In the News
Press Releases
RedSeal Expands Secure Access to Exposure Intelligence with Attribute-Based Control and AI Guidance
New capabilities enable organizations to extend exposure management insights beyond security teams while maintaining governance and accelerating decision-making
MENLO PARK, CA – [June 24, 2026] – RedSeal, the leader in exposure management for hybrid enterprise environments, today announced new Attribute-Based Access Control (ABAC) and AI Guidance capabilities within the RedSeal One platform.
These new capabilities enable […]
RedSeal Named “Zero Trust Network Access Solution of the Year” in 2024 CyberSecurity Breakthrough Awards Program
Prestigious Annual Awards Program Recognizes Outstanding Information Security Products and Companies Around the World
LOS ANGELES, Oct. 10, 2024 (GLOBE NEWSWIRE) — CyberSecurity Breakthrough, a leading independent market intelligence organization that recognizes the top companies, technologies and products in the global information security market, today announced that RedSeal, a pioneer in network exposure management, has been […]
RedSeal unveils support for third-party firewalls in public clouds, empowering enterprises to understand all attack paths to stop breaches
Seamlessly integrates with Next-Generation Firewalls from Palo Alto Networks, Cisco, Fortinet, and Check Point deployed in AWS and Azure clouds
Menlo Park, Calif., August 9, 2023 — RedSeal, a pioneer in cyber attack path management, announces support for third-party Next-Generation Firewalls (NGFWs) deployed in AWS, Azure and other clouds. With this capability, RedSeal continues […]
RedSeal Expands Secure Access to Exposure Intelligence with Attribute-Based Control and AI Guidance
/by Jane Paolucci, CMONew capabilities enable organizations to extend exposure management insights beyond security teams while maintaining governance and accelerating decision-making
MENLO PARK, CA – [June 24, 2026] – RedSeal, the leader in exposure management for hybrid enterprise environments, today announced new Attribute-Based Access Control (ABAC) and AI Guidance capabilities within the RedSeal One platform.
These new capabilities enable organizations to securely extend exposure management insights beyond specialized security teams to IT, cloud, compliance, operations, and executive stakeholders while maintaining the governance and control required in complex enterprise and government environments.
As attack surfaces continue to expand and security teams face increasing resource constraints, organizations need a way to make critical exposure intelligence available to more decision-makers without compromising security.
“Security teams are under increasing pressure managing complex environments, fewer specialists, and a growing number of threats,” said Joseph Ward, CEO of RedSeal. “Organizations need exposure intelligence to be accessible beyond a small group of experts while maintaining the governance and control enterprises require. These new capabilities make it easier for teams across the organization to understand risk, make informed decisions, and act faster.”
Making exposure intelligence accessible across the enterprise
Security operations increasingly rely on collaboration between security, IT, cloud, compliance, and business teams. Yet critical exposure intelligence often remains limited to a small group of administrators and security specialists.
RedSeal’s new capabilities help organizations safely expand access to exposure intelligence while providing users with contextual guidance that improves understanding and accelerates action.
Enterprise security and governance built in
RedSeal’s new Attribute-Based Access Control (ABAC) capabilities provide precise control over what information users can access based on role, responsibility, mission, or need-to-know requirements.
Organizations can securely share exposure intelligence with a broader audience while maintaining strict governance, compliance, and information access policies.
This capability is particularly valuable for federal agencies and highly regulated organizations that require granular access controls and information compartmentalization.
AI Guidance helps teams act with confidence
RedSeal’s new AI Guidance capabilities provide contextual explanations and recommendations that help users better understand exposures, attack paths, remediation options, security controls, and segmentation strategies within their own environments.
By combining AI-driven guidance with RedSeal’s digital twin and exposure intelligence, organizations can accelerate time-to-value, improve decision-making, and reduce dependence on scarce security expertise.
Advancing the future of exposure management
RedSeal believes exposure management should be accessible, actionable, and operational across the enterprise.
By combining exposure intelligence, contextual guidance, and secure access controls, RedSeal is helping organizations move beyond isolated security analysis and build a shared understanding of cyber risk across teams responsible for protecting the business.
ABAC and AI Guidance capabilities will be available as part of the RedSeal One platform beginning in June 2026.
