Redlings

What Redlings does

Redlings IT-Security & Penetration Testing GmbH is a Mannheim, Germany-based cybersecurity services boutique founded in 2020 by two PhD cryptographers, Dr. Ewan Fleischmann and Dr. Michael Gorski, who together hold 40+ years of offensive security experience and 35+ industry certifications including OSCP, OSCE, CISSP, CISM, and CISA. The firm delivers project-based and retainer penetration testing, red teaming, security auditing, DevSecOps and Secure SDLC, TISAX® consulting, incident response and forensics, security awareness training, and a managed subscription service called Redlings360® to enterprise clients in German-speaking markets. Service methodology is aligned with BSI, PTES, PCI DSS, OSSTMM, NIST, and OWASP standards, and the firm has added an AI Security service line covering prompt injection testing and shadow AI protection.

Named customers include Deutsche Bank, Commerzbank, DZ Bank, HSBC, KfW, SAP, Otto, TÜV Rheinland, Aptiv, BorgWarner, and Deutsche Glasfaser, spanning financial services, automotive, retail, telecommunications, and critical infrastructure (KRITIS) sectors that require compliance with BaFin, DORA, PCI DSS, TISAX, and NIS2. The firm operates as a German GmbH, is privately held by its founding partners with no disclosed external investment or funding rounds, and conducts go-to-market through content-driven demand generation (YouTube tutorials, blog guides, LinkedIn, XING, Twitter, newsletter, webinars) converting via free initial consultations and quote-based engagements.

Name

Redlings

Legal name

Redlings IT-Security & Penetration Testing GmbH

Website

https://redlings.com

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

1–10 employees

Short description

Redlings is a Mannheim-based cybersecurity services boutique founded in 2020 by two PhD cryptographers, delivering penetration testing, red teaming, security consulting, incident response, and managed Security-as-a-Service (Redlings360®) to enterprise clients in financial services, automotive, retail, and critical infrastructure across the DACH region.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKAHAF)

akta.pro secondary industries

Penetration Testing & Red Teaming (BPAKADAE), Model Security Testing & Red Teaming (adversarial ML, jailbreaks) (HDAAAKAC), Safety & Alignment Evaluation (red-teaming, harmful capability testing) (HDAAAMAL)

Keywords

• Penetration testing services
• Red teaming
• Cybersecurity consulting
• Incident response services
• TISAX compliance consulting

Headquarters

HQ city

Mannheim

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Professional Security Services: Consultative professional services revenue from penetration testing, red teaming, security audits, incident response, and security consulting engagements. Services are delivered by certified experts and priced as project-based or retainer engagements.
2. Security Training and Awareness: Security awareness training services to reduce risks from risky user behavior.
3. Managed Security Services (Redlings360®): Continuous monitoring and security-as-a-service packages providing ongoing security oversight for clients.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels7 records

Core offering

Redlings provides penetration testing, red teaming, and offensive IT security consulting services to identify vulnerabilities in enterprise networks, web applications, cloud infrastructure, and Active Directory environments. It supplements these with security audits, DevSecOps/SDLC integration, social engineering assessments, security awareness training, TISAX compliance consulting, and 24/7 incident response. The Redlings360® package delivers modular Security-as-a-Service with continuous monitoring for SMEs, and the firm offers a specialized AI security practice covering prompt injection testing and shadow AI protection.

Product overview

Redlings is an IT security services company offering a comprehensive portfolio of penetration testing, red teaming, and cybersecurity consulting services. Their core offerings include penetration testing (network, web application, cloud, Active Directory), red teaming, social engineering assessments, and incident response. They supplement these with consulting services including Security Audits, DevSecOps & Secure SDLC, TISAX® consulting for automotive industry compliance, Security Awareness training, and Redlings360® - a modular Security-as-a-Service package for SMEs. The company is led by two PhD-level cryptography experts and serves clients across finance, automotive, retail, energy, and pharmaceutical sectors.

Differentiator

Problem solved

Functional benefit

Brands

• Redlings360®: Modular Security-as-a-Service packages for SMEs providing comprehensive security and continuous monitoring of IT infrastructure.

