Product1 publisher2 min readPublished
RemoteThreat pitches enterprise red teams a platform so they stop building their own tools
RemoteThreat launched with $7 million to sell enterprise red teams and U.S. government mission teams one platform for running offensive cyber operations. It is pitched as a way for expert operators to skip building their own tool chains.
The Product Desk · Product desk
What happened
- Defense technology company Talon Defense is integrating the platform's components into systems it already fields, and the company says the parts also run inside other partners' products.
- The chief executive, Chris Thompson, founded IBM's first dedicated red team and later ran its X-Force Red offensive-testing unit.
- Retired Army Gen. Paul Nakasone, who led the National Security Agency and U.S. Cyber Command, is advising the startup through The Nakasone Group.
- The launch follows an Aug. 12 presidential memorandum directing a program for vetted U.S. companies to run cyber operations against foreign cybercriminal groups.
- Osage University Partners and DataTribe co-led the pre-seed round.
Compiled by The Product DeskSomething wrong?How this is made
Why it matters
- decision Buying the platform means a red team depends on one vendor across the whole operation, instead of the bespoke tool chain it built and controlled.
- constraint Because RemoteThreat sells only to qualified enterprise, government and vetted defense customers, a red team lead cannot simply buy in; clearance and procurement decide access before the software does.
- precedent If the Senate's fiscal 2027 trial program becomes law and lets vetted firms hold access to adversary networks under U.S. Cyber Command authority, a packaged commercial platform is a ready route into work once run inside government.
RemoteThreat calls the O/C/O Platform the first commercial end-to-end platform for offensive cyber operations [2]. Its chief executive describes what the product removes in plainer terms. Chris Thompson said experienced operators lose too much time "assembling tools and building integrations" on top of the work of planning an operation and adapting to a changing network [5]. His complaint is about time lost to integration. The operators this is built for already know how to run the operation; what they buy is the days spent connecting tools.
Eight connected systems, from mission planning through AI-assisted operation, sit inside the platform, and the company built it for expert human operators with custom AI models included [3][4]. Shawn Jones, the co-founder and chief technology officer, drew a line against the obvious substitute. "The answer is not another black-box, automated penetration testing tool that removes the operator," Jones said [6].
Enterprise and critical-infrastructure red teams use the software to emulate sophisticated adversaries, and the same product lets U.S. government mission teams run operations of their own [8]. The people behind it come from Mandiant, SpecterOps and Microsoft, and the company says its team has run red-team engagements against nuclear power plants, critical infrastructure providers and some of the world's largest banks [9]. RemoteThreat has also joined a U.S. Special Operations Command acquisition consortium to supply offensive cyber capabilities [10].
Jones put the demand side plainly: "Internal red teams are being asked to model adversaries whose capabilities change faster than the tools used to emulate them" [7]. Whether to buy comes down to where a red team's scarce hours go.
What to watch
- Whether the Senate's fiscal 2027 trial program for private cyber operations survives into the enacted defense bill.
- Which defense vendors beyond Talon Defense embed RemoteThreat's components rather than building their own.
- Whether RemoteThreat publishes pricing or keeps the platform behind case-by-case vetting.