tlpt
See the engagement

About tlpt.io

Updated

tlpt.io covers threat-led penetration testing: the intelligence-led red-team exercise that DORA requires of significant financial entities, built on the TIBER-EU framework. Regulated readers need to know the provenance of guidance like this, so it is set out here.

Publisher

The site is published by SEQ SIA (reg. No. 40203410806), Lastādijas iela 12 k-3, Riga, LV-1050, Latvia, trading as OffSeq, a provider of penetration testing and red-team services. Contact: support@offseq.com.

tlpt.io is not affiliated with the European Central Bank, the European Supervisory Authorities or any national TIBER cyber-team, and nothing here is an official interpretation of the framework.

Authorship

Content is written and reviewed by OffSeq red-team practitioners. It is published under team editorial responsibility, held by SEQ SIA, rather than an individual byline. Where an article has a named author, the name appears under the headline and links to a profile page.

How the guidance is sourced

  • Regulatory statements cite the instrument itself – Regulation (EU) 2022/2554 (DORA), the related regulatory technical standards, and the published TIBER-EU framework and its guidance documents.
  • Where national implementations differ, we say that they differ instead of generalising from one jurisdiction.
  • Engagement descriptions are generalised from real work and never identify a client, a target environment or an unremediated finding.
  • The “Updated” date only moves when the text changes; an automated content-hash ledger reverts unearned bumps.

Commercial interest

We sell the kind of testing this site describes. That is a direct interest in you concluding that you need it, and it should colour how you read every recommendation here.

  • Links to OffSeq are our own service links, not a market comparison. We do not rank or score competing providers.
  • No vendor, platform or intelligence provider pays for a mention. There is no advertising or affiliate revenue.
  • Where an entity is out of scope for mandatory TLPT, we say so – including when that means a smaller engagement, or none.

Not advice

This site is not legal or supervisory advice on whether TLPT applies to your entity, and it is not a substitute for engagement with your competent authority or TIBER cyber-team.

Corrections

Send corrections to support@offseq.com. Substantive changes are made and re-dated in the open.