About RTCS
Cybersecurity Built by Practitioners.
Red Threat Cyber Security (RTCS) combines offensive security, AI security, compliance readiness, managed security, and strategic advisory to deliver real-world protection for modern organizations.
Offensive Security
Attack simulation, penetration testing, red teaming, and threat emulation designed to expose real-world weaknesses.
AI Security
Securing AI models, datasets, agents, applications, and automation pipelines against emerging AI-driven risks.
Managed Security
Monitoring, detection, response, threat hunting, and security operations support for organizations that need continuous protection.
Compliance & Advisory
Governance, risk, compliance readiness, security architecture review, and strategic cybersecurity consulting.
Our Story
AI, Cybersecurity, and an Offensive Mindset
RTCS was created to combine the power of AI and cybersecurity to protect organizations in a rapidly evolving threat landscape. We did not want to build a traditional checklist-based cybersecurity company. We wanted to build a practitioner-led security brand that thinks like attackers, validates real risk, and delivers outcomes clients can act on.
Our philosophy is simple: AI gives speed, scale, and intelligent pattern recognition; offensive security gives realism, creativity, and adversarial thinking. By bringing both together, RTCS helps organizations identify weaknesses faster, strengthen defenses earlier, and build resilience against modern threats.
Our Journey
From First Clients to Global Cybersecurity Delivery
First International Clients
RTCS secured early international clients in the UAE and the USA, validating our remote-first delivery model.
Expansion Into Europe & Mexico
We expanded into European and Mexican markets, strengthening global delivery, reporting, and client coordination.
Freddie Mac Consultancy
Supported security consultancy work connected to Freddie Mac through a Hexaware-linked project.
Fannie Mae Consultancy
Continued enterprise security consultancy exposure through work connected to Fannie Mae via Hexaware.
Canada & Australia Growth
Expanded client reach into Canada and Australia, increasing our presence across North America and APAC.
First Vibe-Coded App Security
Secured our first fully vibe-coded application, validating fast AI-assisted development with practical security testing.
OT Security Added
Expanded into OT security for industrial, operational, legacy, and uptime-critical environments.
Sri Lankan Government Recon
Invited to conduct authorized external reconnaissance of Sri Lankan government-related infrastructure for exposed risks.
Simulation Platform
Building phishing and vishing simulation capabilities for enterprise awareness and human-risk resilience.
Our Mission
Securing Today. Protecting Tomorrow.
Our mission is to help organizations identify, understand, and reduce cybersecurity risk before attackers can exploit it. We combine offensive security, AI-driven insight, compliance awareness, and practical advisory to deliver security outcomes that are clear, actionable, and aligned with business priorities.
Our Vision
Building a Safer, Smarter Digital Future.
Our vision is to become a globally trusted cybersecurity group that helps organizations defend against modern threats through human expertise, AI-enabled security, responsible innovation, and practical execution.
Our Founders
Leadership Built Around Execution
Nadheera
Co-Founder & COO
Nadheera leads operations, strategy, governance, client engagement, and delivery coordination at RTCS. He brings experience across cybersecurity compliance, NIST-aligned practices, AI-led service execution, project leadership, and business operations.
His role connects technical delivery with business outcomes, ensuring clients receive clear remediation direction, executive visibility, and measurable security value.
Mel
Co-Founder & CTO
Mel leads RTCS’s technical direction across offensive security, AI security, cloud and infrastructure security, adversarial testing, and advanced research. He brings hands-on ethical hacking and engineering depth to every security methodology.
As CTO, Mel drives technical standards, research direction, and practical security execution so engagements are grounded in real-world attack behavior.
Parent Company
PlankSec Pvt Ltd is the registered Sri Lankan parent company of RTCS.
PlankSec is a registered company in Sri Lanka and provides group-level governance, operational backing, strategic direction, business infrastructure, and long-term support for Red Threat Cyber Security. RTCS operates as the specialist cybersecurity brand within the group, focused on offensive security, AI security, compliance readiness, managed security, OT security, incident response, and advisory.
The PlankSec structure supports RTCS with responsible business oversight, delivery coordination, partner management, and long-term growth planning while allowing RTCS to stay focused on practitioner-led cybersecurity execution for clients across global markets.
Our Team
A Multidisciplinary Team United by One Mission
RTCS is powered by cybersecurity practitioners, ethical hackers, engineers, AI researchers, analysts, consultants, and project leaders. We work across borders and time zones to deliver security outcomes that are clear, practical, and business-focused.
Proactive Security
We identify, validate, and reduce risks before attackers can turn them into incidents.
Attacker Mindset
We think like real adversaries to reveal hidden weaknesses and strengthen practical defenses.
Measurable Outcomes
We deliver clear evidence, remediation priorities, and reporting that helps leaders act.
Trusted Delivery
We operate with confidentiality, integrity, and long-term commitment to client success.
Locations
Global Reach, Sri Lankan Roots
HeadquartersSri Lanka
Headquarters / Global Delivery
- RTCS Headquarters
- 118, Wardcity Complex, Queen Mary's Rd, Gampaha, Sri Lanka
- Technical delivery, project coordination, and security operations support
European OperationsLatvia
European Coordination
- Regional operations
- Secure European client coordination
- Address not publicly disclosed for operational security
Sales PartnerUAE
Middle East Sales & Coordination
- Streamline X Data FZE
- Partner company for sales and coordination
- 1912-60, The Binary by Omniyat, Business Bay, Dubai, UAE
Protect today. Prepare for tomorrow.
Ready To
Secure
What
Matters?
Talk to our experts and build a security program that protects your people, data, applications, AI systems, and future.