Does Redbot Security have to be onsite to test?

No. Redbot Security can test from a remote perspective, however many times with critical system testing Redbot Security will recommend onsite testing.