Products and services

• Penetration Testing Realistic attacks on networks, systems, and applications to identify security gaps before attackers can exploit them, delivered for enterprise customers across regulated industries.
• Red Teaming Simulated cyber attacks that reveal how well an organization detects and responds to attacks, testing both defensive capabilities and personnel, delivered by certified experts.
• Network Penetration Testing Internal and external network penetration testing to identify and remediate vulnerabilities in enterprise IT infrastructure.
• Web Application Security Testing Thorough testing of web applications, APIs, and web servers for vulnerabilities to identify hidden security weaknesses.
• Cloud Security Assessment Penetration testing services for AWS, Microsoft Azure, and Google Cloud Platform (GCP) to uncover and address vulnerabilities in cloud infrastructure.
• Active Directory Security Assessment Assessment of complex user rights and object networks in Active Directory environments to identify privilege-escalation paths exploited by attackers.
• Social Engineering Assessment Security assessments ranging from simple email phishing to sophisticated campaigns using multiple communication techniques including spearphishing, vishing, and on-site engagement.
• Security Audit Regular auditing of implemented technical and organizational measures to provide transparency regarding compliance requirements and IT security status.
• DevSecOps & Secure SDLC Integration of security into every phase of the software development lifecycle, including threat modelling, secure-coding training, code reviews, and penetration testing.
• Redlings360® Modular Security-as-a-Service packages for small and medium enterprises providing comprehensive security and continuous monitoring of IT infrastructure.
• Security Awareness Training programs to reduce dangers from risky user behavior and strengthen the human firewall within customer organizations.
• Incident Response DFIR team support for identifying, responding to, and preventing security incidents, available 24/7 remotely or on-site, including IT forensics.
• TISAX® Consulting Consulting services to guide organizations through implementing VDA-ISA requirements to achieve TISAX® label certification for the automotive industry.
• Emergency Incident Response 24/7 emergency IT response to cyberattacks including containment, recovery, and reaction to acute and future attacks.
• IT Security Consulting Comprehensive information security consulting from strategy to technical implementation, including threat-oriented and proactive security advice.

Quantifiable outcome

• Find vulnerabilities before attackers can exploit them
• +1 more outcomes

Named customers11 records

Segments6 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature2 records

Scale indicators4 records

Recent moves5 records

Expansion highlights6 records

Direct peers

• Trail of Bits: Research-driven offensive security firm offering application, blockchain, and cloud security assessments; competes with Redlings in high-end technical assurance work targeting advanced enterprise buyers.
• SRLabs: Berlin-based security research and consulting firm with strong offensive security and red team capabilities; competes with Redlings for enterprise pentest and IoT/network security engagements in DACH.
• Bishop Fox: US-based boutique offensive-security firm specializing in penetration testing, red teaming, and security assessments; comparable in talent-led, expert-driven service model even though geographically distant.
• Cure53: Berlin-based boutique cybersecurity firm specializing in penetration testing, red teaming, and security audits for enterprise clients; one of the closest direct competitors to Redlings in the German pentest market.
• Code White: German boutique cybersecurity services company focused on penetration testing, red teaming, and incident response; direct DACH competitor with a comparable enterprise-services model.

Broad incumbents

• Positive Technologies: Established global cybersecurity vendor offering offensive security services, application/cloud security assessments and security testing products; competes with Redlings on enterprise pentest and red team RFPs.
• Trustwave: Global MSSP and security advisory with managed penetration testing, red team, and incident response services; competes for enterprise security testing budget but offers a broader bundled services model.
• Orange Cyberdefense: Large MSSP with a dedicated offensive security practice (pentest, red team, threat intelligence); broader service catalog than Redlings but competes in the same enterprise-testing RFPs.
• NCC Group: Global cybersecurity services firm offering large-scale penetration testing, red team, and assurance services; competes for the same enterprise pentest budget but with broader portfolio and global delivery footprint.

Regional players

• SEC Consult: European cybersecurity consultancy (DACH-headquartered) offering penetration testing, red teaming, and security advisory; regional competitor with comparable service menu and target client base in German-speaking markets.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/@redlings
• Xtwitter.com/intent/tweet?text=
• LinkedInlinkedin.com/company/redlings

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Redlings