pepperpot.media

What It Is

Pepperpot Media Limited is a company registered in the United Kingdom and led by Graham Leggett. It is not positioned as a conventional all-in-one cybersecurity platform, but rather as a company working around open-source security tools, especially the Redwax Project. Its official website states that the Redwax Project is a set of open-source security tools designed to make TLS certificates and PKI easier to use, with support for related tools such as Redwax Server, Redwax SignText, and Redwax Tool.

Core Capabilities and Analysis

In terms of protection scope, Pepperpot Media is more focused on certificates, PKI, and system security configuration assistance, rather than firewalls, EDR, WAF, or cloud security platforms. Redwax’s main value lies in lowering the barrier to using TLS certificates and PKI, making it suitable for technical teams that need to handle certificate issuance, signing, trust chains, or related automation. As for deployment, the available site content only describes these as open-source security tools and does not provide details on SaaS, self-hosted, containerized, or managed-service options. System Verify is still under development; its initial target is Windows, where it is intended to check whether a machine meets the requirements for using secure systems. Enterprise-grade capabilities such as management and alerting, compliance certifications, and audit reporting are not disclosed.

Pricing and Support

The text captured from the official website does not include formal pricing, subscription plans, enterprise support, or SLA information. The example table prices shown on the page are clearly template elements and should not be treated as product pricing. The only contact channel disclosed is the email address hello at pepperpot dot media, so support capabilities, response times, and commercial support models all need to be confirmed directly.

Pros and Cons

The main advantage is its focused direction: it provides open-source tools around TLS/PKI, a core security infrastructure pain point, with potential for auditability and secondary integration. The company’s address and contact information are also relatively transparent. The drawbacks are that the official website contains limited effective product information and lacks deployment documentation, feature lists, compliance details, customer cases, and evidence of maturity. System Verify is still in development, so its real-world usability remains unknown.

Who It Is For and Access from China

It is better suited to system administrators, security engineers, and development teams with PKI, certificate management, or open-source security tooling expertise. It is less suitable for small and midsize businesses looking for an out-of-the-box product with a complete console and alerting system. Access from mainland China, payment methods, and localized support are not disclosed in the available content, so actual network reachability needs to be tested. If alternatives are needed, tools such as Smallstep, EJBCA, Keyfactor, HashiCorp Vault PKI, or OpenSSL may be worth evaluating.