Practitioner-led. Based in Tirana.
We built Red Team Albania to close the gap between checkbox compliance and genuine adversarial testing in a region underserved by serious offensive security capability.
The practitioners behind the work.
Every engagement at RTA is run by the people below, no outsourcing, no junior analysts doing senior work under a brand name.

Orgito Leka
Orgito is a security researcher and co-founder of Red Team Albania, working across vulnerability research, CVE analysis, penetration testing, and reverse engineering, with contributions to open-source security tooling.
His current research focuses on the security of agentic AI infrastructure - specifically Model Context Protocol (MCP) deployments in enterprise environments, covering governance, audit logging, and IT-controlled rollouts.
Beyond client work, he is an active competitor in national and international CTF competitions and organizes hands-on cybersecurity workshops for students and early-career practitioners in Albania - the foundation of what became the RTA Academy.
Read the full storyHighlights
- 1st Place - National Cybersecurity Marathon (Albania)
- Active CTF competitor - national and European qualifiers
- Published research on MCP enterprise security governance
- Organizer of community cybersecurity workshops in Tirana
Speaking
Investigating Remote Code Execution Risks in React & Next.js
Balkan Cybersecurity Days 2026 · DCAF - Geneva Centre for Security Sector Governance
17-19 March 2026
Shkoder, Albania
Regional cyber defense strategies panel
Western Balkan Cyber Camp · National Cyber Security Authority (AKSK)
May 2026
Durres, Albania
Open-source ecosystems & secure Linux deployment
Fedora Install Party - 42 Tirana · 42 Tirana
November 12, 2025
Tirana, Albania
Certifications & Training
Cisco Networking Academy
- - Ethical Hacker
- - Network Defense
- - Cyber Threat Management
- - Endpoint Security
- - Network Support and Security
IBM SkillsBuild
- - Cybersecurity Fundamentals
- - Enterprise Security in Practice
- - Security Operations Center in Practice
- - Artificial Intelligence Fundamentals
Additional training platforms
Mateos Xhukellari
Mateos builds and maintains the systems behind Red Team Albania - the engagement platform, the intelligence tooling, and the internal automation that keeps reporting consistent across every assessment.
His work sits at the point where engineering meets offensive security: designing APIs and data pipelines that the team can trust, hardening the services RTA runs itself, and turning repetitive operator tasks into tooling so practitioners spend their time on analysis rather than paperwork.
He also supports the technical infrastructure behind the RTA Academy, including the platforms used to host training environments and Capture The Flag events.
Highlights
- Builds and maintains the RTA engagement and reporting platform
- Designs the backend for RTA intelligence tooling and CVE tracking
- Owns infrastructure and deployment for Academy training and CTF environments
- Develops internal automation supporting operator workflows

Alki Leka
Alki is a co-founder of Red Team Albania, focused on the security of hardware and embedded systems - the layer most assessments never touch.
His work covers firmware extraction and reverse engineering, IoT and embedded device security, hardware interface analysis (JTAG/UART/SPI), and physical attack paths into otherwise well-defended environments.
He works alongside the rest of the team to bring a hardware perspective into engagements where the network is hardened but the device sitting on it was never reviewed.
Highlights
- Leads hardware and embedded systems security at RTA
- Firmware extraction, reverse engineering, and embedded exploitation
- Hardware interface and physical attack surface analysis
- Contributes hardware-security modules to the RTA Academy curriculum
Ready to see what a real operator would find?
Share the environment and the decision you need to make. We will respond with a scope, a timeline, and a direct answer about whether the work is worth doing now.
Structured scopes, clear reporting, and no hidden account layer.
Every engagement follows a defined sequence from scoping to retest.
A cinematic surface that still feels serious and restrained.
Requests go straight to the operators who would run the work.