RedLine Pentesting is a Canadian cybersecurity consultancy focused on helping small and medium-sized organizations better understand and reduce their cybersecurity risk.
We aim to make cybersecurity straightforward through using a three-step process:
Identify weaknesses
Communicate their potential business impact
Provide remediation guidance and, where appropriate, retesting to verify that the issues have been addressed.
Our assessments rely on manual testing to go beyond automated tools and identify weaknesses that may otherwise be overlooked.
Our goal isn't simply to find vulnerabilities, but to help organizations understand what they mean and how to address them.
Founder & Offensive Security Consultant
Yousaf Imtiaz specializes in penetration testing with a focus on network and Active Directory testing. He holds several industry-recognized certifications, including the OffSec Experienced Penetration Tester (OSEP), OffSec Certified Professional (OSCP), and Practical Network Penetration Tester (PNPT).
Beyond penetration testing, Yousaf is actively involved in the cybersecurity community through public speaking as an OffSec Ambassador and has been recognized by OffSec as a Community Companion for his contributions to knowledge sharing. He also develops tools and public resources to support those preparing for cybersecurity certifications.
Penetration Tester
Hamza has over 3 years of experience in web application, API, mobile, network, and Active Directory security testing. He holds several professional certifications such as the Practical Network Penetration Tester (PNPT), Practical Web Pentest Professional (PWPP), and Practical Web Pentest Expert (PWPE).
Hamza conducts both black-box and gray-box assessments of web applications, REST APIs, Android applications, and LLM-integrated systems alongside delivering client-ready reports with clear proof-of-concepts and practical remediation guidance.
Threat Researcher
Ahmed Khan is a cybersecurity and machine learning researcher with a background in security operations and software engineering. His work focuses on applying transformer-based models to security problems, particularly the analysis and classification of command-line activity.
He developed Genos, a command intelligence system that classifies commands and maps malicious behavior to the MITRE ATT&CK framework. This work resulted in two first-author papers accepted to the Institute of Electrical and Electronics Engineers World Forum on Internet of Things and Artificial Intelligence of Things 2026. His research interests include machine learning, cybersecurity, language models, and practical AI systems.
Full Stack Engineer
Zaid Alam is a Full Stack Developer with 3+ years of experience building scalable, high-performance web applications using React, Node.js, Python, and AWS.
Zaid is proficient in both frontend and backend development, with expertise in RESTful APIs, Microservices architecture, and database management (SQL and NoSQL). He is also experienced in CI/CD pipelines with Jenkins, version control using Git, and deploying applications in cloud environments.