{"id":3297,"date":"2026-07-20T17:09:33","date_gmt":"2026-07-20T17:09:33","guid":{"rendered":"https:\/\/mscyber.tech\/?p=3297"},"modified":"2026-07-20T17:13:00","modified_gmt":"2026-07-20T17:13:00","slug":"pentest-vs-red-team","status":"publish","type":"post","link":"https:\/\/mscyber.tech\/pt\/pentest-vs-red-team\/","title":{"rendered":"Pentest vs. Red Team: Diferen\u00e7as e Quando Usar | Mercurius"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"3297\" class=\"elementor elementor-3297\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7b90f3a e-flex e-con-boxed e-con e-parent\" data-id=\"7b90f3a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2603d8a elementor-widget elementor-widget-text-editor\" data-id=\"2603d8a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Um pentest e um engajamento de Red Team s\u00e3o ambos exerc\u00edcios de seguran\u00e7a ofensiva, mas respondem a perguntas diferentes. Um pentest encontra e comprova o maior n\u00famero poss\u00edvel de vulnerabilidades explor\u00e1veis dentro de um escopo e prazo definidos. Um Red Team simula um advers\u00e1rio real e persistente que busca um objetivo espec\u00edfico, sem avisar a equipe de defesa, a fim de testar n\u00e3o apenas a tecnologia, mas tamb\u00e9m as pessoas e os processos de detec\u00e7\u00e3o e resposta da organiza\u00e7\u00e3o. Em resumo, um pentest mede o qu\u00e3o vulner\u00e1vel voc\u00ea est\u00e1, e um Red Team mede o qu\u00e3o bem voc\u00ea detectaria e responderia a um ataque real.<\/p><p class=\"isSelectedEnd\">Este artigo explica o que diferencia os dois, quando cada um \u00e9 a escolha certa e como eles se encaixam \u00e0 medida que a maturidade de seguran\u00e7a de uma organiza\u00e7\u00e3o cresce. Se voc\u00ea ainda est\u00e1 decidindo sobre seu primeiro teste ofensivo, comece com o guia fundamental sobre <a href=\"https:\/\/mscyber.tech\/pt\/blog\/o-que-e-um-pentest\/\">O que \u00e9 um pentest<\/a> e ent\u00e3o volte aqui para escolher o exerc\u00edcio certo.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ea9594 elementor-widget elementor-widget-heading\" data-id=\"5ea9594\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">A resposta curta<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1cad4e7 elementor-widget elementor-widget-text-editor\" data-id=\"1cad4e7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Se voc\u00ea precisa encontrar e corrigir vulnerabilidades em um conjunto de sistemas, execute um pentest. Se voc\u00ea j\u00e1 tem uma equipe de seguran\u00e7a e quer saber se eles pegariam um invasor real, execute um Red Team. Um pentest se trata da amplitude de vulnerabilidades. Um Red Team se trata da profundidade em dire\u00e7\u00e3o a um objetivo e da qualidade da sua detec\u00e7\u00e3o.<\/p><p>A maioria das organiza\u00e7\u00f5es n\u00e3o est\u00e1 pronta para uma Equipe Vermelha no primeiro dia. Uma Equipe Vermelha s\u00f3 produz valor quando existe uma capacidade de defesa para testar. Enviar uma Equipe Vermelha contra uma organiza\u00e7\u00e3o sem monitoramento \u00e9 como testar um alarme de inc\u00eandio em um pr\u00e9dio que n\u00e3o possui nenhum. Voc\u00ea j\u00e1 sabe a resposta.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ef5d0b elementor-widget elementor-widget-heading\" data-id=\"8ef5d0b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">O que \u00e9 um pentest<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-276bc79 elementor-widget elementor-widget-text-editor\" data-id=\"276bc79\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Um pentest (teste de intrus\u00e3o) \u00e9 uma avalia\u00e7\u00e3o autorizada e com escopo definido, na qual especialistas exploram vulnerabilidades para comprovar sua exist\u00eancia e medir seu impacto. Ele segue metodologias formais como PTES, OWASP e NIST SP 800-115, e normalmente abrange um conjunto definido de alvos: uma aplica\u00e7\u00e3o, um per\u00edmetro externo, uma rede interna. A equipe de defesa geralmente sabe que o teste est\u00e1 ocorrendo, pois o objetivo \u00e9 cobertura e evid\u00eancia, n\u00e3o discri\u00e7\u00e3o.