What Red Team is and when a company needs it
KEMEL.TECH · Updated
Red Team is a simulation of a real targeted attack on a company within pre-agreed boundaries: specialists try to gain access to a database, modify records and take a service down, including through phishing and social engineering. A pentest answers the question “are there vulnerabilities”, while Red Team shows “what an attacker can actually do”. At KEMEL.TECH, Red Team (KEMEL BREACH) takes 2–4 weeks and costs from 1,200,000 ₸.
How Red Team differs from a pentest
- A pentest finds and confirms vulnerabilities in specified systems.
- Red Team tests the whole chain: technology, people and processes, and shows the consequences.
- A pentest usually takes from 48 hours to 10 business days, Red Team — 2–4 weeks.
- The red team works within agreed boundaries and under a contract.
What the work includes
- Reconnaissance and finding an entry point.
- Database access and record modification (on an agreed test environment or with backups).
- Testing resilience to denial of service within agreed boundaries.
- Phishing and social engineering of employees.
- A report with the attack chain and recommendations.
When Red Team is needed
When basic security is already built, pentests are carried out regularly, and you need to check how the company withstands a targeted attack. For large personal data operators the law requires a security assessment, penetration testing and an independent audit, and Red Team adds a practical check.
Frequently asked questions
- Is it safe to run Red Team on production systems?
- Actions and boundaries are fixed in the contract in advance. Destructive scenarios are agreed separately and carried out only under agreed conditions.
- How much does Red Team cost?
- At KEMEL.TECH, Red Team (KEMEL BREACH) costs from 1,200,000 ₸; the final price depends on scope and is fixed in the contract.