Wapack Labs
Wapack Labs, operating as Red Sky Alliance, is a US-based cyber threat intelligence firm that curates proprietary data from dark web, breach, and botnet sources into subscription products (CTAC, REDXRAY, REDPANE, REDCURRENT) sold to government agencies, defense contractors, and enterprise security teams across multiple verticals.
- Company typePrivate
- Founded2012
- HeadquartersSteamboat Springs, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Wapack Labs does
Wapack Labs Corporation, operating commercially as Red Sky Alliance, is a US-based cyber threat intelligence firm founded in 2012 and headquartered in Steamboat Springs, Colorado. The company collects and curates proprietary threat data from dark web sources, breach databases, botnet trackers, keylogger records, malicious email indicators, sinkhole traffic, and OSINT feeds, and packages it into four products: CTAC (a seat-based Cyber Threat Analysis Center with OpenSearch Dashboards and REST API access across 9 datasets and 10+ years of history), REDXRAY (a daily alert and reporting service with AI-assisted report generation), REDPANE (a dark web search engine monitoring 60+ underground sites with 1M+ indicators), and REDCURRENT (a raw API feed for partner embedding).
The platform is sold primarily to US government agencies and defense industrial base contractors, with additional positioning across financial, healthcare, critical infrastructure, maritime, insurance, and hospitality verticals. Distribution combines direct enterprise sales, a Carahsoft-led public-sector channel, a VAR/reseller program, and marketplace listings on Snowflake Data Marketplace and Anomali Threat Stream, supplemented by integrations with Microsoft 365 Defender and Elysium Analytics. Revenue is generated through seat and dataset subscriptions (monthly/annual billing, e.g., Botnet Tracker at $88K/year, Data Breach at $66K/year, Dark Web at $44K/year, REDXRAY domain monitoring at $500/month per domain), data marketplace consumption, and project-scoped professional services.
The company is privately held with no disclosed institutional investors, is led by CEO Jim McKee and Managing Director Bill Schenkelberg, and operates with a small team (11-50 employees). Strategic emphasis over the past three years has been on expanding distribution channels (Carahsoft, Snowflake, Microsoft), productizing dark web intelligence (REDPANE), and adding an AI-assisted reporting layer (REDXRAY 2.0, 2025).
Wapack Labs firmographics
Firmographics- Name
- Wapack Labs
- Legal name
- Wapack Labs Corporation
- Website
- https://wapacklabs.com
- Company type
- Private
- Founded year
- 2012
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Wapack Labs, operating as Red Sky Alliance, is a US-based cyber threat intelligence firm that curates proprietary data from dark web, breach, and botnet sources into subscription products (CTAC, REDXRAY, REDPANE, REDCURRENT) sold to government agencies, defense contractors, and enterprise security teams across multiple verticals.
- Ownership category
- akta.pro rank
Wapack Labs industry classification
Industry- Product category
- Cyber Threat Intelligence
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI)
- akta.pro secondary industries
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Web Application Firewall (WAF) & Bot Management (ADC‑Integrated) (HDAFAHAG)
Keywords
Where Wapack Labs is headquartered
LocationHeadquarters
- HQ city
- Steamboat Springs
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Wapack Labs business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Infrastructure, Personnel, Operations, Marketing or Sales
Revenue model
- CTAC Subscription: Cyber Threat Analysis Center (CTAC) seat licensing providing access to OpenSearch Dashboards with all 9 datasets including historical data. Offered as single-user license with 10,000 queries per day.
- REDXRAY Subscription: Monthly subscription for cyber threat notification service covering domain monitoring, daily alerts, and reporting. Volume discounts available for larger-scale deployments.
- Data Dataset Subscriptions: Individual dataset subscriptions for specific threat intelligence types including Botnet Tracker, Breach Data, Keylogger Records, Malicious Email Attachments, Sinkhole Collection, Phishing Domains, Source Code Secrets, Dark Web (REDPANE), and Paste Storage Sites.
- Professional Services: Consulting services for compliance assessments using CTAC and REDXRAY tools. Pricing subject to project scope.
- Snowflake Data Marketplace: CTAC service and cyber threat collections available on Snowflake Data Marketplace for ease of use, with usage-based pricing.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | CTAC Single-User License - Monthly |
| Subscription | Annual | CTAC Single-User License - Annual |
| Subscription | Monthly | Botnet Data - Monthly |
| Subscription | Annual | Botnet Data - Annual |
| Subscription | Monthly | Data Breach Research - Monthly |
| Subscription | Annual | Data Breach Research - Annual |
| Subscription | Monthly | Dark Web/Paste Storage - Monthly |
| Subscription | Annual | Dark Web/Paste Storage - Annual |
| Subscription | Monthly | REDXRAY Domain Monitoring - Monthly |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels6 records
Wapack Labs product offering
Product offeringCore offering
Wapack Labs (Red Sky Alliance) operates a cyber threat intelligence platform that delivers proprietary intelligence data, analysis, and strategic reporting. Core products include CTAC, a seat-based analytics platform with OpenSearch Dashboards providing access to 9 cybersecurity datasets and REST API integration; REDXRAY, a daily cyber alert and AI-assisted reporting service; REDPANE, a proprietary dark web search engine monitoring 60+ underground sites; and REDCURRENT, an API raw feed of threat intelligence sources for partner integration.
