Crafted Compliance, Inc.

RedPenSec is a cybersecurity and compliance services firm headquartered in the United States. The organization provides security, risk and compliance services to clients in the United States and to international clients, as implied by client listings from multiple countries. The company’s activities include advisory work, technical assessments, managed security operations, and incident preparedness across public and private sector organizations.

Services and Capabilities

• Compliance assessment and advisory: delivery of compliance gap assessments, policy and control documentation, audit support and remediation planning for regulatory frameworks.
• Cloud security: cloud configuration reviews, architecture assessments, migration security guidance, and implementation of cloud security controls and monitoring.
• Penetration testing and vulnerability management: external and internal penetration tests, automated and manual vulnerability scanning, and vulnerability remediation planning.
• Risk advisory and management: enterprise risk assessments, risk register development, control identification, and risk treatment planning.
• Security operations and managed services: 24/7 security operations center (SOC) capabilities, managed detection and response, continuous monitoring, and incident response playbooks and execution.
• Business continuity and disaster recovery (BCDR) and intelligence: BCDR planning and exercises, backup and recovery validation, and open source intelligence (OSINT) for threat context.

Industry Focus

• Government and public sector: compliance assessments, advisory services for federal, state and local agencies and support for procurement and regulatory requirements.
• Financial services: security assessments, risk management and compliance support for banking and finance organizations.
• Healthcare and biotechnology: compliance, risk advisory and incident response planning related to sensitive data and operational continuity.
• Hospitality, entertainment and retail: network and application security assessments, managed security operations and incident readiness for hotels, parks and media publishers.
• Energy, manufacturing and transportation: operational technology and enterprise security assessments, vulnerability scanning and continuity planning.
• Education and non-profits: security assessments, advisory support and managed monitoring services tailored to institutional needs.