Human–agent offensive security

Your agents.
Your judgement.
One workspace.

Work the assessment together.

RedTalon brings you and specialist AI agents into the same offensive-security workspace. Investigate in parallel. Step in to validate. Keep the evidence.

Self-hosted platformBYO AI access

Inside RedTalonActual product · Assessment workspace
RedTalon assessment workspace: specialist agents, live activity, and coverage evidenceView full size

More investigative paths. Your direction.

Follow specialist agents as they pursue separate leads. Add context, redirect attention, and stay close to the decisions that matter.

Built for the scope in front of you.

  • Web applications
  • APIs
  • Source-assisted testing
  • Internal networks
  • Vulnerability research

The operator stays in the loop

Delegate the work.
Keep the judgement.

Let agents take on expansive, repetitive investigation. Keep experienced testers focused on the leads worth pursuing and the evidence worth trusting.

Follow more than one lead.

Specialist agents investigate in parallel within an assessment. Guide the team as the target reveals what needs attention.

Agent teams · Live activity · Operator direction

Validate without losing context.

Step directly into the Docker sandbox. Browser, terminal, proxy, processes, and callback sessions belong to the same working environment.

Co-op tooling · Shared desktop · Caido

Leave with a traceable record.

Review evidence-backed findings and finalise professional reports in Markdown, SARIF, self-contained HTML, PDF or editable Word.

Evidence · Findings · Professional reports
Set the scope. Choose the depth.

Start with your target, context, and rules of engagement. Stay involved throughout the assessment.

QuickStandardDeepCTFRetest

Remediation verification

Retest the finding.
Preserve the record.

Import a previous RedTalon full-report Markdown. Each finding begins Untested, is verified as Remediated or Outstanding, and retains its original record with fresh evidence and assessment appended.

Explore Retest

Professional reporting

Final reports for people
and downstream tools.

Finalise evidence-backed reports in Markdown, SARIF, self-contained HTML, PDF and editable Word (.docx), without separating the deliverable from the investigation that produced it.

Explore reporting

One live operational environment

Go hands-on beside
the agent team.

RedTalon keeps the practical testing surface together. Open the shared desktop, work in a live co-op shell, and retain control of processes, listeners, and callback sessions.

RedTalon shared XFCE co-op desktop running inside the live assessment sandbox Open full size
01Shared co-op desktop

Take over the retained XFCE environment and use the installed offensive-security tooling directly, with the same workspace and target network as the agents.

Interactive RedTalon co-op terminal connected to the active assessment sandbox Open full size
02Live co-op terminal

Validate a hypothesis in the same container while the agent team continues its work.

RedTalon managed sessions view showing terminal processes and callback listeners Open full size
03Sessions and listeners

Keep shells, background jobs, and callbacks visible and controllable across the assessment.

Deployment on your terms

Your infrastructure.
Your AI.
Your assessment data.

Targets, prompts, evidence, artifacts and findings remain in your RedTalon environment and are not sent to RedSec through the licensing service.

Your chosen AI provider or private endpoint receives assessment context according to your configuration.

Understand the data flow

Your infrastructure

RedTalonOperators + agent teams
Assessment sandboxesBrowser · terminal · proxy
Assessment recordEvidence · findings · reports
Compatible private AI endpointOptional · within your environment
Your configured model connection
Your approved AI providerYour credentials · your choice
Separate RedTalon licensing service

Account, entitlement, instance/version, run-authorisation, release/download and security metadata required to operate access.

Assessment data stays separate.

RedSec’s commercial services process the account and licensing metadata needed to operate the subscription and distribute RedTalon—not the customer’s targets, prompts, evidence, artifacts or findings.

Founding Early Access

Same RedTalon.
Different scale.

The complete platform in both plans. Choose your assessment allowance, deployment scale, and level of support.

40%
Early Access savingApproximately 40% below
planned standard pricing

All prices in AUD. Bring your own AI access.

For individual practitioners

Practitioner

Professional tooling.
A smaller operational footprint.

