Purple Twin – autonomous purple teaming on a simulated twin of your estate

Purple Twin is Vouchsec's enterprise product for security operations teams. It builds a simulated twin of your estate from read-only configuration and exported data – nothing is installed and nothing changes in production. An autonomous red team then runs attack scenarios against the twin while your detection content is scored against the native logs the twin produces.

Scored, not guessed. Each detection is scored mechanically against the logs of the scenario it should catch, so coverage is a measurement rather than an opinion.

False positives, measured. The same twin runs a living baseline of benign user and service activity, so every detection also gets a false-positive rate against normal operations.

Close the gap, then prove it. Fix or write the detection, replay the exact same scenario, and see the score change – a continuous red/blue/purple loop with no production calendar and no change windows.

Purple Twin is built entirely on the Ghost Twin platform and is coming next: it is in design with early-access partners now. Join the early-access list at vouchsec.ai, or talk to us at pod K70h in the DSIT Pod Pavilion.