<\/p><p>O entreg\u00e1vel \u00e9 um relat\u00f3rio que lista cada descoberta com prova de explora\u00e7\u00e3o, uma classifica\u00e7\u00e3o de severidade e um caminho de remedia\u00e7\u00e3o priorizado. A an\u00e1lise completa dos tipos, fases e pre\u00e7os est\u00e1 em <a href=\"https:\/\/mscyber.tech\/pt\/blog\/o-que-e-um-pentest\/\">Guia completo de pentest<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3cf3ef0 elementor-widget elementor-widget-heading\" data-id=\"3cf3ef0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">O que \u00e9 um engajamento de Red Team<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c40f8ea elementor-widget elementor-widget-text-editor\" data-id=\"c40f8ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Um engajamento de Red Team \u00e9 uma simula\u00e7\u00e3o baseada em objetivos de um advers\u00e1rio real, executada por um per\u00edodo mais longo, utilizando toda a cadeia de ataque que um agente de amea\u00e7as genu\u00edno empregaria. Em vez de listar todas as vulnerabilidades, a Red Team escolhe uma meta que \u00e9 importante para o neg\u00f3cio, por exemplo, acessar um banco de dados espec\u00edfico, obter acesso de administrador de dom\u00ednio ou exfiltrar uma amostra de dados confidenciais, e trabalha para alcan\u00e7\u00e1-la por quaisquer meios realistas.<\/p><p>Isso significa que a Equipe Vermelha combina t\u00e9cnicas que um pentest padr\u00e3o geralmente deixa de fora: furtividade e evas\u00e3o para contornar o EDR e o SOC, engenharia social e phishing contra funcion\u00e1rios e, \u00e0s vezes, tentativas de acesso f\u00edsico. Os engajamentos s\u00e3o mapeados para o comportamento real do advers\u00e1rio usando o framework MITRE ATT&amp;CK, e os mais avan\u00e7ados s\u00e3o liderados por amea\u00e7as, o que significa que o cen\u00e1rio \u00e9 constru\u00eddo a partir de intelig\u00eancia sobre os atores de amea\u00e7as reais que visam o setor da organiza\u00e7\u00e3o. Frameworks regulamentados como TIBER-EU e CBEST formalizam essa abordagem liderada por amea\u00e7as para o setor financeiro.<\/p><p>Crucialmente, a equipe de defesa (a equipe azul) n\u00e3o \u00e9 avisada. O objetivo \u00e9 medir a detec\u00e7\u00e3o e a resposta reais, n\u00e3o testar a tecnologia no v\u00e1cuo.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10b5b1c elementor-widget elementor-widget-heading\" data-id=\"10b5b1c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Pentest vs Red Team: as principais diferen\u00e7as<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b079613 elementor-widget elementor-widget-text-editor\" data-id=\"b079613\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"FirstParagraph\"><span lang=\"EN-US\">Os dois exerc\u00edcios diferem em quase todas as dimens\u00f5es: seu objetivo, escopo, dura\u00e7\u00e3o e at\u00e9 mesmo quem dentro da organiza\u00e7\u00e3o sabe que eles est\u00e3o acontecendo.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d2ff144 ha-comparison-alignment-left elementor-widget elementor-widget-ha-comparison-table happy-addon ha-comparison-table\" data-id=\"d2ff144\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-comparison-table.default\">\n\t\t\t\t\t\n\t\t<div class=\"ha-comparison-table-wrapper\">\n\t\t\t<div class=\"ha-comparison-table__head\" data-sticky-header=\"no\">\n\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__head-item elementor-repeater-item-f207115 icon-left\">\n\t\t\t\t\t\t\n\t\t\t\t\t\t<!