Wapack Labs
Red Sky Alliance (formerly Wapack Labs) is a U.S. cyber threat intelligence firm delivering daily threat notifications, dark web monitoring, and analyst services to federal agencies, financial institutions, healthcare organizations, and SMBs via subscriptions and government contracts.
- Company typePrivate
- Founded2011
- HeadquartersSteamboat Springs, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Wapack Labs does
Red Sky Alliance, LLC (formerly Wapack Labs Corporation, founded 2011 by Jim McKee) is a privately held, U.S.-owned cyber threat intelligence firm headquartered in Steamboat Springs, Colorado, following a December 2022 relocation from New Boston, New Hampshire. The company delivers daily threat intelligence, dark web monitoring, and enterprise cyber threat analysis to federal agencies, financial institutions, healthcare organizations, insurance companies, and SMBs, with distribution via MSP/MSSP resellers and government procurement vehicles (SEWP V, ITES-SW2, NASPO ValuePoint, OMNIA Partners).
The company's core technology stack is built on a proprietary dataset of more than 1.4 billion records spanning twelve-plus years of collection, organized into roughly 9-10 specialized intelligence collections. Its product family includes REDXRAY (daily threat notifications, with the 2.0 release adding AI-generated Summary/Mitigation Reports and MITRE ATT&CK mapping), REDXRAY-Plus (dashboard-enabled), the REDXRAY Supply Chain Support Program, CTAC (Cyber Threat Analysis Center), REDCURRENT (API data feed), REDPANE (dark web search engine), and a vCISO service supported by a Virtual Trust Officer (vTO) program. Underlying workflows combine automated collection with analyst curation led by personnel drawn from the FBI, U.S. Coast Guard, and intelligence community.
Red Sky Alliance operates a hybrid revenue model: subscription-based recurring revenue from REDXRAY, CTAC, and REDCURRENT API; usage-based revenue from REDPANE on-demand; professional services revenue from vCISO and consulting; and government contract revenue through the listed procurement vehicles and the Carahsoft master aggregator agreement. Pricing is tiered across SMB plans (entry-level around $3,000/year) and enterprise contracts, with named flagship customers including NASA and Dun & Bradstreet.
Wapack Labs firmographics
Firmographics- Name
- Wapack Labs
- Legal name
- Red Sky Alliance, LLC
- Website
- https://redskyalliance.com
- Company type
- Private
- Founded year
- 2011
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Red Sky Alliance (formerly Wapack Labs) is a U.S. cyber threat intelligence firm delivering daily threat notifications, dark web monitoring, and analyst services to federal agencies, financial institutions, healthcare organizations, and SMBs via subscriptions and government contracts.
- Ownership category
- akta.pro rank
Wapack Labs industry classification
Industry- Product category
- Cyber Threat Intelligence
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Custom Computer Programming Services (541511)
- SIC
- Services-Management Consulting Services (8742), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI)
- akta.pro secondary industries
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Model Security Testing & Red Teaming (adversarial ML, jailbreaks) (HDAAAKAC)
Keywords
Where Wapack Labs is headquartered
LocationHeadquarters
- HQ city
- Steamboat Springs
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Wapack Labs business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Subscription-based Threat Intelligence Services: Recurring subscription model for RedXray and CTAC services delivering daily cyber threat notifications, reports, and dashboard access. Services available at multiple price points to serve both SMB and enterprise customers.
- API Data Feeds (REDCURRENT): Raw data feed subscriptions sold as API packages to partners, integrators, and enterprises. Partners embed the data into their own products and services.
- On-Demand Dark Web Searches: REDPANE searches available on-demand without service contract at measured pay-per-use rates.
- Professional Services: vCISO services, consulting, and custom intelligence reporting engagements. Includes vTO (Virtual Trust Officer) program and advisory services.
- Government Contract Vehicle Sales: Sales through government aggregation contracts including NASA SEWP V, ITES-SW2, NASPO ValuePoint, and OMNIA Partners.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | REDXRAY Standard - Daily threat notifications for organizations |
| Subscription | Annual | REDXRAY Plus - Enhanced with dashboard and deeper intelligence |
| Subscription | Multi-year contract | Enterprise and Government Tiers |
| Subscription | Monthly | API Data Feeds (REDCURRENT) |
Go-to-market motion3 records
Distribution channels7 records
Marketing channels8 records
Wapack Labs product offering
Product offeringCore offering
Red Sky Alliance (formerly Wapack Labs) sells proprietary cyber threat intelligence products and services to businesses and government agencies. Its flagship offering, REDXRAY, delivers daily cyber threat notifications, threat scores, and AI-generated assessment and mitigation reports against an organization's networks and supply chains, without requiring any network connection. Complementary products include CTAC (enterprise threat analysis with historical dataset access via OpenSearch dashboards and API), REDPANE (on-demand dark web search engine), REDCURRENT (API raw data feed for partner integration), and vCISO/vTO professional services.