Early Access price

A$149/month

Planned standard A$249/month

Monthly billing

Request Practitioner Access
  • 10 assessment runs per month
  • 1 installed RedTalon instance
  • Complete RedTalon platform
  • Multi-user deployment
  • BYO AI provider
  • Standard support
  • Updates and release access

For a tailored deployment

Custom / Enterprise

Your infrastructure.
Your operational requirements.

Built around your requirements

Custom pricing

Let’s scope it together.
Talk to us
  • Higher assessment-run requirements
  • More deployed instances
  • Complex or private infrastructure
  • Private networks and AI environments
  • Tailored deployment planning
  • Commercial and support requirements

Early Access is arranged directly with our team. No payment is taken on this site. Annual pricing saves approximately 17% versus 12 monthly payments; assessment allowances remain monthly.

Full capability comes standard.

Functionally the same product. Runs, instances, and support set the plans apart.

Practitioner and Team: shared functionality and commercial allowances
Included in your planPractitionerTeam
Core platform & agent teamsIncludedIncluded
Co-op browser, terminal & desktopIncludedIncluded
Evidence, findings & reportsIncludedIncluded
BYO cloud or compatible private AIIncludedIncluded
Multi-user deploymentIncludedIncluded
Assessment runs / month1050
Installed instances1Up to 5
SupportStandardPriority

Before you get started

Good questions.
Straight answers.

Talk to the RedTalon team
Is RedTalon a vulnerability scanner?

RedTalon is an offensive-security workspace for operators and AI agents. Agents can investigate autonomously, while you follow their activity, guide the assessment, and use the same operational environment for hands-on validation.

Which AI providers can we use?

Bring your organisation’s approved provider access, including supported OpenAI and Anthropic models, or configure a compatible private or self-hosted endpoint. RedTalon supplies the platform; you bring the AI.

Where does assessment data go?

Targets, prompts, evidence, artifacts and findings remain in your RedTalon environment and are not sent to RedSec through the licensing service. Your chosen AI provider or private endpoint receives assessment context according to your configuration. RedSec separately processes the commercial and licensing metadata required to operate access and distribute the software.

What changes between Practitioner and Team?

Both include the complete core product, including agent teams, co-op tooling, findings, reports, and BYO AI. Practitioner includes 10 runs per month, one installed instance, and standard support. Team includes 50 runs per month, up to five installed instances, and priority support.

What counts as an assessment run?

A new authorised assessment consumes one run from your allowance. Specialist agents working within that assessment do not each consume a separate run. Annual plans retain a monthly run allowance; they do not provide all twelve months of runs upfront.

Can several testers use RedTalon?

Yes. RedTalon supports multiple users and roles, shared run history, and per-user co-op browser and terminal access. Multiple assessments can run concurrently, subject to the resources available on the deployment host and the plan’s commercial run allowance.

Can it test private or internal targets?

Yes, where your deployment can reach the authorised target. Run-scoped OpenVPN and WireGuard connections support private network access. We can discuss deployment and connectivity requirements for your environment.

Can you conduct a one-off assessment for us?

Yes. An experienced offensive-security practitioner can direct an operator-assisted RedTalon assessment. Scope, suitability, deliverables, and price are agreed with you before the engagement. An ongoing software subscription is not required.

Can we purchase online, and what follows Early Access?

Access is currently arranged directly with the RedTalon team. Request access to discuss suitability and commercial terms; this site does not accept payments. Early Access provides access before standard commercial release and an opportunity to shape early development. Planned standard prices are shown for transparency.

Let’s work the next assessment together

Your next move
starts here.

Tell us how you test and where you want to take it. We’ll discuss the right fit for your team, infrastructure, or one-off assessment.

A direct line to the team building it.

  • Access before standard commercial release
  • Approximately 40% below planned standard pricing
  • A voice in early commercial development

An enquiry starts a conversation.
No payment or commitment to purchase.

Let’s find your fit.

Required fields are marked with an asterisk.

General enquiry · Let’s explore your requirements.

A high-level outline is enough. Please leave credentials and sensitive target details out of this form.