Classic penetration test
1 ×
annual time window · manual effort
- Snapshot instead of trend view
- Hard to reproduce between audits
- Findings go stale between tests
In development
Validate security continuously. AI-orchestrated.
RedMentis makes security testing more repeatable and reveals attack paths in context, as a complement to classic penetration tests.
·THE PROBLEM
Classic pentests are point-in-time snapshots.
One audit per year, then 11 months of flying blind in between. RedMentis aims to close that gap, without replacing the classic pentest.
AI-orchestrated validation
∞
repeatable · isolated · automated
- Continuous validation over time
- Reproducible with the same scope
- Path analysis instead of isolated findings
·THE PLATFORM IN ACTION
From the daily SOC alert to the board report in one interface.
RedMentis combines operational security, the management view and offensive testing in one platform, with clearly separated roles and a shared data foundation.
·ROADMAP
Two main phases. One initiative.
RedMentis is built in two successive phases, with a clear focus on pilot readiness before expansion.
Phase 1
In active development
AI-assisted penetration testing
Pilot version for AI-orchestrated, repeatable security validation, focused on network & Active Directory as well as web/API.
- Decision engine & path modeling
- Test orchestration & reporting pipeline
- First test modules: network · AD · web/API
Phase 2
In conception
Cyber Defense Lab & security research
Building an isolated research and lab environment for attack patterns, detection engineering and security research.
- Mobile testing module
- Detection engineering channels
- Research partnerships & pilot setups
Technical roadmap in detail
- Foundation & governanceScope, security and compliance requirements, lab setup.
- AI core & orchestrationDecision logic, path modeling, test orchestration.
- Extended test modulesNetwork & Active Directory, web/API, reporting pipeline.
- Mobile testing & optimizationExtension for mobile applications, performance, stability.
- Enterprise hardening & pilot-customer readinessRoles, audit logs, integration, pilot setups.
·HOW IT WORKS
AI-orchestrated validation, step by step.
An AI-assisted decision logic models possible attack paths, evaluates intermediate results and prioritizes risks in context.
01Scope & environment
Defined scope, isolated test environment, clear rules of engagement.
02Path modeling
AI-assisted modeling of possible attack paths across identities, configurations and interfaces.
03Controlled validation
Tests run repeatably in an isolated environment. Intermediate results are evaluated and prioritized.
04Two-level reporting
Technical findings with remediation, management reports with clear context.
·SECURITY FRAMEWORK
The entire process runs under two non-negotiable rules:
- →Role-based access. Every action is tied to a role, every access is logged.
- →Compliance mapping. Findings are mapped to ISO 27001, NIS-2 and the EU AI Act, so audit requirements are met directly.
Get to know RedMentis.
We're happy to talk about pilot setups, research partnerships or initial use-case assessments, aligned with the current stage of development.