Product overview
Red Sky Alliance (formerly Wapack Labs) is a cyber threat intelligence firm offering a unified platform of targeted threat intelligence products and services. The core portfolio centers on REDXRAY (daily cyber threat notification with AI-generated reports), CTAC (Cyber Threat Analysis Center for enterprise historical data access), and REDPANE (dark web search engine). These are complemented by REDCURRENT (API raw feed), REDXRAY-Plus (dashboard version with supply chain monitoring), vCISO and vTO professional services, and industry-specific threat reports. The REDXRAY 2.0 platform delivers AI-powered assessment and mitigation reports using nine continuously updated data sets drawn from 1.4 billion proprietary datasets, with services available via dashboard, email, API, and professional consulting.
Differentiator
Problem solved
Functional benefit
Brands
- REDXRAY: Daily cyber threat notification service monitoring threats against networks and supply chains
- CTAC
- REDCURRENT
- REDPANE
- vCISO Program
- vTO Program
Products and services
- REDXRAY Daily cyber threat notification service that monitors threats against networks and supply chains in a single console. Provides targeted cyber threat intelligence including daily alerts, threat scores, and AI-generated assessment and mitigation reports. Available in standard and Plus versions.
- REDXRAY 2.0 Latest version of REDXRAY featuring AI-generated Summary/Mitigation Reports based directly on IOCs collected during collection campaigns, along with MITRE ATT&CK framework alignment and proactive cyber remedies.
- REDXRAY-Plus Enhanced REDXRAY version with online dashboard that shows the intelligence behind listed cyber threats. Includes supply chain monitoring capabilities and client portfolio views for vCISO and enterprise users.
- CTAC (Cyber Threat Analysis Center) Enterprise cyber threat analysis center providing full access to Red Sky Alliance's extensive historical datasets through OpenSearch Dashboards and API feeds. Enables custom queries, accelerating investigations and strengthening enterprise-wide cyber defense. Available on Snowflake Data Marketplace.
- REDPANE Automatic dark web search engine that monitors dozens of dark web sites daily. Provides current and historical dark web content pertinent to targeted search topics. Empowers clients with intelligence for targeted threat investigations. Available on-demand and via Snowflake Data Marketplace.
- REDCURRENT API raw feed of cyber threat intelligence sources collected by Red Sky Alliance. Packaged as 9-10 data sets (Botnet Tracker, Breach Data, Keylogger Records, Malicious Emails, OSINT Records, Sinkhole Traffic, Threat Recon Records, etc.) that partners can embed in their products and services for enhanced cyber-threat reporting.
- vCISO Service Virtual Chief Information Security Officer service enabling consultants to better protect clients using RedXray-Plus with daily targeted threat monitoring and client portfolio views.
- Virtual Trust Officer (vTO) Program Insider threat program with government-designed background checks, employee interviews, and internal cyber and dark web investigations. Run by former law enforcement professionals.
- Industry Specific Reports Targeted threat intelligence reports specific to industry sectors including Financial, Healthcare, Hospitality & Travel, Insurance, Maritime, and Supply Chain. Delivered as subscription intelligence reports.
Quantifiable outcome
- RedXray notifies of cyber threats before they breach the network
- +4 more outcomes
Companies that use Wapack Labs
Customer profileNamed customers7 records
Segments6 records
Ideal customer profiles6 records
Wapack Labs technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability4 records
Feature7 records
Wapack Labs partnerships and signals
Strategic signalPartnerships
16 partnerships are on record, tiered core, major and minor.
- ExCom IndustriescoreStrategic partnership to help government agencies, critical infrastructure operators, and commercial organizations strengthen resilience against converged cyber and physical threats. Combines Red Sky threat intelligence with ExCom's cyber-physical security and resilience capabilities.
- Cerebus Cyber ForensicscoreTechnology partnership expanding Red Sky services to South Africa and the African continent. Cerebus develops security and risk management solutions integrated across organizations. Partnership enhances capability to provide cutting-edge cyber intelligence to African markets.
