An attacker who gets into your network doesn’t stop at your website. They look for what they can reach from the inside: your servers, your Wi-Fi, your connected systems. An internal penetration test answers one question: how far would they get? RedDrop, our drop-and-go testing kit, lets you find out without disrupting your day-to-day.
What is RedDrop?
RedDrop is UpSystems’ penetration-testing lab in a box: a self-contained, pre-configured appliance in a rugged road case. On your end, all it needs is power and a network cable. Nothing to reconfigure, no deep access to grant upfront, no staff to tie up watching the test.
Once plugged in, RedDrop is operated remotely by our testers from UpSystems C2, our central management console built in-house. No technician needs to be parked at your office for the whole engagement.
The 5 steps of a RedDrop test
1. Scoping and written authorization. Together we define what will be tested, what won’t, the dates and who to contact if needed. Nothing starts without a signed contract: it’s the foundation of every legitimate penetration test, and what the NIST SP 800-115 reference framework recommends.
2. Deployment in minutes. We ship or drop off RedDrop at your premises. Power and a network cable, and it’s ready. No hours of setup.
3. The test, from the inside and remotely. Our testers assess your internal network and connected systems, plus your Wi-Fi when it’s in scope, the way a determined intruder would. They find the weaknesses, then confirm which ones can really be exploited, always within the authorized scope.
4. Kit removal. At the end of the engagement, RedDrop is unplugged and collected. Nothing stays installed on your network.
5. Report and debrief. You get a professional report: the vulnerabilities found, the real-world risk of each one, and prioritized recommendations to fix them.
Why drop-and-go makes the difference
- Less disruption. Your teams keep working; nobody has to escort a tester for days.
- More consistency. Every engagement uses the same standardized, pre-configured kit, so results are comparable from one year to the next.
- More speed. Deployment takes minutes, leaving more time for the test itself.
Who is it for?
RedDrop is built for organizations that need to prove and improve their security: government bodies, investment funds, professional firms, and any business that must demonstrate its security to a cyber insurer, a regulator or a client.
Filling out a cyber insurance questionnaire? See our guide: Cyber insurance questionnaire: how to answer without risking your claim.
The UpSystems advantage
RedDrop is an UpSystems Solutions Canada technology, based in Laval and serving businesses across Canada. It’s part of our penetration testing service. The price of a RedDrop engagement is set after our technical team reviews your environment, and every engagement ends with a clear report. See our penetration tests, steps and prices.
Frequently asked questions
Do I need to grant admin access before the test?
No. RedDrop only needs power and a network cable. Any access is agreed during scoping, never taken without authorization.
Does a technician have to stay on site during the test?
No. Once plugged in, RedDrop is operated remotely by our testers from our central management console.
Is it legal to test our own network?
Yes, when the test is authorized in writing by the organization that owns the network. Every RedDrop engagement runs under a signed contract that sets its scope.
What do I get at the end?
A professional report: the vulnerabilities found, the real-world risk of each one, and prioritized recommendations to fix them.