Redshift

What Redshift does

Redshift Global is a Lisbon-headquartered cybersecurity and IT services company operating across Iberia, founded in 2013 and employing 51–100 people across five offices in Portugal (Lisbon, Almada, Porto, Beja, Azores) and Madrid, Spain. The company delivers a portfolio of managed cybersecurity services (SOC, MDR, vulnerability management, threat intelligence, digital forensics), GRC consulting (ISO 27001, GDPR, NIS, DORA compliance), information management (ECM/BPM), and low-code application development using OutSystems and Mendix platforms. Its proprietary technology stack comprises three core platforms — RED.Box (SOAR-enabled security incident management with client-transparent dashboards), RED.Doc (GDPR-compliant document management and workflow automation), and RED.Scan (multi-channel document capture with AI-based data extraction) — which anchor recurring revenue alongside the managed services.

Redshift's business model combines annual subscription managed services and platform licensing with project-based professional services and consulting engagements. The go-to-market is enterprise-focused direct sales supplemented by a broad technology partner ecosystem spanning IBM (Gold), HPE, Tenable (Gold), Fortinet, OutSystems, Splunk, Palo Alto Networks, CrowdStrike, SentinelOne, Check Point, and Cisco, which provide both solution integration and channel-sourced demand. Customers are concentrated in Financial Services (Millenniumbcp, Fidelidade, Banco de Portugal) and Government/Public Sector and Defense (Portuguese Armed Forces, Infraestruturas de Portugal, Banco de Portugal), with additional presence in Retail (Lidl) and Manufacturing (Amorim Group). Pricing is quote-based and custom per engagement, with annual billing cadence for managed services.

In March 2024, Atena Equity Partners acquired a 51% majority stake in Redshift through its Atena II fund in partnership with cybersecurity operator Simon Church, with founder João Manso remaining as CEO. The company holds ISO 9001, 14001, 27001, and 45001 certifications, is the first Portuguese member of FIRST.org, and is an active member of Portugal's National CSIRT Network — credentials that gate access to regulated and government cybersecurity contracts. It has been recognized on the FT1000 (2021 and 2026) and Deloitte Technology Fast 50 Portugal for multiple consecutive years.

Name

Redshift

Legal name

REDSHIFT II – SOLUTIONS, LDA

Website

https://redshift.global

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

51–100 employees

Short description

Redshift Global is a Lisbon-based cybersecurity and IT services company serving enterprise and government clients across Iberia with managed SOC services, GRC consulting, proprietary platforms (RED.Box, RED.Doc, RED.Scan), and low-code application development.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371), Services-Computer Processing & Data Preparation (7374)

akta.pro primary industry

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)

akta.pro secondary industries

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Process Mining & Task Mining Platforms (HDAEAHAD), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)

Keywords

• Cybersecurity services
• Managed security operations
• Document management solutions
• GRC consulting
• Low-code development

Headquarters

HQ city

Lisbon

HQ country

Portugal

HQ region

Europe

Offices6 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Cybersecurity Solutions & Services: Redshift provides comprehensive cybersecurity solutions including security audits, vulnerability management, data protection, infrastructure design, endpoint detection and response, SIEM, and encryption services. Revenue is generated through project-based consulting engagements and ongoing managed services contracts.
2. Security Operations (SOC): SOC services providing continuous monitoring, incident response, threat intelligence, digital forensics, and vulnerability analysis. Delivered from Redshift's Security Operations Center with 24/7 capabilities. Includes RED.Box platform for client visibility and SOAR automation.
3. Consulting Services: GRC consulting including compliance audits (ISO 27001, GDPR, NIS, DORA), risk management, certification support, and training programs. Supports compliance with national and international requirements including DL65/2021, L93/2021, QNRCS, and GDPR.
4. RED.Doc Platform: Licensing of proprietary document management platform. Provides rapid implementation with integration into existing business applications. Revenue from platform licensing, implementation services, and ongoing support.
5. RED.Scan Platform: Document capture platform licensing for scanning centers and document processing operations. Multi-tenant capable with centralized management. Revenue from platform licensing and professional services for implementation.
6. Low Code Development: Application development using OutSystems and Mendix low-code platforms. Custom application development for web and mobile, including the Azores office focused on OutSystems development.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels5 records

Core offering

Redshift sells enterprise cybersecurity and IT services including managed Security Operations Center (SOC), cybersecurity solutions implementation, Governance/Risk/Compliance consulting, enterprise content and document management, and low-code application development. The company monetizes three proprietary platforms—RED.Box (security incident automation), RED.Doc (GDPR-compliant document management), and RED.Scan (AI-powered document capture)—delivered alongside third-party technologies from IBM, HPE, Tenable, Fortinet, OutSystems, and others.

