TIBER-EU Penetration Testing Providers

TIBER-EU is the European framework for threat intelligence-based ethical red teaming, developed by the European Central Bank (ECB) to test the cyber resilience of financial institutions and financial market infrastructures. Adopted in 2018, TIBER-EU provides a standardised approach across EU member states for conducting controlled, bespoke, intelligence-led red team tests that mimic the tactics, techniques, and procedures of genuine threat actors targeting the financial sector.

The framework defines three mandatory phases: a threat intelligence phase where a certified threat intelligence provider analyses the specific threats facing the target institution, a red team testing phase where a certified red team provider simulates attacks based on that intelligence, and a closure phase including replay workshops and remediation planning. TIBER-EU tests are designed to be realistic — testing live production systems with scenarios based on actual threat actor behaviour specific to the institution being tested.

National implementations of TIBER-EU exist across Europe, including TIBER-NL (Netherlands), TIBER-DE (Germany), TIBER-BE (Belgium), TIBER-FI (Finland), and TIBER-IT (Italy). The framework has been influential beyond Europe, with similar frameworks adopted in other regions. TIBER-EU tests are typically commissioned by financial regulators and require specialised providers with experience in both threat intelligence gathering and advanced red team operations. The framework represents the most demanding form of security testing for financial institutions, going far beyond traditional penetration testing to validate an organisation's ability to detect and respond to sophisticated, targeted attacks.