Red Sky Alliance
Red Sky Alliance is a privately held cyber threat intelligence firm delivering daily threat scores, real-time alerts, and historical datasets through REDXRAY and CTAC, serving enterprises, small businesses, and government agencies across healthcare, automotive, finance, energy, and other industry verticals.
- Company typePrivate
- Founded2014
- HeadquartersNew Boston, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Red Sky Alliance does
Red Sky Alliance is a privately held, USA-owned cyber threat intelligence firm headquartered in New Boston, founded circa 2011 (per firmographics) or 2014 (per company timeline) and operating for over twelve years. The company delivers proprietary cyber threat intelligence datasets and services to information security professionals across enterprises, small businesses, and government agencies, covering targeted industry segments with TLP White and Green cyber threat reporting, international reports, and malware/botnet analyses. The firm publicly advertises free access to redskyalliance.org for all users with no salesperson outreach, framing itself as a community-led intelligence resource rather than a traditional vendor.
The product portfolio centers on two core platforms. REDXRAY is a daily Cyber Threat Score and real-time threat notification service that monitors organizations and supply chains for compromised systems, botnet activity, and suspicious IP address connections, including weekly identification of thousands of compromised IP addresses. CTAC (Cyber Threat Analysis Center) is a webtop dashboard providing access to historical threat datasets through OpenSearch Dashboards and API feeds, supporting strategic, operational, and tactical intelligence needs. Supporting offerings include REDSHORT weekly 10-minute webinars, regularly updated IOC datasets in CSV and Fortinet formats (botnet tracker blacklists, sinkhole blacklists), and a substantial archive of 195+ intel reports, 239+ indicators of compromise, and hundreds of industry-specific articles spanning eight verticals: automotive, commercial, finance, healthcare, oil and gas, power utilities, transportation, and x-industry. The technology stack is powered by Wapack Labs, which supplies the underlying data collection, OpenSearch/Kibana-based analytics frameworks, and backend infrastructure.
The business model combines free public content access for community engagement with subscription-based paid cyber threat intelligence services for enterprise and government customers, monetized primarily through REDXRAY and CTAC. Go-to-market is community-led (free reports and weekly webinars as top-of-funnel), event-driven (REDSHORT webinars, threat-briefing videos), and increasingly channel-led for the public sector through a Master Government Aggregator relationship with Carahsoft Technology Corp., making REDXRAY and CTAC available via NASA SEWP V, ITES-SW2, NASPO ValuePoint, and OMNIA Partners procurement vehicles. Additional strategic partnerships with H2L Solutions, ExCom Industries, and Cerebus Cyber Forensics extend market reach. The named enterprise customer evidence is limited to the University of Vermont Medical Center (post-ransomware CTAC/REDXRAY deployment), with broader government, healthcare, automotive, finance, oil and gas, power utilities, and transportation adoption implied via customer-segment targeting. Operating with a small team of 1-10 employees, the firm is led by founder and CEO Jim McKee.
Red Sky Alliance firmographics
Firmographics- Name
- Red Sky Alliance
- Legal name
- Red Sky Alliance
- Website
- https://redskyalliance.org
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Red Sky Alliance is a privately held cyber threat intelligence firm delivering daily threat scores, real-time alerts, and historical datasets through REDXRAY and CTAC, serving enterprises, small businesses, and government agencies across healthcare, automotive, finance, energy, and other industry verticals.
- Ownership category
- akta.pro rank
Red Sky Alliance industry classification
Industry- Product category
- Cyber Threat Intelligence
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Security Systems Services (56162)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Threat Intelligence Services (BPAEADAC)
- akta.pro secondary industry
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF)
Keywords
Where Red Sky Alliance is headquartered
LocationHeadquarters
- HQ city
- New Boston
- HQ country
- United States
- HQ region
- North America
Markets served
Red Sky Alliance business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&, D, Operations, Marketing or Sales
Revenue model
- Cyber Threat Intelligence Subscriptions: Subscription-based access to proprietary cyber threat intelligence datasets and services, including REDXRAY daily threat scores and CTAC historical data feeds, delivered in formats suited to strategic, operational, and tactical needs.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free public access to baseline threat reporting and resources |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels5 records
Red Sky Alliance product offering
Product offeringCore offering
Red Sky Alliance delivers proprietary cyber threat intelligence datasets and services through two core platforms: REDXRAY, which provides daily Cyber Threat Scores and real-time threat notifications for organizations and supply chains, and CTAC (Cyber Threat Analysis Center), a webtop dashboard offering historical threat dataset access via OpenSearch Dashboards and API feeds. The firm produces TLP White and Green cyber threat reporting, intel reports, malware/bot analyses, and industry-specific threat content targeted at automotive, healthcare, finance, energy, transportation, and government sector clients.
