Redis is designed to be run on a network that is secured behind an enterprise-grade firewall. That being said, Redis does come with features designed to help you tighten up security. It is important to remember that not using those security features, as well as doing things like exposing Redis IP addresses to the internet is dangerous and can have disastrous consequences.

Salvatore Sanfilippo caused quite a stir in November 2015, when he detailed a 5-minute hack^[12] that demonstrated how to compromise SSH on a Linux server via an unsecured Redis instance. While Redis' security tools are robust, care needs to be taken to ensure that the server on which it runs is locked down and not exposed to the internet. Additionally, you can (and should) try to enable things such as protected mode and requirepass authentication.