--  -->\n\t\t\t\t\t\t<div class=\"ha-comparison-table__head-column-cell-title\">\n\t\t\t\t\t\t\t<h6 class=\"ha-comparison-table__head-column-cell-title-tag\">Dimens\u00e3o<\/h6>\t\t\t\t\t\t\t<div class=\"ha-comparison-table__head-column-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<!--  -->\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__head-item elementor-repeater-item-b620c01 icon-left\">\n\t\t\t\t\t\t\n\t\t\t\t\t\t<!--  -->\n\t\t\t\t\t\t<div class=\"ha-comparison-table__head-column-cell-title\">\n\t\t\t\t\t\t\t<h6 class=\"ha-comparison-table__head-column-cell-title-tag\">Pentest<\/h6>\t\t\t\t\t\t\t<div class=\"ha-comparison-table__head-column-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<!--  -->\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__head-item elementor-repeater-item-6eefc77 icon-left\">\n\t\t\t\t\t\t\n\t\t\t\t\t\t<!--  -->\n\t\t\t\t\t\t<div class=\"ha-comparison-table__head-column-cell-title\">\n\t\t\t\t\t\t\t<h6 class=\"ha-comparison-table__head-column-cell-title-tag\">Equipe vermelha<\/h6>\t\t\t\t\t\t\t<div class=\"ha-comparison-table__head-column-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<!--  -->\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<div class=\"ha-comparison-table__row\">\n\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-0ac2b0c elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tObjetivo principal\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-c913ba6 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tEncontrar e provar vulnerabilidades\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-57e38b6 elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tTeste de detec\u00e7\u00e3o e resposta contra um ataque realista\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-825e8a2 elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tEscopo\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-b6f2c93 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tDefinido e rigoroso (alvos espec\u00edficos)\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-a4b303e elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tAmplo e baseado em objetivos (um objetivo, n\u00e3o uma lista de metas)\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-c8bc97f elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tConscientiza\u00e7\u00e3o da equipe de defesa\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-10eaf77 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tGeralmente ciente\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-e62736f elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tN\u00e3o avisado\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-62fef8b elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tAbordagem\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-eeb1f43 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tAmplitude em muitas vulnerabilidades\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-639e1b3 elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tProfundidade em dire\u00e7\u00e3o a um \u00fanico objetivo\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-f212026 elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tT\u00e9cnicas\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-42c1052 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tExplora\u00e7\u00e3o de falhas t\u00e9cnicas\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-ffd45c1 elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tCadeia completa de ataque: furtividade, evas\u00e3o, engenharia social, \u00e0s vezes f\u00edsica\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-1556e5c elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tDura\u00e7\u00e3o t\u00edpica\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-427ca79 