Product overview

Redshift Global is a cybersecurity and IT services company offering a portfolio of proprietary platforms and professional services. The core product lineup includes three main proprietary platforms: RED.Box (security incident management with SOAR capabilities), RED.Doc (document management and BPM), and RED.Scan (multi-channel document capture with AI). Supporting these platforms is RED.Soc, a managed SOC service. The company complements its platforms with five service areas: Cybersecurity Solutions (infrastructure and security implementations), Security Operations (SOC, penetration testing, forensics), Consulting Services (GRC and compliance), Information Management (ECM/BPM), and Low Code (OutSystems and Mendix development). The architecture follows a platform-plus-services model where proprietary tools can be deployed standalone or integrated with third-party security and enterprise tools.

Differentiator

Problem solved

Functional benefit

Brands

• RED.Scan: Multi-channel document capture platform with AI capabilities, GDPR-compliant, designed to automate paper-based workflows with minimal human intervention.
• RED.Doc
• RED.Box
• RED.Slot

Products and services

• RED.Box Proprietary platform for automating and managing information security incidents. Enables detection, triage, and mitigation of security incidents with real-time dashboards and metrics, SOAR capabilities, threat intelligence integration, AI-powered incident response, phishing/awareness training campaigns, and REST API for integration with multiple security platforms. Provides client transparency over SOC/MDR services.
• RED.Doc Agile document management and process automation platform compliant with GDPR. Features digitization/import, indexing, archiving, workflows, document lifecycle management, MS Word and PDF signature integration, and ERP/ECM integration capabilities. Provides rapid implementation and low maintenance costs with high configurability.
• RED.Scan Multi-channel document capture platform that is GDPR-compliant with lower operating costs and high automation. Supports multi-project and multi-client processing, unlimited stations, centralized management console, and SLA monitoring dashboards. Includes RED.Scan IA variant with AI-powered data extraction from documents.
• RED.Soc Managed Security Operations Center service providing 24/7 continuous monitoring and incident response, including identification/normalization of log sources, use case definition, security incident management, proactive monitoring, AI-powered automation, and awareness training campaigns.
• Cybersecurity Solutions Services Implementation and management of tailored cybersecurity solutions, infrastructures, and projects. Includes security audit, data protection, infrastructure design, vulnerability management, EDR, SIEM, encryption, maintenance, and technical consultancy services for enterprise clients.
• Security Operations Services Specialized cybersecurity services from the Security Operations Center including offensive security (penetration testing), threat intelligence, digital forensics, and incident response services for enterprise and government clients.
• GRC Consulting Services Consultancy, auditing, training and coaching for compliance with legal, regulatory, contractual and normative requirements covering privacy (GDPR), information security (ISO 27001), risk, cybersecurity, IT service management and business continuity.
• Information Management Services Solutions and professional services for document management, business process management (BPM), Enterprise Content Management (ECM), and enterprise-wide digital transformation across business units and geographies.
• Low Code Development Services Low-code application development services using OutSystems and Mendix platforms for rapid digital transformation, AI-enabled application development, and web and mobile application delivery. Includes Redshift's Azores office dedicated to OutSystems development.

Quantifiable outcome

• Response times decreased by more than 90% when compared to national provider
• +2 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration35 records

AI capability9 records

Feature4 records

Partnerships

22 partnerships are on record, tiered core and major.

