A Pragmatic Path to Continuous Purple Teaming
Cas van Cooten’s core message is that continuous purple teaming can reduce the uncertainty created by point-in-time security assessments by turning attack simulation, defensive measurement, and prioritization into an automated feedback loop. He frames the value proposition around a mismatch between modern attackers and defenders: attackers, especially with AI-assisted iteration, can build tools and scale campaigns in minutes or hours, while defenders often depend on slower manual validation through penetration tests, red teams, or similar human-led assessments. Those assessments may be accurate when delivered, but security environments change afterward through vendor updates, configuration changes, new systems, new people, and SOC tuning, creating what he calls control drift.
Core of Tech
