tlpt
See the engagement

About tlpt.io

Updated

tlpt.io covers threat-led penetration testing: the intelligence-led red-team exercise DORA requires of financial entities identified by their competent authority, with TIBER-EU providing an aligned framework. Regulated readers need to know the provenance of guidance like this, so it is set out here.

Publisher

The site is published by SEQ SIA (reg. No. 40203410806), Lastādijas iela 12 k-3, Riga, LV-1050, Latvia, trading as OffSeq, a provider of penetration testing and red-team services. Contact: support@offseq.com.

tlpt.io is not affiliated with the European Central Bank, the European Supervisory Authorities or any national TIBER cyber-team, and nothing here is an official interpretation of the framework.

Authorship

SEQ SIA (OffSeq) is responsible for publishing, maintaining and updating this site. Articles use team attribution. Sources are listed so readers can check the basis for the guidance.

How the guidance is sourced

  • Regulatory statements cite the instrument itself – Regulation (EU) 2022/2554 (DORA), the related regulatory technical standards, and the published TIBER-EU framework and its guidance documents.
  • Where national implementations differ, we say that they differ instead of generalising from one jurisdiction.
  • Engagement descriptions are generalised from real work and never identify a client, a target environment or an unremediated finding.
  • The “Updated” date only moves when the text changes; an automated content-hash ledger reverts unearned bumps.

Commercial interest

We sell the kind of testing this site describes. That is a direct interest in you concluding that you need it, and it should colour how you read every recommendation here.

  • Links to OffSeq are our own service links, not a market comparison. We do not rank or score competing providers.
  • No vendor, platform or intelligence provider pays for a mention. There is no advertising or affiliate revenue.
  • Where an entity is out of scope for mandatory TLPT, we say so – including when that means a smaller engagement, or none.

Not advice

This site is not legal or supervisory advice on whether TLPT applies to your entity, and it is not a substitute for engagement with your competent authority or TIBER cyber-team.

Corrections

Send corrections to support@offseq.com. Substantive changes are made and re-dated in the open.