We are a company providing expert technical services in the field of cybersecurity. It is not only our work, but also our passion for 25 years. By now we have been trusted by many customers which include international corporations, government institutions and organisations including critical infrastructure.
Get a quoteResearch by REDTEAM.PL has been cited by Forbes magazine (USA), the SANS Institute (USA), CERT Polska and CERT Orange. Adam Ziaja of REDTEAM.PL co-authored handbooks for ENISA – the European Union Agency for Cybersecurity. Links to the sources are below.
Our discovery in US edition of Forbes. The prestigious magazine covered a vulnerability in Apple Safari discovered by our team, which allowed stealing user files.
Forbes Magazine
Co-authorship of EU Cybersecurity Agency publications. We contributed to developing incident analysis guidelines for European CERT/CSIRT teams.
Digital Forensics · Cybercrime Traces · Artifact Analysis
Twice featured by SANS Institute. Our research was highlighted in the prestigious ISC StormCast podcast.
SANS ISC StormCast (Malicious WPAD Domains) · SANS ISC StormCast (Safari File Sharing Bug)
BadWPAD research in CERT Polska annual report. Our detailed threat analysis was featured in the official yearly summary.
CERT Polska annual report
$68,000 awarded by Google. We were honored for discovering critical vulnerabilities in the Chrome browser.
CVE-2020-6463 · CVE-2019-13766
Recognised by a Splunk security strategist. Our attack scenario was featured by Splunk's global strategist as essential reading for blue teams.
Staff Picks for Splunk Security Reading
We deliver advanced technical consulting services covering multiple aspects of cybersecurity from red team to blue team. Thanks to a diverse experience in IT security we are able to look at a wider perspective during engagements. Our abilities come from many years of work experience in cybersecurity and are confirmed with certificates, publications, advisories and references from our customers.
Security testing of IT/OT/IoT/SCADA. Verification of security for both infrastructure and applications including web, mobile and client-server.
Real-life attack simulations starting from technical aspects, social engineering to physical security. We perform Advanced Persistent Threat (APT) simulations.
Audits covering broad scope, including procedures, software architecture, cloud security, smart contracts audits, source code audits and vulnerability assessment.
Searching for active cyber threats, proactive digital forensics aimed for detecting attackers in the organisation. Service delivered as a form of constant monitoring and as a last line of SOC.
Criminal forensics: securing digital evidence, analysing traces of activity, digital forensics, log analysis, events, RAM analysis. Additionally secure data removal.
Smart contract security assessment. Security testing of decentralized Web3 applications, wallets, exchanges, trading platforms and infrastructure. On-chain attacks and funds flow analysis
The company founders have a rich professional experience, additionally confirmed with certificates recognised worldwide, publicly presented research, references and thanks from known companies such us Google, Microsoft, Apple (references available upon request).
Chairman of the board and a co-founder of REDTEAM.PL. Has a wide professional experience both in offensive and defensive cybersecurity.
Board member and a co-founder of REDTEAM.PL. For many years focused on mostly offensive security research and having many accomplishments in the field.
Our team identified and responsibly disclosed multiple critical and high rated vulnerabilities in widely used global products. Acknowledgements for reported vulnerabilities have come from Adobe, Apple, BlackBerry, Deutsche Telekom, eBay, GitLab, Google, Harvard University, LastPass, Microsoft, Netflix, Nokia, Oracle, SoundCloud, VMware, Yahoo, Yandex and Zynga, among others:
