Red Rock IT Security
Red Rock IT Security is a Philippine-based managed cybersecurity services provider offering MDR, VAPT, red teaming, source code audits, DFIR, threat hunting, and posture assessments to enterprise clients in banking, insurance, healthcare, and utilities. It is the sole CIS member firm in the Philippines.
- Company typePrivate
- Founded2016
- HeadquartersMakati, Philippines
- Headcount101–250
- GTM typeB2B
- OfferingServices
What Red Rock IT Security does
Red Rock IT Security Inc. is a Philippine-based managed cybersecurity services provider (MSSP) headquartered in Makati City that delivers eight core services organized into three categories: threat management (Managed Detection & Response, Threat Intelligence Reports), vulnerability detection (Vulnerability Assessment & Penetration Testing, Red/Purple Team Exercises, Source Code Audit), and risk mitigation (Threat Hunting, Cybersecurity Posture Assessment, Digital Forensics & Incident Response). The firm's technology stack combines commercial security tooling — SIEM, EDR, SAST, and packet capture/forensic platforms — with proprietary threat intelligence rules covering credential leaks, typosquat domains, and dark-web monitoring, and it conducts assessments against OWASP, PTES, and CIS frameworks. It is the sole CIS member company in the Philippines, holds DICT accreditation, and is registered as a Data Protection Officer and Data Processing System with the National Privacy Commission.
The company serves enterprise and mid-market clients primarily in Philippine banking and financial services, insurance, healthcare, and utilities, with named customers including Singlife, Phoenix, Isla Bank, Queen Bank, Unilab, Hi Precision, Col Financial, 917 Ventures, East West Ageas, DAVI, PDAX, Thinking Machines, and KB. Its go-to-market is consultative and relationship-driven, with senior leadership (CEO Dobbin Tan, COO Paul Prantilla, CTO Raymond Nunez) acting as primary rainmakers; Raymond Nunez is the only Filipino to hold both the SANS GIAC Security Expert (GSE) certification and the DEF CON Black Badge. Revenue is generated through recurring subscription MDR contracts supplemented by project-based professional services, with pricing quoted per engagement and multi-year terms; 59% of team members hold SANS GIAC certifications, supporting the firm's positioning as a credentialed, locally-rooted alternative to offshore MSSPs.
Red Rock IT Security firmographics
Firmographics- Name
- Red Rock IT Security
- Legal name
- Red Rock IT Security Inc.
- Website
- https://redrocksecurity.io
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Red Rock IT Security is a Philippine-based managed cybersecurity services provider offering MDR, VAPT, red teaming, source code audits, DFIR, threat hunting, and posture assessments to enterprise clients in banking, insurance, healthcare, and utilities. It is the sole CIS member firm in the Philippines.
- Ownership category
- akta.pro rank
Where Red Rock IT Security is headquartered
LocationHeadquarters
- HQ city
- Makati
- HQ country
- Philippines
- HQ region
- Asia
Offices1 record
Markets served
Red Rock IT Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Cybersecurity Services (MDR): Recurring managed detection and response services providing 24/7 threat monitoring, analysis, and incident response. The company establishes site-to-site connectivity for log ingestion and continuously tunes detection rules. This forms the core recurring revenue stream, likely billed on a subscription basis with included incident hours.
- Professional Security Services: One-time and project-based professional services including Vulnerability Assessment & Penetration Testing (VAPT), Red Team and Purple Team Exercises, Source Code Audits, Digital Forensics & Incident Response, Threat Hunting engagements, Cybersecurity Posture Assessments, and Threat Intelligence Reports. These are billed per engagement or per project.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom pricing based on organizational scope and service requirements |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels5 records
Red Rock IT Security product offering
Product offeringCore offering
Red Rock IT Security is a Philippine-based managed cybersecurity services provider (MSSP) delivering eight specialized services organized into three categories: threat management (Managed Detection & Response, Threat Intelligence Reports), vulnerability detection (Vulnerability Assessment & Penetration Testing, Red Team & Purple Team Exercises, Source Code Audit), and risk mitigation (Threat Hunting, Cybersecurity Posture Assessment, Digital Forensics & Incident Response). The firm operates a 24/7 Security Operations Center staffed by certified professionals, providing enterprise and mid-market clients with continuous monitoring, testing, and incident response grounded in frameworks such as OWASP, PTES, and CIS benchmarks.