Product overview
Red Sky Alliance is a privately held USA-owned cyber threat intelligence firm delivering proprietary cyber threat intelligence datasets and services. The portfolio consists of two primary platforms: REDXRAY (core threat notification service providing daily Cyber Threat Scores and real-time alerts) and CTAC - Cyber Threat Analysis Center (a webtop dashboard providing historical dataset access via OpenSearch Dashboards and API feeds). Supporting offerings include REDSHORT webinars (weekly 10-minute threat briefings) and downloadable IOC datasets (black lists, botnet trackers, sinkhole blacklists). The company provides TLP White and Green cyber threat reporting for targeted industry segments, international reports, and malware/bot analyses, serving enterprises to small businesses across multiple industry verticals including Automotive, Finance, Healthcare, Oil & Gas, Power Utilities, Transportation, and X-Industry sectors.
Differentiator
Problem solved
Functional benefit
Brands
- REDXRAY: Cyber threat notification service providing daily Cyber Threat Scores and real-time threat notifications for organizations and supply chains.
- CTAC (Cyber Threat Analysis Center)
- REDSHORT
Products and services
- REDXRAY
- CTAC (Cyber Threat Analysis Center)
- IOC Black Lists and Botnet/Sinkhole Tracker Feeds
Quantifiable outcome
- Weekly identification of thousands of compromised IP addresses and new botnet IPs (e.g., 16,344 new unique compromised IPs identified in a single week)
Companies that use Red Sky Alliance
Customer profileNamed customers2 records
Segments8 records
Ideal customer profiles8 records
Red Sky Alliance technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature5 records
Red Sky Alliance partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core and minor.
- Carahsoft Technology Corp.coreCarahsoft serves as Red Sky Alliance's Master Government Aggregator, making cyber threat intelligence solutions (REDXRAY and CTAC) available to the public sector through multiple government procurement contracts including NASA SEWP V, ITES-SW2, NASPO ValuePoint, and OMNIA Partners. This partnership enables Federal, State, and Local agencies to strengthen cyber defenses, protect critical data, reduce ransomware risk, and meet compliance standards such as NIST 800-171, CMMC, and HIPAA.
- ExCom IndustriesminorRed Sky Alliance announced a partnership with ExCom Industries, extending its cyber threat intelligence reach into additional market segments. Details of the partnership scope are limited.
- Cerebus Cyber ForensicsminorPartnership with Cerebus Cyber Forensics to deliver enhanced cyber threat intelligence capabilities. Details of the partnership scope are limited.
- H2L SolutionsminorPartnership with H2L Solutions announced to extend Red Sky Alliance's cyber threat intelligence offerings. Partnership was announced in May 2025.
- Wapack LabscoreRed Sky Alliance is powered by Wapack Labs, which provides proprietary cyber threat intelligence datasets, RedXray and CTAC platforms, and backend infrastructure for data collection and analysis. Wapack Labs develops the analytical tools and data frameworks including CTAC Data Analytics Framework, OpenSearch Dashboards, and Kibana-based dashboards.
Scale indicators6 records
Recent moves6 records
Expansion highlights5 records
Red Sky Alliance competitors and assessment
Company assessmentDirect peers
- ThreatConnect: Threat intelligence platform combining intelligence aggregation, scoring, and orchestration for security teams. Comparable to Red Sky Alliance's CTAC dashboard and REDXRAY daily threat scoring, both targeting enterprise and government security operations.
- Flashpoint: Threat intelligence company offering finished intelligence, IOC feeds, and dark-web monitoring across multiple verticals including financial services and government. Directly comparable to Red Sky Alliance's industry-specific reporting and subscription intelligence model.
