Compliance
TIBER-EU with PuReAI
TIBER-EU red teaming stands or falls on the Targeted Threat Intelligence report. PuReAI supplies the external reconnaissance and actor picture that report is built from.
Where PuReAI fits
TIBER-EU has three phases: Preparation, Testing and Closure. PuReAI contributes to the Threat Intelligence work in Preparation/Testing and to remediation tracking in Closure. It is not a red team provider.
Requirement → module → evidence
Each row is a control or requirement, the PuReAI module that produces relevant signal, and the artefact you can put in front of an auditor.
| Requirement | Module | Evidence produced |
|---|---|---|
| TTI — External footprint reconnaissance | Domain, IP, Certificate, Technology | Full externally discoverable estate: subdomains, hosts, services, certificates and stack. |
| TTI — Credential and data exposure | Leaked Data, Git Leaks, Sensitive Files | Exposed credentials, secrets and documents usable as initial-access scenarios. |
| TTI — Threat actor selection | News / Threats, Threat graph | Active ransomware and APT groups targeting your sector, with MITRE ATT&CK TTPs per group. |
| TTI — Scenario development | Threat graph | Query the graph to link an actor's techniques to your specific exposed assets and suppliers. |
| Testing — Supply chain entry paths | Supply Chain, Lookalike | Supplier exposure and typosquatted domains usable in social engineering legs. |
| Closure — Remediation tracking | All modules | Finding status lifecycle and score movement as evidence of closure actions. |
Scope and limits
- TIBER-EU requires accredited TI and RT providers for the formal test. PuReAI is used as an intelligence input by, or alongside, those providers.
- The DORA threat-led penetration testing articles (26–27) build on TIBER-EU, so the same evidence supports both.
Questions we get asked
Can PuReAI run a TIBER-EU test?
No. TIBER-EU tests must be delivered by accredited threat intelligence and red team providers. PuReAI provides continuous external reconnaissance those teams consume.
Is this the same as DORA TLPT?
DORA Articles 26–27 adopt the TIBER-EU approach for advanced testing. The intelligence PuReAI produces serves both.
See the evidence for your own domain
Start with a free domain report, or read the full scoring methodology.