- Carahsoft Technology Corp.coreCarahsoft serves as Red Sky Alliance's Master Government Aggregator, making cyber threat intelligence solutions available to the Public Sector through reseller partners and multiple government contract vehicles including NASA SEWP V, ITES-SW2, NASPO ValuePoint, and OMNIA Partners.
- H2L Solutions, Inc.coreTechnology partnership with HUBZone and Service-Disabled Veteran Owned Small Business providing cybersecurity services including penetration testing, vulnerability assessments, and compliance audits. Co-hosted annual cyber threat seminars in Huntsville, AL.
- CyberCulture, LLCmajorPartnership with cybersecurity fractional CISO consulting firm bringing over two decades of experience. CyberCulture specializes in cybersecurity strategy, risk management, and compliance. Partnership supports SaaS services with professional services.
- Cyber Hero vCISO NetworkmajorTechnology partnership serving small-to-mid-sized business market with next-generation cybersecurity. Cyber Hero platform connects experienced vCISOs with SMB clients. Red Sky research integrates with platform's network effect.
- Seron SecuritymajorPartnership with next-generation cybersecurity company and creators of TRaViS Attack Surface Management platform. REDXRAY provides threat analysis to enhance Seron's attack surface management solution.
- CysurancecorePartnership with next-generation risk mitigation company that insures, warrants, and certifies security solutions. RedXray threat feeds monitor Cysurance-warranted solutions to assess cyber-threat landscape and protect integrity of insured community.
- Dun & Bradstreet (DNB)corePartnership allowing Dun & Bradstreet clients to purchase cyber threat intelligence by DUNS number. Intelligence available through DNB Marketplace.
- Quackenbush Benefits AgencyminorSales partnership with master distributor of Legal Shield and IDShield. Partnership expands RedXray services to at-risk small and mid-sized businesses through Legal/ID protection channels.
- ATOM GroupmajorPartnership powering ATOM's LIGHTHOUSE dark web data intelligence platform for New Hampshire municipal entities, law enforcement, and not-for-profits. ATOM serves as emergency cyber incident response partner to NH Public Risk Management Exchange.
- CYRISMAcoreDark web intelligence service (REDPANE) integrated seamlessly via CYRISMA's client access dashboard. CYRISMA offers dark web monitoring to all clients within platform at no additional charge.
- CYRISMAcoreInside-outside security partnership combining CYRISMA's data-centric security ecosystem with Red Sky's external threat intelligence. Unique approach provides affordable cybersecurity for MSPs to keep clients secure.
- SnowflakecoreEnterprise Cyber Threat Analysis Center (CTAC) available on Snowflake Data Marketplace. Cloud-based data warehousing platform enables customers to analyze Red Sky intelligence with their own data. CTAC available as Alternative Data Source for financial firms.
- CysurancecoreBundled offering combining RedXray threat notification with Cysurance cyber insurance policy underwritten by Chubb. Provides holistic cyber risk solution for SMBs informing and protecting against cyber threats.
- Global Resilience Federation (GRF)majorGRF offers automated customized threat reports to member companies at reduced rates. GRF is non-profit hub connecting ISACs, ISAOs, and CERTs across critical infrastructure sectors including Financial Services ISAC, Health ISAC, and Oil and Natural Gas ISAC.
Scale indicators7 records
Recent moves8 records
Expansion highlights6 records
Wapack Labs competitors and assessment
Company assessmentDirect peers
- Mandiant: Mandiant (now part of Google Cloud) provides cyber threat intelligence, incident response, and managed defense services. It directly overlaps with Red Sky's threat intelligence, dark web monitoring, and managed detection offerings, particularly in government and large enterprise segments.
- Flashpoint: Flashpoint specializes in threat intelligence and dark web data, providing illicit community monitoring, compromised credential alerting, and vulnerability intelligence. It directly parallels Red Sky's REDPANE dark web search engine and REDCURRENT API offerings for fraud, brand, and security teams.
- Intel 471: Intel 471 provides actor-centric cyber threat intelligence drawn from the cybercrime underground, with coverage of malware, access brokers, and fraud. It is directly comparable to Red Sky's dark web and botnet/keylogger data sets sold via REDCURRENT API and REDPANE.
- Group-IB: Group-IB provides cyber threat intelligence, fraud hunting, and digital forensics, with deep dark web and underground forum monitoring. It competes directly with Red Sky Alliance on threat intelligence feeds and dark web data products for financial services, government, and enterprise customers.