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tDias a algumas semanas\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-6883d21 elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tV\u00e1rias semanas a alguns meses\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-0c60a64 elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tM\u00e9trica de sucesso\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-1a02c16 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tN\u00famero e gravidade das constata\u00e7\u00f5es\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-7a22c21 elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tSe o objetivo foi alcan\u00e7ado e como a equipe azul respondeu\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-e236ecb elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tMaturidade exigida\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-53f6f08 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tQualquer organiza\u00e7\u00e3o\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-8762250 elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tUm programa maduro com monitoramento ativo\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-97bc764 elementor-repeater-item-f207115-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tEstruturas de refer\u00eancia\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-c9ee624 elementor-repeater-item-b620c01-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tPTES, OWASP, NIST SP 800-115\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell elementor-repeater-item-0f13763 elementor-repeater-item-6eefc77-sub\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-title\">\n\t\t\t\t\t\t\t\tMITRE ATT&amp;CK, TIBER-EU, CBEST, intelig\u00eancia de amea\u00e7as\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"ha-comparison-table__row-item-cell-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t<div class=\"ha-comparison-table__btns\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8663f1e elementor-widget elementor-widget-text-editor\" data-id=\"8663f1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>A linha mais importante nesta tabela \u00e9 maturidade necess\u00e1ria. \u00c9 o fator que decide qual exerc\u00edcio realmente lhe trar\u00e1 retorno.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c907b31 elementor-widget elementor-widget-heading\" data-id=\"c907b31\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Quando usar um pentest<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b3d3d92 elementor-widget elementor-widget-text-editor\" data-id=\"b3d3d92\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Escolha um pentest quando o objetivo \u00e9 encontrar, provar e corrigir vulnerabilidades em sistemas espec\u00edficos. \u00c9 o exerc\u00edcio certo nas seguintes situa\u00e7\u00f5es:<\/p><ol><li>Voc\u00ea est\u00e1 lan\u00e7ando ou atualizando pesadamente um aplicativo e precisa valid\u00e1-lo antes que ele entre em produ\u00e7\u00e3o.<\/li><li>Um contrato, auditoria ou regulamenta\u00e7\u00e3o (PCI-DSS, ISO 27001) exige evid\u00eancias de testes regulares.<\/li><li>Voc\u00ea migrou para a nuvem ou alterou a arquitetura de rede e precisa confirmar a nova exposi\u00e7\u00e3o.<\/li><li>Voc\u00ea est\u00e1 construindo seu programa de seguran\u00e7a e precisa de uma linha de base do seu risco t\u00e9cnico.<\/li><li>Voc\u00ea deseja cobertura ampla de um per\u00edmetro ou de uma aplica\u00e7\u00e3o dentro de um or\u00e7amento e prazo previs\u00edveis.<\/li><\/ol><p>\u00a0<\/p><p>Para a maioria das empresas, um pentest \u00e9 o ponto de partida correto e o exerc\u00edcio recorrente que mant\u00e9m o risco t\u00e9cnico sob controle.