Red teaming is the practice of simulating real-world attacks against an organization's systems, networks, and people to uncover vulnerabilities. A red team thinks like an adversary, attempts to exploit weaknesses (technical and human), and reports findings so the blue team (defenders) can fix them. Red teams combine technical hacking, social engineering, physical security testing, and psychological tactics. Unlike penetration testing (specific, scoped), red teaming is often multi-month, multi-faceted campaigns that test the entire security posture.