CIO Review Names Red Siege as a Top 10 Most Promising Enterprise Security Company for 2020

By Justin Connors | August 25, 2020

In order to assist software companies in countering malicious attacks, CIO has compiled the Top 10 most promising enterprise security solution providers for 2020. Exciting news to discover that Red Siege has been selected as one of the Top 10 Enterprise Security Solution companies! Red Siege is proud to be listed alongside other companies continuing efforts to innovate and disrupt the enterprise and information security space.

via CIO REVIEW

cybersecurity landscape is in constant flux. Amidst ever-increasing threats and data breaches, creating a defensive strategy is simply not good enough for modern enterprises. In fact, the proliferation of these technologies has opened up a Pandora’s Box of cyber risks, complete with evolving threats. Enterprises need to acquire and adopt better methods of securing data, in order to thwart these cyber attacks—it does not cut it anymore to be a “jack of all trades, and master of none.” Settling for an enterprise security solution provider that does not transcend the old saying is not the wisest decision for any company. Securing data however, is a task that demands experts—professionals who can quantify the risks associated with the business in their entirety. As an information security consulting company, Red Siege focuses on real world threats and helps companies identify vulnerabilities and add context to them. Red Siege’s core competencies include penetration testing and red teaming through which the company performs in-depth analysis, determines business risks, and finds vulnerabilities. “Our focus is on the data and the business processes so as to identify what data we have, where it resides, and where its current access control is. We believe in framing security around business needs and risks in order to bring out vulnerabilities in the context of the business,” asserts Tim Medin, founder and principal consultant with Red Siege.

Evaluating and testing how well an organization would fare in the face of a real attack is not just precautionary, but a necessity in today’s cyber world as attackers are constantly probing for new weaknesses and vulnerabilities in networks. Red Siege offers penetration testing and vulnerability assessments to report on the issues that have a real risk to an organization. The testing includes the vulnerability scans of the in-scope systems where the team experts manually verify issues and exploit them. As Penetration Testing is the commonly used security testing technique for web applications, Red Siege’s team leverages it to perform an in-depth analysis of the web application to find vulnerabilities related to misconfiguration, programming errors, and application architectural issues.

The company also performs automated and manual runtime analysis of the application.

 We believe in framing security around business needs and risks in order to bring out vulnerabilities in the context of the business

To overcome the limitations of penetration testing and test an organization’s detection and response capabilities, Red Siege conducts red team testing. The company offers Red Team Adversary Simulation, which is a goal-based assessment where the team enacts attack scenarios to reveal potential physical, hardware, software and human vulnerabilities just like a real world adversary. It includes external attacks and targeted phishing to demonstrate the real risk to the data into consideration. After penetrating and gaining access to the organization’s systems like an actual attacker, the team identifies key targets and utilizes the latest tools and techniques to avoid detection and determine vulnerabilities. After the discovery phase, they offer remediation assistance and re-testing. “It’s not only that we discover the vulnerabilities and give remediation, but we also provide ways to validate the fix in the place. The re-test is in our elegant, high-quality reports, which can be used by both management and technical professionals, tasked with resolving vulnerabilities,” explains Medin.

With a team of renowned experts, Red Siege aims to continue working towards uncovering more vulnerabilities in the networks, web applications, and mobile applications to prevent ever-increasing cyber attacks. The company also plans to add more talented members in the team and expand its global market reach into Europe and South America to grow exponentially. “Our biggest differentiator is that we don’t try to do everything, instead we believe in doing one thing and doing it perfectly. We focus exclusively on penetration testing and red teaming, and that’s what our passion is, and that’s what we do best,” states Medin.”

About Red Siege

Red Siege is an information security consulting company that concentrates on the latest threats to organizations today. Red Siege works with its clients to understand what data and processes are important to them. For businesses that regularly perform penetrating testing, Red Siege goes a step further by conducting red team testing, which tests the human defenders’ ability to detect or stop a breach once an intruder gains access. The firm recognizes its clients’ workflow and identifies associated vulnerabilities to present them in the context of the clients’ needs. The company’s team penetrates an organization’s systems just as a real attacker would. After gaining access, they identify key targets and use the latest tools and techniques to avoid detection and determine vulnerabilities

Obfuscating Shellcode Using Jargon

By Red Siege | July 31, 2023

by Mike Saunders, Principal Security Consultant In a recent blog , we discussed how encrypting shellcode leads to increased entropy, which may result in your shellcode loader being blocked and/or […]

Learn More
Obfuscating Shellcode Using Jargon

Browser Only Web Application Testing

By Red Siege | July 24, 2023

By: Ian Briley, Security Consultant Spoiler Alert: Burp is the number one tool most people use while testing web applications. If you want to be an open-source champion, ZAP from […]

Learn More
Browser Only Web Application Testing

Introduction to Mythic C2

By Red Siege | June 28, 2023

By: Justin Palk, Senior Security Consultant Continuing along with my occasional series looking at how to set up and use various C2 frameworks, this is a guide to Mythic C2. Developed […]

Learn More
Introduction to Mythic C2

Find Out What’s Next

Stay in the loop with our upcoming events.