Authorized Operators Only

Adversarial Security
Testing Infrastructure

RedLab provides verified security professionals with API-driven red team tooling. Deploy on your own VPS. Run authorized campaigns. Report real risk.

Apply for Access Read the Docs
12+ Active Tools
KYC Verified Access
API First Design
Workflow

How RedLab Works

Three steps from access approval to running your first authorized campaign.

01

Apply & Verify

Submit your ID, company credentials, and engagement documentation. Our team reviews each application manually within 24–48 hours.

→
02

Deploy the Agent

Install the RedLab agent on your VPS with a single command. Configure your API key, Telegram, and domain in config.py.

→
03

Run Campaigns

Create campaigns via the dashboard or API. Our engines run on RedLab infrastructure — your VPS handles delivery and customization.

Tooling

Available Tools

Purpose-built for authorized red team engagements. Each tool is scoped, logged, and tied to your verified identity.

Soon

Microsoft 365 Simulation

OAuth-aware phishing simulations targeting M365 environments. Device code flow and consent phishing awareness training.

OAuth M365
Coming soon
Soon

Email Campaign Engine

Bulk phishing simulation mailer with tracking pixels, link click analytics, and full delivery reporting per engagement.

Email Tracking
Coming soon
Soon

Credential Awareness

Multi-platform credential awareness testing. Simulates common credential stuffing attack vectors against authorized targets.

Multi-platform Awareness
Coming soon
API First

Built for Operators

Every tool is accessible via a clean REST API. Your VPS agent handles delivery — RedLab handles the engine. Zero complex setup.

  • API key authentication
  • Real-time Telegram notifications
  • Campaign scoping and audit logs
  • VPS agent in 5 lines of config
Explore the API
config.py 
# RedLab Agent — config.py

REDLAB_API_URL = "https://api.redlab.io/v1"
REDLAB_API_KEY = "rl_your_key_here"

TELEGRAM_BOT_TOKEN = "your_bot_token"
TELEGRAM_CHAT_ID   = "your_chat_id"

DOMAIN       = "yoursite.com"
CF_API_TOKEN = "your_cf_token"
CF_ZONE_ID   = "your_zone_id"

Access is Gated & Verified

RedLab is not a public service. Every operator is verified before receiving access. We require government-issued ID, company documentation, and signed engagement authorization before any tool is enabled.

🪪
Government ID Identity verification for every operator
🏢
Company Docs Business registration or employer verification
📋
Engagement Authorization Signed authorization per campaign scope
Apply for Access