Product overview
Red Rock IT Security offers a comprehensive suite of cybersecurity services organized into three categories: threat management (Managed Detection & Response, Threat Intelligence Reports), vulnerability detection (Vulnerability Assessment & Penetration Testing, Red Team & Purple Team Exercises, Source Code Audit), and risk mitigation (Threat Hunting, Cybersecurity Posture Assessment, Digital Forensics & Incident Response). The company operates as a Philippine-based managed security services provider, delivering these services through specialized teams of certified cybersecurity professionals rather than as a software product platform.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- 59% of team members hold SANS GIAC certifications
- +3 more outcomes
Companies that use Red Rock IT Security
Customer profileNamed customers13 records
Segments4 records
Ideal customer profiles4 records
Red Rock IT Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
Red Rock IT Security partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Center for Internet Security (CIS)coreRed Rock IT Security is the sole CIS member company in the Philippines. CIS is a nonprofit organization that provides globally-recognized cybersecurity benchmarks and controls. This membership provides Red Rock with access to CIS Controls, benchmarks, and the CIS Community, reinforcing the company's credibility as a leading cybersecurity services provider in the Philippines. The company performs Cybersecurity Posture Assessments using the CIS framework.
Scale indicators2 records
Recent moves5 records
Expansion highlights5 records
Red Rock IT Security competitors and assessment
Company assessmentDirect peers
- Trustwave: Global MSSP and MDR provider offering managed detection, threat intelligence, VAPT, DFIR, and posture assessments — closely matching Red Rock's eight-service suite, with established presence in Asia-Pacific markets.
- Ensign InfoSecurity: Southeast Asia's largest pure-play cybersecurity services firm headquartered in Singapore, providing MDR, threat intelligence, and consulting across banking, government, and telecom — a direct regional benchmark for a Philippine-anchored MSSP aspiring to expand.
- Quann: Singapore-based managed security services provider (formerly e-Cop) delivering SOC, threat intelligence, and incident response across SEA — comparable in service scope and regional enterprise focus.
- eSec Forte: India-based MSSP of similar size offering MDR, VAPT, DFIR, and threat intelligence — closely comparable in scale, service breadth, and emerging-market enterprise positioning.
- LGMS: Malaysian cybersecurity services firm specializing in penetration testing, red teaming, and managed security — a comparable niche-to-mid-market MSSP within ASEAN targeting regulated industries.
Broad incumbents
- NTT Security (NTT DATA): Global MSSP with established Philippine operations delivering enterprise-scale managed security, consulting, and incident response — competing with Red Rock for large regulated-industry accounts in the same market.
- SecureWorks: Global MDR and managed security services provider serving enterprise customers worldwide, including Asia-Pacific — a broad-incumbent peer for Red Rock's MDR offering and enterprise positioning.
- Sophos MDR: Global cybersecurity vendor with a productized 24/7 MDR service — represents the productized-MDR competitive threat to boutique services-only MSSPs like Red Rock.
- Arctic Wolf: Global MDR provider delivering 24/7 SOC-as-a-service, vulnerability management, and incident response — a relevant scale competitor for mid-market and enterprise managed security deals.
- Deloitte (Cyber Risk Services): Big Four advisory firm with a large Asia-Pacific cyber practice covering VAPT, DFIR, threat intelligence, and managed security — competing for the same large Philippine enterprise and bank accounts.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Red Rock IT Security social profiles
Digital presenceRed Rock IT Security compliance and trust
Trust signalCompliance5 records
Red Rock IT Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Red Rock IT Security leadership team
Management profileNumber of profiles
Profiles6 records
Red Rock IT Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Red Rock IT Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Red Rock IT Security
What does Red Rock IT Security do?
Red Rock IT Security is a Philippine-based managed cybersecurity services provider (MSSP) delivering eight specialized services organized into three categories: threat management (Managed Detection & Response, Threat Intelligence Reports), vulnerability detection (Vulnerability Assessment & Penetration Testing, Red Team & Purple Team Exercises, Source Code Audit), and risk mitigation (Threat Hunting, Cybersecurity Posture Assessment, Digital Forensics & Incident Response). The firm operates a 24/7 Security Operations Center staffed by certified professionals, providing enterprise and mid-market clients with continuous monitoring, testing, and incident response grounded in frameworks such as OWASP, PTES, and CIS benchmarks.
Is Red Rock IT Security a public or private company?
Red Rock IT Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Red Rock IT Security founded?
Red Rock IT Security was founded in 2016. It employs 101 to 250 people.
Where is Red Rock IT Security based?
Red Rock IT Security is headquartered in Makati, Philippines, in the Asia region.
How does Red Rock IT Security make money?
Two revenue lines are on record. Managed Cybersecurity Services (MDR) is the primary driver. The others are professional Security Services.
Who are Red Rock IT Security's main competitors?
Direct peers on record are Trustwave, Ensign InfoSecurity, Quann, eSec Forte and LGMS. Broad incumbents are NTT Security (NTT DATA), SecureWorks, Sophos MDR, Arctic Wolf and Deloitte (Cyber Risk Services).
Does Red Rock IT Security have an API?
No public API is recorded for Red Rock IT Security.