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7946e58 elementor-widget elementor-widget-heading\" data-id=\"7946e58\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Quando usar uma Red Team<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9fc2583 elementor-widget elementor-widget-text-editor\" data-id=\"9fc2583\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Escolha uma Equipe Vermelha quando o objetivo \u00e9 testar se sua organiza\u00e7\u00e3o consegue detectar e responder a um ataque real. Isso faz sentido quando:<\/p><ol><li>Voc\u00ea j\u00e1 opera um SOC ou possui monitoramento, EDR e um processo de resposta a incidentes para testar.<\/li><li>Seus pentests amadureceram e consistentemente retornam poucas descobertas cr\u00edticas, ent\u00e3o voc\u00ea precisa que uma pergunta mais dif\u00edcil seja respondida.<\/li><li>A lideran\u00e7a quer saber a resili\u00eancia real da organiza\u00e7\u00e3o no mundo, e n\u00e3o apenas uma contagem de vulnerabilidades.<\/li><li>Voc\u00ea opera em um setor de alto valor (financeiro, infraestrutura cr\u00edtica) onde a simula\u00e7\u00e3o realista de advers\u00e1rios \u00e9 esperada ou regulamentada.<\/li><li>Voc\u00ea quer treinar e medir a blue team sob press\u00e3o realista.<\/li><\/ol><p>\u00a0<\/p><p>Se seu monitoramento ainda n\u00e3o estiver implementado, o or\u00e7amento para uma Equipe Vermelha \u00e9 melhor gasto primeiro em um pentest e na constru\u00e7\u00e3o de detec\u00e7\u00e3o. A Equipe Vermelha, ent\u00e3o, mede o qu\u00e3o bem esse investimento funciona.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-635b18c elementor-widget elementor-widget-heading\" data-id=\"635b18c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Voc\u00ea precisa de ambos? Onde o purple teaming se encaixa<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-804cc92 elementor-widget elementor-widget-text-editor\" data-id=\"804cc92\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Para um programa de seguran\u00e7a maduro, a resposta geralmente \u00e9 ambos, em sequ\u00eancia e em diferentes cad\u00eancias. Pentests s\u00e3o executados regularmente para manter vulnerabilidades t\u00e9cnicas sob controle, enquanto um engajamento de Red Team \u00e9 executado com menos frequ\u00eancia para validar a detec\u00e7\u00e3o e a resposta como um todo.<\/p><p>Existe tamb\u00e9m um terceiro modo que vale a pena conhecer: o time roxo. Em um exerc\u00edcio de time roxo, a equipe ofensiva (vermelha) e a equipe defensiva (azul) trabalham juntas em tempo real, com a equipe vermelha executando t\u00e9cnicas enquanto a equipe azul observa, ajusta a detec\u00e7\u00e3o e fecha lacunas no local. \u00c9 a maneira mais r\u00e1pida de transformar as descobertas de uma equipe vermelha em defesas aprimoradas, e muitas vezes \u00e9 o pr\u00f3ximo passo natural ap\u00f3s um primeiro engajamento da equipe vermelha revelar lacunas de detec\u00e7\u00e3o.<\/p><p>Uma progress\u00e3o saud\u00e1vel para a maioria das organiza\u00e7\u00f5es se parece com isso: comece com pentests para construir uma linha de base, adicione gerenciamento cont\u00ednuo de vulnerabilidades, introduza uma Equipe Vermelha quando o monitoramento existir e use o purple teaming para refinar a detec\u00e7\u00e3o com base no que a Equipe Vermelha encontra.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-388d362 elementor-widget elementor-widget-heading\" data-id=\"388d362\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Voc\u00ea precisa de ambos? Onde o purple teaming se encaixa<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-529afca elementor-widget elementor-widget-text-editor\" data-id=\"529afca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>A Mercurius opera ambos os exerc\u00edcios com uma mentalidade ofensiva real, conduzida por engenheiros certificados (OSCP, CRTO, entre outras credenciais) que pensam como o atacante para proteger como um estrategista. No lado do pentest, o foco \u00e9 comprovar riscos explor\u00e1veis com profundidade e entregar um relat\u00f3rio no qual o conselho possa agir. No lado da Red Team, os engajamentos s\u00e3o orientados por amea\u00e7as e mapeados para o MITRE ATT&amp;CK, utilizando ferramentas personalizadas e infraestrutura de comando e controle para emular os advers\u00e1rios que realmente visam o setor do cliente.