Product overview
Wapack Labs (Red Sky Alliance) is a cyber threat intelligence firm offering a platform-plus-modules architecture. The core offerings include CTAC (Cyber Threat Analysis Center), a seat-based platform providing access to 9 distinct cybersecurity datasets, and REDXRAY, a daily cyber alert and reporting service. These are complemented by REDPANE (dark web search engine monitoring 60+ underground sites) and REDCURRENT (API raw feed for partner integration). CTAC serves as the primary analytics platform with REST API access, while REDXRAY provides automated daily alerts and AI-assisted report generation. All products share common data sources and are available individually or bundled.
Differentiator
Problem solved
Functional benefit
Brands
- CTAC (Cyber Threat Analysis Center): A seat-based virtual access to cyber intelligence data sets, including OpenSearch Dashboards and REST API for integration.
- REDXRAY
- REDPANE
- REDCURRENT
Products and services
- CTAC (Cyber Threat Analysis Center) Seat-based cyber threat intelligence platform providing OpenSearch Dashboards with access to 9 datasets (Botnet Tracker, Breach Data, Keylogger Records, Malicious Email, Sinkhole, Phishing, Source Code Secrets, Dark Web, Paste Storage Sites). Single-user license includes 10,000 searches/queries per day and REST API access for integration with other systems, intended for enterprise and government security analysts.
- REDXRAY Daily cyber threat notification service with AI-assisted report generation. Monitors threats against networks, supply chain, and target companies with automated alerts covering botnets, breach data, keyloggers, malicious emails, sinkhole traffic, and OSINT records; integrates with Microsoft 365 Defender for combined inside/outside protection.
- REDCURRENT API raw feed of cyber threat intelligence sources collected by Red Sky Alliance, designed to be added to partners' products and services for enhanced cyber-threat reporting.
- REDPANE Proprietary automatic dark web search engine monitoring 60+ underground sites including black marketplaces, ransomware dump sites, and cybercrime forums. Houses over 1 million indicators and is included with CTAC and REDXRAY products.
- CTAC Individual Dataset Subscriptions Individual dataset subscriptions for specific threat intelligence types including Botnet Tracker (monthly $8,000 / annual $88,000), Data Breach Research (monthly $6,000 / annual $66,000), Dark Web/Paste Storage (monthly $4,000 / annual $44,000), Keylogger Records, Malicious Email Attachments, Sinkhole Collection, Phishing Domains, Source Code Secrets, and Paste Storage Sites.
- Professional Services / Consulting Consulting and compliance assessment services leveraging CTAC and REDXRAY tools, with pricing subject to project scope, for organizations requiring expert analysis in addition to platform subscriptions.
Quantifiable outcome
- Reduce analyst manpower from three analysts to one analyst through automated CTAC dashboard access
- +2 more outcomes
Companies that use Wapack Labs
Customer profileSegments10 records
Ideal customer profiles4 records
Wapack Labs technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability4 records
Feature5 records
Wapack Labs partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered minor and core.
- INTRUSION, Inc.minorZero-day cyber security solutions leader INTRUSION partnered with Red Sky Alliance for enhanced threat intelligence capabilities.
- SnowflakecoreRed Sky Alliance CTAC service and cyber threat collections available on Snowflake Data Marketplace. REDPANE collected data included in these services for ease of use and data lake integration.
- MG AdvisoryminorMG Advisory is a partner utilizing Red Sky Alliance technology as part of their security service offerings. Described as turnkey value for IT security solutions.
- CarahsoftcoreRed Sky Alliance partnered with Carahsoft to deliver cyber threat intelligence solutions to the public sector. Carahsoft serves as a government IT solutions provider and aggregator for the Red Sky Alliance product portfolio.
- Dun & Bradstreet (DNB)minorListed as a partner on Red Sky Alliance website, indicating strategic partnership for business intelligence and risk assessment integration.
- SeronSecurityminorListed as a partner providing cybersecurity services integration with Red Sky Alliance threat intelligence.
- Net Compliance SolutionsminorNet Compliance Solutions integrates Red Sky Alliance technology extensively in their security service offerings to measure, test, and report client exposure to deep/dark web threats.
- MicrosoftcoreREDXRAY integrates with Microsoft 365 Defender for combined protection. Microsoft 365 Defender protects networks from the inside while RedXray protects from the outside, providing 100% protection against cyber threats.
