The dangerous gap between tool sophistication and operator readiness continues to widen, creating security risks that compound over time. Red team platforms like Cobalt Strike have outpaced available education, making it difficult to adequately conduct testing that stands up to modern threats. Vendor-aligned training is emerging as a competitive differentiator as the ability to provide specialized education becomes more important. Cybersecurity software and services provider Fortra recently announced an agreement to acquire cybersecurity training firm Zero-Point Security, a move in line with the company’s goals of expanding education capabilities and increasing training expertise.
Zero-Point Security and the CRTO Standard
Zero-Point Security is a highly esteemed cybersecurity training company known for its courses, including Red Team Operations I and II, widely reputed training courses that are certified by the Council of Registered Ethical Security Testers (CREST). Completing these courses enables participants to achieve the status of Certified Red Team Operator (CRTO), a significant credential respected within the industry as a signal of verified expertise.
Self-paced, practitioner-focused formats have reshaped offensive security education by preparing teams for real-world scenarios based on cutting-edge methods. The shift toward hands-on, immersive training in specialized areas and skills required for security testing is a significant step toward preparing for modern and evolving threats. Zero-Point Security is a company that offers specialized training and expertise in red-teaming, adversary emulation, and penetration testing.
What Fortra Gains—and What It's Building
This deal brings Fortra a significant amount of value, extending the training roadmap across Cobalt Strike Certified Operator, Core Impact, and Outflank Security Tooling trainings. Acquiring and integrating the capabilities of Zero-Point Security enables Fortra to update and expand its security training offerings. Zero-Point Security founder and director Daniel Duggan plays a major role in shaping an enhanced, integrated training portfolio, working to “create programs that raise the standard for offensive security training worldwide.”
This acquisition helps Fortra to expand its global reach for a curriculum that has previously been constrained by boutique scale. Combining the training programs and expertise of Zero-Point Security with the existing efforts of Fortra’s significant security suite provides both companies the ability to compound their functionality and offer more comprehensive and effective security training.
The Purple-Team Imperative Driving Demand
One major factor in the shifting security education landscape is the move toward prioritizing purple-teaming in efforts against evolving threats in modern enterprise environments. Organizations are shifting from siloed red/blue-teaming functions to integrated adversary simulation to ensure coordination and a comprehensive understanding of threats. Advanced training plays a significant role in making purple-team adoption a practical reality rather than a theoretical future effort.
Enterprises are feeling pressure to upskill internal teams rather than outsourcing offensive operations, underscoring the need for more consolidated teams and operations. The acquisition of Zero-Point Security is an indicator of a step in this direction. “Zero-Point Security will play a pivotal role in shaping an enhanced training portfolio, enabling Fortra to help organizations worldwide upskill their teams in adversary-focused techniques, and adopt a purple-team mindset for stronger, more complete protection,” according to Fortra CEO Matthew Reck.
A New Model for the Offensive Security Market
This acquisition is an example of an ongoing trend of major organizations taking steps to close the loop between capability and competence, a strategic imperative in the face of modern risks. The deal reshapes expectations for offensive security vendors, setting up Fortra as a leader in building an enhanced training portfolio. Practitioners, enterprises, and the red team ecosystem should view this acquisition and the broader trends underlying it as signals implying long-term industry movement toward purple teaming and building up internal teams.
