Home

redStackPRO

Visual composition for red team infrastructure and cyber ranges.

redStackPRO is a web canvas where you build infrastructure as a topology, then export a complete, runnable working directory of Terraform and Ansible. You run it from your own machine. redStackPRO never holds your cloud credentials.

It is a validation range for TTPs and tooling at production-operations level. It is a place to practice for real operations, not a course to learn them. The shipped labs come with their solutions, because those are operator validation references.

Status

Pre-release. The topology schema is still moving. The pipeline works end to end: a topology compiles to Terraform and Ansible, and the export deploys.

• GCP and AWS are the supported providers, tested end to end for both target ranges and attack infrastructure.
• Azure, Proxmox and ESXi are on the roadmap. See Providers.

Start here

• Getting Started to install and build your first topology.
• Concepts for the canvas, the topology, and the export-only model.
• Deploying a Range for the deploy flow and where your credentials stay.
• Providers for the support matrix.
• Labs for the shipped ranges.
• Redirectors and Cover Stories for the attack side.
• Validation for the findings the canvas raises.
• Automation and Agents to drive redStackPRO from code or an agent.
• FAQ for common questions.

Two ways to run

docker compose up                    # http://127.0.0.1:8000

Or from source with Python 3.11+ and Node 24. See Getting Started.

License

MIT. The GOAD range templates are derived from GOAD and carry GPLv3. A devZero Security LLC project.