Scale indicators6 records
Recent moves6 records
Expansion highlights5 records
Wapack Labs competitors and assessment
Company assessmentDirect peers
- Recorded Future: Largest standalone threat intelligence vendor (now owned by Mastercard). Sells similar curated intelligence feeds, dark web monitoring, and integrates with SIEM/XDR stacks, competing head-to-head in the same enterprise and government accounts.
- ThreatConnect: Threat intelligence platform combining TIP, SOAR, and analytics. Targets the same enterprise and MSSP buyers as CTAC, and similarly aggregates multiple external feeds into a queryable platform.
- Intel 471: Adversary-centric cyber threat intelligence vendor with curated finished intelligence and adversary TTP data. Competes for government, financial, and MSSP intelligence budgets alongside RSA.
- Mandiant (Google Cloud): Threat intelligence and incident response leader (now within Google Cloud). Competes with RSA's threat intelligence subscriptions and cyber threat assessments, and dwarfs RSA on analyst headcount and government contract wins.
- Flashpoint: Threat intelligence and dark web data vendor. Overlaps directly with REDPANE's dark web monitoring, breach data, and finished intelligence reports, and competes for fraud, financial, and government intelligence buyers.
- Anomali: Threat intelligence platform provider whose ThreatStream product is a direct integration partner AND a competitor. Overlaps with CTAC on dashboarding, feed aggregation, and SIEM integration; competes for the same threat intel platform budget.
Broad incumbents
- CrowdStrike: Endpoint and XDR incumbent with a growing threat intelligence module (Falcon Intelligence). Bundles external intelligence with endpoint/identity/SIEM, pressuring standalone vendors like RSA on price and platform consolidation.
- Microsoft (Defender Threat Intelligence): Microsoft Defender Threat Intelligence offers external threat intelligence integrated with M365 Defender (RSA's stated integration partner). Represents both a distribution channel (via the integration) and a structural threat to standalone CTI vendors.
Emerging players
- Cybersixgill: Specialized dark web threat intelligence vendor. Directly comparable to REDPANE in underground-source coverage and indicator delivery, but narrower scope (no CTAC-style multi-dataset platform).
- ZeroFox: External threat intelligence and digital risk protection vendor. Comparable to RSA on dark web monitoring and brand/attack surface intelligence, primarily serving enterprise security teams.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks7 records
Key highlights7 records
Customer concentration
Wapack Labs social profiles
Digital presenceWapack Labs compliance and trust
Trust signalCompliance4 records
Wapack Labs financial estimates
Financial estimateRevenue estimate
Valuation estimate
Wapack Labs leadership team
Management profileNumber of profiles
Profiles2 records
Wapack Labs funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Wapack Labs M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Wapack Labs
What does Wapack Labs do?
Wapack Labs (Red Sky Alliance) operates a cyber threat intelligence platform that delivers proprietary intelligence data, analysis, and strategic reporting. Core products include CTAC, a seat-based analytics platform with OpenSearch Dashboards providing access to 9 cybersecurity datasets and REST API integration; REDXRAY, a daily cyber alert and AI-assisted reporting service; REDPANE, a proprietary dark web search engine monitoring 60+ underground sites; and REDCURRENT, an API raw feed of threat intelligence sources for partner integration.
Is Wapack Labs a public or private company?
Wapack Labs is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Wapack Labs founded?
Wapack Labs was founded in 2012. It employs 11 to 50 people.
Where is Wapack Labs based?
Wapack Labs is headquartered in Steamboat Springs, United States, in the North America region.
How does Wapack Labs make money?
Five revenue lines are on record. CTAC Subscription is the primary driver. The others are REDXRAY Subscription, data Dataset Subscriptions, professional Services and snowflake Data Marketplace.
Who are Wapack Labs's main competitors?
Direct peers on record are Recorded Future, ThreatConnect, Intel 471, Mandiant (Google Cloud), Flashpoint and Anomali. Broad incumbents are CrowdStrike and Microsoft (Defender Threat Intelligence). Emerging players are Cybersixgill and ZeroFox.
Does Wapack Labs have an API?
Yes. CTAC users can access threat intelligence using their own scripts through a REST API. Almost any function available in the user interface (GUI) is available through the Red Sky Alliance CTAC API. CTAC single-user license includes API access with 10,000 queries per day and maximum of 10,000 results. REDCURRENT is a separate API raw feed of cyber threat intelligence sources that can be added to partners' products and services. Developer documentation is at redskyalliance.com/redcurrent.
What industry is Wapack Labs in?
Wapack Labs's product category is Cyber Threat Intelligence. Its primary akta.pro industry code is HDADAKAI, Email & Collaboration Threat Detection/Response (ICR/CTDR), with a secondary code of HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS). Its NAICS code is 51821 and its SIC code is 7370.