• IBMcoreTechnology or Integration · 1 January 2022IBM Gold Business Partner and IBM Security Partner. Redshift holds IBM Gold Business Partner status and provides services including IBM QRadar SIEM implementation, IBM FileNet integration, IBM Watsonx technology, IBM Cloud solutions, and IBM Security solutions. João Manso and Pedro Correia attended IBM Think 2024 and 2025 events.
• Hewlett Packard Enterprise (HPE)coreTechnology or IntegrationStrategic technology partner recognized by HPE in January 2026 for excellence in delivering resilient Hybrid Cloud solutions in the infrastructure (CYS) area. Partnership covers HPE GreenLake, Aruba, and HPE infrastructure solutions.
• TenablecoreTechnology or IntegrationGold Partner status with Tenable vulnerability scanning and Tenable Guardian platform. Provides vulnerability management and compliance services using Tenable technology. José Alarcon, Country Manager of Tenable, has presented at Redshift-sponsored events.
• OutSystemscoreTechnology or IntegrationStrategic partner for low-code application development. Redshift achieved ODC Migration Ready Partner certification and sponsors OutSystems ONE Conference. Partnership includes web and mobile application development, with dedicated team in Azores office. Redshift discussed future of Low-Code with OutSystems CEO Paulo Rosado.
• SplunkcoreTechnology or IntegrationTechnology partner providing Splunk SIEM platform for security monitoring and analytics. Used in Redshift SOC operations for log aggregation, analysis, and threat detection.
• FortinetmajorTechnology or IntegrationTechnology partner for firewall and security event monitoring. Redshift has Fortinet Certified Associate - Cybersecurity certification.
• ElasticmajorTechnology or IntegrationTechnology partner providing ElasticSearch data analysis engine for fast search and analytics capabilities in security operations.
• CheckmarxmajorTechnology or IntegrationApplication security testing platform partner for DevSecOps, providing code analysis and security recommendations during development.
• CyberbitmajorTechnology or IntegrationCybersecurity simulation platform partner for training and capacity building. Simulates cybersecurity scenarios to make professionals more resilient and trained.
• Recorded FuturemajorTechnology or IntegrationThreat Intelligence platform partner enabling better understanding of possible risks through global threat intelligence.
• CyberintmajorTechnology or IntegrationRisk exposure management platform partner for mitigating visibility and exposure to risk in organizational environments.
• AcunetixmajorTechnology or IntegrationAcunetix Certified Partner for web vulnerability scanning and security testing capabilities.
• MaltegomajorTechnology or IntegrationOSINT tool partner for collecting information from open sources in intelligence and investigation operations.
• NuixmajorTechnology or IntegrationForensic analysis platform partner enabling acquisition and analysis of forensic images in digital forensics operations.
• Magnet ForensicsmajorTechnology or IntegrationForensic analysis tools partner for digital forensics capabilities including evidence acquisition and analysis.
• AWS (Amazon Web Services)majorTechnology or IntegrationCloud & Datacenter partner for public cloud migration and infrastructure solutions. Redshift participated in AWS Cloud Experience Portugal 2024.
• Microsoft AzuremajorTechnology or IntegrationCloud & Datacenter partner for Azure public cloud solutions. Microsoft Registered Member Partner status.
• CiscomajorTechnology or IntegrationCisco Preferred Partner for network infrastructure and cybersecurity solutions including network security and infrastructure design.
• Palo Alto NetworksmajorTechnology or IntegrationCloud & Datacenter and Cybersecurity Solutions partner for next-generation firewall and security platform solutions.
• CrowdStrikemajorTechnology or IntegrationCloud & Datacenter partner for endpoint protection and threat intelligence solutions.
• SentinelOnemajorTechnology or IntegrationCloud & Datacenter partner for autonomous endpoint protection platform.
• Check PointmajorTechnology or IntegrationCloud & Datacenter partner for firewall and security gateway solutions.

Scale indicators7 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• S21sec: Iberian-headquartered cybersecurity MSSP and incident response firm, now part of Thales. Highly comparable to Redshift given overlapping Iberian enterprise/government customer base, similar SOC service model, and parallel focus on managed detection and response.
• Telefónica Tech (ElevenPaths): Telefónica's cybersecurity and cloud unit operating across Spain and Portugal, offering SOC, GRC, and managed security services. Comparable as a large Iberian cybersecurity services competitor with overlapping enterprise and public-sector customer set.
• InnoTec (Entelgy Group): Spanish cybersecurity consultancy offering hacking, SOC, GRC, and incident response services. Comparable as an Iberian-headquartered cyber services firm with similar mid-market positioning and public-sector exposure.
• S2 Grupo: Spanish cybersecurity and critical infrastructure protection specialist operating a 24/7 SOC. Comparable to Redshift in size, services portfolio, and target customer segments across Iberia, including government and large enterprise.
• BeDisruptive: Spanish MSSP offering managed detection and response, threat intelligence, and offensive security services. Directly comparable in cybersecurity services focus and Iberian market presence to Redshift.

Broad incumbents

• Devoteam: European IT consulting firm with strong cybersecurity and cloud practices across Iberia. Comparable in service breadth (managed services, GRC, cloud transformation) but at significantly larger scale across multiple countries.
• Kudelski Security: European-origin MSSP and cybersecurity services firm serving enterprise and public sector with managed SOC and incident response. Comparable business model and target market though at larger geographic scale.
• Cipher (Prosegur): Global MSSP owned by Prosegur with significant Iberian operations. Comparable in managed security services, GRC consulting, and enterprise/government customer focus across Spanish and Portuguese markets.
• Deloitte Portugal - Cyber & Strategic Risk: Big Four advisory practice covering cybersecurity, GRC, and risk consulting in Portugal. Competes with Redshift Consulting for enterprise and government GRC and cyber transformation mandates at the upper end of the market.

Regional players

• Evolutio Cloud Enabler: Spanish IT services and cloud transformation firm with security practice. Comparable as Iberian IT services competitor with overlapping cloud migration, datacenter, and managed services portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/redshift-global

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Subsidiaries2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Redshift