<\/p><p>O princ\u00edpio orientador \u00e9 recomendar o exerc\u00edcio que se encaixa na maturidade da organiza\u00e7\u00e3o, nunca vender uma Red Team para uma empresa que primeiro precisa de um pentest. Conhe\u00e7a o servi\u00e7o de pentest e seguran\u00e7a ofensiva e o servi\u00e7o de Red Team e, caso n\u00e3o tenha certeza de qual se encaixa na sua fase, essa conversa \u00e9 o lugar certo para come\u00e7ar.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1f01ca9 elementor-widget elementor-widget-heading\" data-id=\"1f01ca9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Veja sua rede como um atacante faria \u2014 antes que ele o fa\u00e7a!<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f68b31a elementor-widget elementor-widget-text-editor\" data-id=\"f68b31a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>A Mercurius realiza testes de Red Team com lideran\u00e7a manual, testes de penetra\u00e7\u00e3o e avalia\u00e7\u00f5es de nuvem que n\u00e3o apenas listam vulnerabilidades, mas provam o caminho exato que um advers\u00e1rio seguiria para chegar aos seus ativos mais valiosos e como fech\u00e1-lo.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-887a49d elementor-widget elementor-widget-html\" data-id=\"887a49d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<!-- ===========================================================\r\n     MERCURIUS \u2014 Attack Path Widget (standalone \/ Elementor-ready)\r\n     Paste this whole block into an Elementor \"HTML\" widget.\r\n     All CSS is scoped under .ms-apath-wrap to avoid theme conflicts.\r\n     The trace animation runs on the published page (it may not\r\n     preview inside the Elementor editor).\r\n     =========================================================== -->\r\n<div class=\"ms-apath-wrap\">\r\n  <div class=\"ms-apath-card\">\r\n    <div class=\"ms-apath-head\">\r\n      <span class=\"ms-apath-title\">Caminho de Ataque \u2192 Joias da Coroa<\/span>\r\n      <span class=\"ms-apath-tag\">TIME VERMELHO<\/span>\r\n    <\/div>\r\n\r\n    <svg class=\"ms-apath-svg\" viewbox=\"0 0 540 320\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" role=\"img\"\r\n         aria-label=\"Caminho de ataque ilustrativo: Reconhecimento Externo at\u00e9 Joias da Coroa\">\r\n      <!-- connecting path -->\r\n      <path class=\"ms-apath-line\" d=\"M64 44 C 116 44, 116 104, 158 104 S 210 166, 256 166 S 314 228, 346 228 S 402 290, 430 290\"\/>\r\n\r\n      <!-- node 1 -->\r\n      <g class=\"ms-apath-node ms-apath-n1\">\r\n        <circle class=\"ms-apath-ring\" cx=\"64\" cy=\"44\" r=\"9.5\"\/>\r\n        <circle class=\"ms-apath-core\" cx=\"64\" cy=\"44\" r=\"3.5\"\/>\r\n        <text class=\"ms-apath-lbl\" x=\"86\" y=\"41\">Reconhecimento Externo<\/text>\r\n        <text class=\"ms-apath-sub\" x=\"86\" y=\"55\">TA0043 \u00b7 Ativo exposto<\/text>\r\n      <\/g>\r\n      <!-- node 2 -->\r\n      <g class=\"ms-apath-node ms-apath-n2\">\r\n        <circle class=\"ms-apath-ring\" cx=\"158\" cy=\"104\" r=\"9.5\"\/>\r\n        <circle class=\"ms-apath-core\" cx=\"158\" cy=\"104\" r=\"3.5\"\/>\r\n        <text class=\"ms-apath-lbl\" x=\"180\" y=\"101\">Acesso Inicial<\/text>\r\n        <text class=\"ms-apath-sub\" x=\"180\" y=\"115\">TA0001 \u00b7 Explora\u00e7\u00e3o da Web<\/text>\r\n      <\/g>\r\n      <!