For more information, visit RedSeal.net
About RedSeal
RedSeal is an AI-enabled exposure management platform that helps organizations reduce cyber risk across hybrid IT, cloud, OT, and remote environments. Using a continuously updated digital twin, RedSeal models assets, connections, attack paths, and security controls to uncover hidden exposures and validate real-world risk. By combining exploitability, business impact, and attack reachability through Risk Radius™, RedSeal helps security teams prioritize what matters most and accelerate remediation. Integrated with more than 2,000 third-party systems and devices, RedSeal transforms fragmented security data into actionable insight, enabling organizations to strengthen resilience, validate compliance, and proactively reduce exposure before threats become operational impact.
Visit www.redseal.net to learn more.
Patching Isn’t Enough: CISA’s FIRESTARTER Advisory and What It Means for Your Network
/by Wayne Lloyd, Federal CTO, RedSealCISA doesn’t issue Emergency Directives lightly. When ED 25-03 landed last week — mandating immediate action for federal agencies and urging all U.S. organizations to respond — it came with a warning that should stop every security leader cold:
Patching your Cisco ASA/FTD devices will not remove this threat.
FIRESTARTER is a persistent backdoor specifically engineered to survive firmware updates and device reboots. The nation-state APT behind it — UAT4356/Storm-1849, the same group responsible for the 2024 ArcaneDoor campaign — designed it to stay resident on your perimeter firewalls long after you think you’ve remediated. Once installed, it gives attackers persistent remote access and control of the most critical chokepoints in your network.
This is not a patch-and-move-on situation.
What Makes FIRESTARTER Different
Most vulnerabilities follow a predictable response arc: identify, patch, verify, close. FIRESTARTER breaks that arc at the last step.
Initial access was gained by chaining two zero-days — CVE-2025-20333 (a buffer overflow enabling remote code execution) and CVE-2025-20362 (a missing authorization flaw) — to fully take over vulnerable Cisco ASA and FTD devices. But the real danger isn’t the initial exploit. It’s what happens next.
Once FIRESTARTER is installed, it persists. Organizations that apply Cisco’s patches without first confirming the backdoor has been removed may believe they are clean while the attacker retains full access. Silently. Indefinitely.
And the target isn’t a workstation or a server. It’s your perimeter firewall — the device that controls everything entering and leaving your network.
The Pattern Every Security Leader Should Recognize
This is not the first time UAT4356 has done this. ArcaneDoor in 2024 targeted the same device category using different Cisco zero-days. Two years later, the same actor, the same target, a more sophisticated persistence mechanism.
Nation-state APTs are systematically targeting perimeter network infrastructure because these devices are high-value, under-monitored, and — when compromised — provide a persistent, trusted foothold for long-term espionage. FIRESTARTER won’t be the last campaign in this pattern.
The Questions You Need to Answer Right Now
If your organization runs Cisco ASA or FTD devices, five questions require immediate answers:
How quickly you can answer these questions determines how effectively you respond. For organizations without continuous network visibility, each of these questions could take days to answer. Days you don’t have.
How RedSeal Helps
RedSeal customers aren’t starting from scratch when an advisory like this lands. They already have a continuously updated digital twin of their entire hybrid network — every Cisco device, every version, every connection, every potential attack path.
With RedSeal, you can immediately identify every affected device, understand the blast radius of a potential compromise, validate that isolation measures are actually working, deploy custom checks based on CISA’s indicators of compromise, and verify — with evidence — that your remediation closed the door.
Not as a one-time audit. Continuously.
That’s the difference between reacting to FIRESTARTER and being prepared for whatever comes next.
Don’t Wait for the Next Directive
CISA issued this emergency directive because the threat is real and active right now. If you’re not sure how exposed you are — or you’re not confident your response is complete — let’s talk.
RedSeal can show you exactly what’s at risk in your environment and help you respond with confidence.
Schedule a conversation with our team
US Marshals Scramble to Shut Down Computer System
/by Jane Paolucci, CMOAudacy | May 1, 2023
Tune in to KCBS and hear Dr. Mike Lloyd, RedSeal’s CTO, share insights into double dip ransomware attacks, why segmentation matters, hardening your infrastructure and a quick perspective on the importance of Biden’s National Cyber Strategy.