RedHunt Labs
A London-founded external attack surface and continuous threat exposure management platform used by Indian fintech and consumer tech firms.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
RedHunt Labs, founded in 2019 and headquartered in London with an engineering base in India, builds NVADR, a platform for continuous attack surface discovery, data leak detection, and third-party exposure monitoring. The product performs internet-wide asset enumeration to map an organization’s externally exposed infrastructure, cloud assets, and shadow IT, then layers on vulnerability scanning, dark-web/data-leak monitoring, and M&A risk assessment under a Continuous Threat Exposure Management (CTEM) framing.
The company is CREST-accredited for penetration testing and has built a customer base concentrated among Indian digital-economy firms, with CRED, Razorpay, Flipkart, Tekion, Observe.ai, and OLX appearing as customer logos on its site; testimonials come from Vedantu, Zee5, and Pratilipi. In February 2026, Razorpay named RedHunt Labs its external security partner for ongoing perimeter risk tracking, using the NVADR platform — the most concrete recent evidence of traction, though the announcement comes from RedHunt Labs’ own press release rather than an independent source. The company has not disclosed institutional VC funding; its growth to date appears to have been supported by participation in the NCSC-affiliated LORCA cyber accelerator and the Hanger 51 program, alongside an early angel round, rather than a priced venture round.
Its differentiator versus larger EASM incumbents (CyCognito, Censys, Detectify) is a tighter focus on the India/APAC digital-economy mid-market, bundling leak detection and cloud review into a single CTEM-branded package rather than selling ASM as a narrow point product.
Innovation Matrix Assessment
Steady feature additions (data-leak discovery, AI exposure monitoring, cloud review) over several years, but pace and scale are modest for a small, largely self-funded team.
Consolidates asset discovery, leak monitoring and cloud exposure review into one CTEM workflow, giving lean security teams a practical single pane for perimeter risk.
Real, named enterprise customers (Razorpay, CRED, Flipkart, Tekion) and a Feb 2026 Razorpay partnership are genuine signals, but momentum is regionally concentrated (India) with no disclosed institutional funding round.
Operates in a crowded EASM field already dominated by CyCognito, Censys, Detectify, Tenable and others; a capable regional player, not a category redefiner.
CREST accreditation for pentesting is independently verifiable, but efficacy claims like '50% MTTR reduction' and '80% more assets discovered' are vendor-reported, with no independent benchmark or named incident response found.
External attack surface visibility remains a durable, growing CISO need; the company's regional enterprise footprint suggests reasonable staying power over 3-5 years.
Why CISOs Should Care
Gives security teams in high-growth digital-economy companies continuous visibility into internet-facing assets and leaked credentials without building in-house scanning infrastructure.
What Makes It Different
Bundles CTEM-style exposure management, data-leak monitoring and M&A risk assessment with CREST-accredited pentesting under one roof, targeting the India/APAC fintech and consumer-tech mid-market specifically.
The Matrix Verdict
50/100 — INCREMENTAL INNOVATOR
Incremental tier: a credible, CREST-accredited regional ASM/CTEM vendor with genuine named enterprise customers, but it competes in a saturated category without disclosed institutional funding or independent efficacy evidence to justify a higher tier.
Editorial Note: Claims vs. Verified Findings
CREST accreditation and the Razorpay partnership are independently checkable; performance metrics (MTTR reduction, asset-discovery percentages) and 'ARR milestone' claims are self-reported by the company and not independently verified.
Sources
Alternatives to RedHunt Labs
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
Doppel
San Francisco AI-native digital risk protection platform that detects and automatically takes down phishing sites, impersonation accounts, and…