- Recorded Future: Recorded Future is a leading threat intelligence platform providing aggregated, machine-readable threat data across surface, deep, and dark web sources. It directly competes with Red Sky Alliance's REDCURRENT API, REDPANE, and CTAC offerings, targeting similar enterprise and government buyers with subscription intelligence services.
- Digital Shadows: Digital Shadows (now part of ReliaQuest) provides digital risk protection and threat intelligence, including dark web monitoring, brand protection, and data exposure alerting. It is directly comparable to Red Sky's REDPANE and supply chain REDXRAY offerings for enterprise security teams.
- EclecticIQ: EclecticIQ offers a threat intelligence platform built around STIX/TAXII, supporting enterprise CTI teams and MSSPs. It directly competes with REDCURRENT API and CTAC, especially in European government and enterprise accounts, with comparable analyst workflows and feed aggregation.
- Anomali: Anomali provides a threat intelligence platform that aggregates feeds, supports STIX/TAXII, and integrates with SIEM/SOAR tools. It directly competes with REDCURRENT API and CTAC by offering enterprise customers curated threat feeds, dark web monitoring, and intelligence-driven security operations.
- ThreatConnect: ThreatConnect combines threat intelligence, analytics, and SOAR in a unified platform. It competes directly with Red Sky Alliance across enterprise threat intelligence, dark web data, and supply chain risk use cases, and is sold to similar financial, healthcare, and government customers.
Broad incumbents
- CrowdStrike: CrowdStrike is a broad endpoint security and extended detection/response incumbent with an embedded threat intelligence module (Falcon Intelligence) covering adversary tracking, dark web monitoring, and supply chain risk. While much larger and broader than Red Sky, it competes for the same enterprise and government threat intelligence budgets and increasingly overlaps with REDXRAY and REDCURRENT use cases.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Wapack Labs social profiles
Digital presenceWapack Labs compliance and trust
Trust signalCompliance3 records
Wapack Labs financial estimates
Financial estimateRevenue estimate
Valuation estimate
Wapack Labs leadership team
Management profileNumber of profiles
Profiles5 records
Wapack Labs funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Wapack Labs M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Wapack Labs
What does Wapack Labs do?
Red Sky Alliance (formerly Wapack Labs) sells proprietary cyber threat intelligence products and services to businesses and government agencies. Its flagship offering, REDXRAY, delivers daily cyber threat notifications, threat scores, and AI-generated assessment and mitigation reports against an organization's networks and supply chains, without requiring any network connection. Complementary products include CTAC (enterprise threat analysis with historical dataset access via OpenSearch dashboards and API), REDPANE (on-demand dark web search engine), REDCURRENT (API raw data feed for partner integration), and vCISO/vTO professional services.
Is Wapack Labs a public or private company?
Wapack Labs is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Wapack Labs founded?
Wapack Labs was founded in 2011. It employs 1 to 10 people.
Where is Wapack Labs based?
Wapack Labs is headquartered in Steamboat Springs, United States, in the North America region.
How does Wapack Labs make money?
Five revenue lines are on record. Subscription-based Threat Intelligence Services are the primary driver. The others are API Data Feeds (REDCURRENT), on-Demand Dark Web Searches, professional Services and government Contract Vehicle Sales.
Who are Wapack Labs's main competitors?
Direct peers on record are Mandiant, Flashpoint, Intel 471, Group-IB, Recorded Future, Digital Shadows, EclecticIQ, Anomali and ThreatConnect. CrowdStrike is listed as a broad incumbent.
Does Wapack Labs have an API?
Yes. REDCURRENT is an API raw feed of cyber threat intelligence sources collected by Red Sky Alliance. These data sets can be added to partners' products and services to provide enhanced cyber-threat reporting. Red Sky Alliance has made their data sets available as a package through APIs. CTAC provides full access to Red Sky Alliance's extensive historical datasets through OpenSearch Dashboards and API feeds. REDPANE collections are available through Snowflake Data Marketplace for ease of access and use. Developer documentation is at www.wapacklabs.com/redcurrent.
What industry is Wapack Labs in?
Wapack Labs's product category is Cyber Threat Intelligence. Its primary akta.pro industry code is HDADAKAI, Email & Collaboration Threat Detection/Response (ICR/CTDR), with a secondary code of HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS). Its NAICS code is 51821 and its SIC code is 8742.