Red Kite Solutions Inc. Due Diligence

Run due diligence on Red Kite Solutions Inc.: check compliance and get alerts when suppliers or ownership change.

Canada · owned by Independent (Canada) · red-kite.io · 7 vendors

Red Kite Solutions Inc. is a Canadian cybersecurity company specializing in External Attack Surface Management (EASM). Their platform provides full visibility into internet-facing assets, delivers actionable risk insights, and automates reconnaissance workflows for MSSPs, MSPs, and enterprises. The core product is open-source and emphasizes transparency, allowing users to audit, inspect, and customize all scanning logic and test cases.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-09 · revision 3

7 direct vendors, 111 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

7 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

Evidence: https://red-kite.io, https://red-kite.io/enterprise, https://github.com/red-kite-solutions/stalker, https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services

Québec Law 25 — No public evidence

Evidence: https://red-kite.io, https://red-kite.io/about-us, http://www.legisquebec.gouv.qc.ca/en/document/cs/P-39.1, https://www.cai.gouv.qc.ca/en/, https://www.quebec.ca/en/government/policies-orientations/digital-transformation/act-respecting-protection-of-personal-information

CSE — No public evidence

Evidence: https://red-kite.io, https://www.cyber.gc.ca/en/, https://www.cyber.gc.ca/en/guidance/baseline-cyber-security-controls-small-and-medium-organizations

Financials

Three-year financials

Financial Resilience Score: 3/10

Red Kite Solutions is a pre-disclosure, early-stage private Québec cybersecurity startup in the External Attack Surface Management (EASM) segment. There is insufficient public financial information to compute revenue, profitability, or equity metrics, or to model YoY growth. As a private Canadian corporation, it is not required to file public financial statements, and no funding rounds, grants, or audited financials could be verified. Despite the financial opacity, the company shows several qualitative strengths: backing from credible ecosystem partners (Propolys, CyberEco, PME MTL, Rogers Cybersecure Catalyst), founder domain expertise (co-founder Simon Lacasse holds OSCP, OSWE, OSEP certifications and has worked in major Canadian banks), an open-source flywheel with the Stalker product (88 GitHub stars, 7 forks), and a defined multi-tier SaaS commercial model (Free trial, Managed Services at $415/month base + $50/project, Enterprise custom). However, the risks are substantial: very small team (likely single-digit to low-double-digit employees), key-person concentration on two founders, zero external financial validation, a crowded competitive market dominated by well-funded incumbents (CrowdStrike, Palo Alto, Microsoft, Censys, Rapid7), and potential open-source cannibalization risk from GPL-3.0 licensing. The resilience score reflects the early-stage nature and absence of any financial safety net that can be verified externally.

Key strengths: Backed by credible ecosystem partners (Propolys, CyberEco, PME MTL, Rogers Cybersecure Catalyst), Founder domain expertise with elite offensive security certifications (OSCP, OSWE, OSEP), Open-source Stalker product with 88 GitHub stars and 7 forks providing developer traction, Defined multi-tier SaaS commercial model (Free/Managed Services/Enterprise), Bilingual (English/French) positioning for Canadian and francophone markets

Risk factors: Zero public disclosure of revenue, cash runway, funding raised, or burn rate, Early-stage scale with very small team and limited ARR, Key-person concentration risk with only two publicly identified founders, Highly competitive EASM market dominated by well-funded incumbents (CrowdStrike, Palo Alto, Microsoft, Censys, Rapid7), Open-source cannibalization risk from GPL-3.0 licensing of core product, No external validation of financial resilience for counterparties

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report