- Mandiant: Google-owned threat intelligence and incident response firm offering industry-specific intelligence, IOC feeds, and threat actor reporting. Directly comparable to Red Sky Alliance's CTAC and intelligence subscription services, with similar government and enterprise verticals.
- Anomali: Threat intelligence platform providing IOC management, threat scoring, and integrated dashboards for security operations. Closely comparable to Red Sky Alliance's CTAC platform and REDXRAY scoring capabilities, with similar enterprise and MSSP customer bases.
- Intel 471: Cyber threat intelligence provider focused on adversary tracking, malware/botnet intelligence, and finished reporting for enterprise and government customers. Highly comparable to Red Sky Alliance's botnet tracking, sinkhole blacklists, and malware analyses.
- Recorded Future: Large, independent threat intelligence platform (now owned by Mastercard) delivering threat scoring, IOC feeds, and industry-specific intelligence to enterprise and government customers. Highly comparable to Red Sky Alliance's REDXRAY scoring model and CTAC historical dataset offering.
Broad incumbents
- CrowdStrike Intelligence: CrowdStrike's Falcon Intelligence module delivers threat intelligence, adversary tracking, and IOC feeds bundled into the broader Falcon endpoint platform. Comparable capabilities to REDXRAY/CTAC but distributed as part of an integrated XDR/EDR suite rather than as a standalone CTI subscription.
- Microsoft Threat Intelligence: Microsoft Defender Threat Intelligence and Microsoft Threat Analysis Center provide IOC data, threat actor reporting, and industry-specific intelligence integrated across the Defender and Azure security stacks. A large incumbent offering comparable content to Red Sky Alliance's intelligence subscription, often bundled into enterprise licensing.
Emerging players
- Cyware: Smaller threat intelligence platform offering TIP (Threat Intelligence Platform), automated threat sharing, and SOC orchestration. Comparable to CTAC's OpenSearch-based dashboard and Red Sky Alliance's intelligence-sharing community model, with overlap in the government and MSSP segments.
Others
- Wapack Labs: Cyber threat intelligence firm providing the proprietary datasets, REDXRAY/CTAC platforms, and analytical infrastructure that power Red Sky Alliance. Listed in the company's services navigation as a technology and integration partner rather than a competitor.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Red Sky Alliance social profiles
Digital presenceRed Sky Alliance financial estimates
Financial estimateRevenue estimate
Valuation estimate
Red Sky Alliance leadership team
Management profileNumber of profiles
Profiles1 record
Red Sky Alliance funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Red Sky Alliance M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Red Sky Alliance
What does Red Sky Alliance do?
Red Sky Alliance delivers proprietary cyber threat intelligence datasets and services through two core platforms: REDXRAY, which provides daily Cyber Threat Scores and real-time threat notifications for organizations and supply chains, and CTAC (Cyber Threat Analysis Center), a webtop dashboard offering historical threat dataset access via OpenSearch Dashboards and API feeds. The firm produces TLP White and Green cyber threat reporting, intel reports, malware/bot analyses, and industry-specific threat content targeted at automotive, healthcare, finance, energy, transportation, and government sector clients.
Is Red Sky Alliance a public or private company?
Red Sky Alliance is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Red Sky Alliance founded?
Red Sky Alliance was founded in 2014. It employs 1 to 10 people.
Where is Red Sky Alliance based?
Red Sky Alliance is headquartered in New Boston, United States, in the North America region.
How does Red Sky Alliance make money?
One revenue line is on record: cyber Threat Intelligence Subscriptions.
Who are Red Sky Alliance's main competitors?
Direct peers on record are ThreatConnect, Flashpoint, Mandiant, Anomali, Intel 471 and Recorded Future. Broad incumbents are CrowdStrike Intelligence and Microsoft Threat Intelligence. Cyware is listed as an emerging player. Wapack Labs is listed as an others.
Does Red Sky Alliance have an API?
Yes. CTAC offers access to historical datasets through API feeds. The API enables delivery of historical threat datasets to government agencies and customers. Specific API protocol (REST, GraphQL), authentication method, rate limits, and versioning are not detailed in available sources.
What industry is Red Sky Alliance in?
Red Sky Alliance's product category is Cyber Threat Intelligence. Its primary akta.pro industry code is BPAEADAC, Threat Intelligence Services, with a secondary code of HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS). Its NAICS code is 51821 and its SIC code is 7370.