements with emphasis on evasion and OPSEC. Directly competes with Outflank C2 in the paid, vetted C2 category.
• Specter Ops: Operator of BloodHound and a portfolio of offensive security tooling and adversary simulation services. Comparable to Outflank in combining offensive tooling (e.g., for AD/Windows tradecraft) with practitioner-led services.
• Bishop Fox: Offensive security services and tooling firm (e.g., COSMOS attack platform) serving enterprise red teams. Comparable to Outflank's combined services-plus-tooling model in the same enterprise buyer segment.
• TrustedSec: Offensive security consultancy and tooling developer (e.g., TrustedSec's open-source C2/AD tooling). Closely comparable to Outflank in combining red team services with proprietary tradecraft tooling for enterprise buyers.

Broad incumbents

• Mandiant (Google Cloud): Large-scale adversary simulation and red team services provider, now part of Google Cloud. Overlaps with Outflank's TIBER and red teaming services but as part of a much broader incident response and consulting portfolio.
• NCC Group: Global cybersecurity consultancy with significant red team and attack simulation practices. Comparable to Outflank's red teaming services across financial and enterprise customers, but operates at much larger scale and scope.
• CrowdStrike Services: Provides adversary emulation and red team services alongside the Falcon EDR platform. Broad incumbent overlap with Outflank: customers using Falcon are also potential OST buyers, and CrowdStrike Services competes for red team engagements.

Emerging players

• Zero-Point Security: Red team training provider (CRTO/CRTL courses) founded by Daniel Duggan, acquired by Fortra/Outflank family in April 2026. Now a sister entity rather than pure competitor, but historically a comparable practitioner-led red team training brand.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/outflanknl
• GitHubgithub.com/outflanknl
• LinkedInlinkedin.com/company/outflank/?originalSubdomain=nl

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Outflank