The report explores enterprise adoption and use of offensive security tools and techniques to more effectively harden environments and assets. Despite substantial investments in threat intelligence and defensive technologies, there are levels of persistent exposure that can only be addressed by combining offensive and defensive strategies. It highlights how forward leaning enterprises are taking matters in their own hands and leveraging attackers’ tactics, techniques and procedures against themselves. This enables them to identify weaknesses and close them down before threat actors discover them, as well as limit the scope of impact of any compromise that subverts defenses.