+1 234-249-1337 
We think like attackers so you can defend with clarity.
Red Siege is an offensive security consulting firm founded in 2017 by CEO Tim Medin. We perform in-depth analysis, determine real business risk, and find the vulnerabilities before the bad guys do — then hand your team the context to fix what matters most. We don’t just deliver findings; we help you understand real attack paths and strengthen the defenses that count.
Our Offense Prepares Your Defense
Red Siege was built around a simple idea: offensive security should help organizations understand real attack paths, not just collect findings.
A good assessment answers practical questions. Can an attacker get in? Can they move laterally? Can they reach sensitive data? Can your team detect them? Can leadership understand what matters most?
That is where we focus — using offense to help you see your environment clearly, prioritize what matters, and defend with purpose.
Offense With Purpose
Risk First
Every engagement starts with one question: what data or process, if compromised, would hurt your organization most? We frame every finding in that context.
Real-World Attacks
We simulate genuine threat actors — the same techniques, tooling, and creativity a real adversary brings — so your defenses are tested against what actually happens.
Reporting You Can Use
Reports include the commands used, proof of concept, and clear remediation — so your team can act, assign tickets, and retest with confidence.
Red Siege shares practical offensive security knowledge through training, tools, research, and livestreams. We believe security gets better when practitioners share what they know — so much of what we do is free and open to the community.
The Wednesday Offensive
A weekly livestream where our team and industry guests talk offense. 30 minutes, no slides, just real conversation.
SiegeCast
Monthly live-streamed deep dives on offensive techniques, tools, and tradecraft — led by Red Siege consultants, on demand.
Discord & Tools
Join an active community to ask questions and share techniques — and explore our open-source offensive tooling.
Practitioner-Led From the Top
Our consultants test, teach, research, speak, and build — and that field experience informs every engagement.
Tim Medin
Tim founded Red Siege in 2017 after a career across control systems, higher education, financial services, and manufacturing. He is the creator of Kerberoasting, a Senior Instructor at SANS and for years the lead author of its flagship SEC560: Enterprise Penetration Testing course, a former Forbes Technology Council member, and IANS Faculty — and speaks at conferences worldwide.
Mike Saunders
Mike brings deep, hands-on offensive experience to Red Siege engagements and training. A seasoned penetration tester, speaker, and instructor, he works directly with the techniques organizations face in the real world — and teaches them to the next generation through Red Siege courses and industry conferences.
See How We Work — and What We Share