-- node 3 -->\r\n      <g class=\"ms-apath-node ms-apath-n3\">\r\n        <circle class=\"ms-apath-ring\" cx=\"256\" cy=\"166\" r=\"9.5\"\/>\r\n        <circle class=\"ms-apath-core\" cx=\"256\" cy=\"166\" r=\"3.5\"\/>\r\n        <text class=\"ms-apath-lbl\" x=\"278\" y=\"163\">Escalonamento Priv.<\/text>\r\n        <text class=\"ms-apath-sub\" x=\"278\" y=\"177\">TA0004 \u00b7 configura\u00e7\u00e3o incorreta<\/text>\r\n      <\/g>\r\n      <!-- node 4 -->\r\n      <g class=\"ms-apath-node ms-apath-n4\">\r\n        <circle class=\"ms-apath-ring\" cx=\"346\" cy=\"228\" r=\"9.5\"\/>\r\n        <circle class=\"ms-apath-core\" cx=\"346\" cy=\"228\" r=\"3.5\"\/>\r\n        <text class=\"ms-apath-lbl\" x=\"368\" y=\"225\">Movimento lateral<\/text>\r\n        <text class=\"ms-apath-sub\" x=\"368\" y=\"239\">TA0008 \u00b7 reutiliza\u00e7\u00e3o de cr\u00e9ditos<\/text>\r\n      <\/g>\r\n      <!-- node 5 (objective) -->\r\n      <g class=\"ms-apath-node ms-apath-n5 ms-apath-final\">\r\n        <circle class=\"ms-apath-pulse\" cx=\"430\" cy=\"290\" r=\"14\"\/>\r\n        <circle class=\"ms-apath-ring\" cx=\"430\" cy=\"290\" r=\"11\"\/>\r\n        <circle class=\"ms-apath-core ms-apath-core-obj\" cx=\"430\" cy=\"290\" r=\"4\"\/>\r\n        <text class=\"ms-apath-lbl ms-apath-lbl-obj\" x=\"346\" y=\"294\">Joias da Coroa<\/text>\r\n      <\/g>\r\n    <\/svg>\r\n\r\n    <div class=\"ms-apath-foot\">\r\n      <span>5 passos \u00b7 0 alertas acionados<\/span>\r\n      <span class=\"ms-apath-obj\">\u25cf objetivo alcan\u00e7ado<\/span>\r\n    <\/div>\r\n  <\/div>\r\n<\/div>\r\n\r\n<style>\r\n  .ms-apath-wrap{\r\n    --ms-ink:#161614; --ms-cyan:#5CDAF5; --ms-orange:#FF9A3A;\r\n    --ms-line:rgba(255,255,255,.09); --ms-line2:rgba(255,255,255,.14);\r\n    --ms-mono:'JetBrains Mono',ui-monospace,'SFMono-Regular',Menlo,Consolas,monospace;\r\n    width:100%; max-width:540px; margin:0 auto; box-sizing:border-box;\r\n  }\r\n  .ms-apath-wrap *{box-sizing:border-box}\r\n  .ms-apath-card{\r\n    background:linear-gradient(165deg,#16161d,#101015);\r\n    border:1px solid var(--ms-line2); border-radius:16px;\r\n    padding:22px 22px 18px; box-shadow:0 30px 70px rgba(0,0,0,.5);\r\n  }\r\n  .ms-apath-head{display:flex;align-items:center;justify-content:space-between;margin-bottom:4px}\r\n  .ms-apath-title{font-family:var(--ms-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:#cfd2da}\r\n  .ms-apath-tag{font-family:var(--ms-mono);font-size:11px;color:var(--ms-orange);\r\n    border:1px solid rgba(255,154,58,.4);border-radius:5px;padding:3px 8px}\r\n  .ms-apath-svg{width:100%;height:auto;display:block;overflow:visible}\r\n\r\n  .ms-apath-lbl{font-family:var(--ms-mono);font-size:11px;fill:#d6d8e0}\r\n  .ms-apath-sub{font-family:var(--ms-mono);font-size:9px;fill:#8a8e98;letter-spacing:.02em}\r\n  .ms-apath-lbl-obj{fill:var(--ms-orange)}\r\n  .ms-apath-ring{fill:#13131a;stroke:var(--ms-cyan);stroke-width:2}\r\n  .ms-apath-core{fill:var(--ms-cyan)}\r\n  .ms-apath-core-obj{fill:var(--ms-orange)}\r\n  .ms-apath-final .ms-apath-ring{stroke:var(--ms-orange)}\r\n\r\n  \/* static by default; animation classes added when in view *\/\r\n  .ms-apath-line{fill:none;stroke:var(--ms-cyan);stroke-width:2;stroke-linecap:round}\r\n  .ms-apath-node{transform-box:fill-box;transform-origin:center}\r\n\r\n  .ms-apath-wrap.ms-go .ms-apath-line{\r\n    stroke-dasharray:560;stroke-dashoffset:560;\r\n    animation:ms-apath-trace 3.4s ease-in-out .2s forwards;\r\n  }\r\n  .ms-apath-wrap.ms-go .ms-apath-node{opacity:0;animation:ms-apath-pop .5s ease forwards}\r\n  .ms-apath-wrap.ms-go .ms-apath-n1{animation-delay:.3s}\r\n  .ms-apath-wrap.ms-go .ms-apath-n2{animation-delay:.95s}\r\n  .ms-apath-wrap.ms-go .ms-apath-n3{animation-delay:1.6s}\r\n  .ms-apath-wrap.ms-go .ms-apath-n4{animation-delay:2.25s}\r\n  .ms-apath-wrap.ms-go .ms-apath-n5{animation-delay:2.9s}\r\n  .ms-apath-wrap.ms-go .ms-apath-pulse{\r\n    fill:none;stroke:var(--ms-orange);stroke-width:2;\r\n    animation:ms-apath-ping 2s ease-out 3s infinite;\r\n  }\r\n  .ms-apath-pulse{fill:none;stroke:none}\r\n\r\n  @keyframes ms-apath-trace{to{stroke-dashoffset:0}}\r\n  @keyframes ms-apath-pop{from{opacity:0;transform:scale(.6)}to{opacity:1;transform:scale(1)}}\r\n  @keyframes ms-apath-ping{0%{r:12;opacity:.7}100%{r:30;opacity:0}}\r\n\r\n  .ms-apath-foot{display:flex;align-items:center;justify-content:space-between;\r\n    margin-top:14px;padding-top:13px;border-top:1px solid var(--ms-line);\r\n    font-family:var(--ms-mono);font-size:11px;color:#6f727a}\r\n  .ms-apath-obj{color:var(--ms-orange)}\r\n\r\n  @media (prefers-reduced-motion:reduce){\r\n    .ms-apath-wrap.ms-go .ms-apath-line{animation:none;stroke-dashoffset:0}\r\n    .ms-apath-wrap.ms-go .ms-apath-node{animation:none;opacity:1}\r\n    .ms-apath-wrap.ms-go .ms-apath-pulse{animation:none}\r\n  }\r\n<\/style>\r\n\r\n<script>\r\n(function(){\r\n  var wrap = document.currentScript && document.currentScript.previousElementSibling\r\n    ? document.querySelector('.ms-apath-wrap') : document.querySelector('.ms-apath-wrap');\r\n  if(!wrap || wrap.dataset.msInit) return;        \/\/ guard against double init\r\n  wrap.dataset.msInit = '1';\r\n  var fire = function(){ wrap.classList.add('ms-go'); };\r\n  if('IntersectionObserver' in window){\r\n    var io = new IntersectionObserver(function(es){\r\n      es.forEach(function(e){ if(e.isIntersecting){ fire(); io.disconnect(); } });\r\n    }, {threshold:.35});\r\n    io.observe(wrap);\r\n  } else {\r\n    fire();                                        \/\/ fallback: just play\r\n  }\r\n})();\r\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a614bb8 elementor-widget elementor-widget-heading\" data-id=\"a614bb8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Saiba mais sobre o servi\u00e7o de pentest e seguran\u00e7a ofensiva da Mercurius<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-055dd3a elementor-button-info elementor-align-justify animated-fast elementor-invisible elementor-widget elementor-widget-button\" data-id=\"055dd3a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;headShake&quot;}\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/mscyber.tech\/pt\/seguranca-ofensiva\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Saiba mais<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bb7b591 elementor-widget elementor-widget-heading\" data-id=\"bb7b591\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Perguntas frequentes<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e34777d elementor-widget elementor-widget-text-editor\" data-id=\"e34777d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>Um Red Team \u00e9 apenas um pentest mais avan\u00e7ado?<\/strong> N\u00e3o. Eles respondem a perguntas diferentes. Um pentest mede quantas vulnerabilidades explor\u00e1veis existem em um escopo definido. Uma Red Team mede se sua organiza\u00e7\u00e3o detectaria e responderia a um atacante real perseguindo um objetivo. Um trata da amplitude de vulnerabilidades, o outro da profundidade e detec\u00e7\u00e3o.<\/p><p><strong>Com qual a minha empresa deve come\u00e7ar?<\/strong> Quase sempre um pentest. Uma Red Team s\u00f3 agrega valor quando existe uma capacidade de detec\u00e7\u00e3o e resposta para testar. Se voc\u00ea ainda n\u00e3o possui monitoramento ou um SOC, invista primeiro em um pentest e na constru\u00e7\u00e3o da detec\u00e7\u00e3o, depois traga uma Red Team para validar isso.<\/p><p><strong>A equipe de defesa sabe que um Red Team est\u00e1 acontecendo?<\/strong> N\u00e3o. O objetivo de uma Red Team \u00e9 medir a detec\u00e7\u00e3o e resposta real, ent\u00e3o a blue team n\u00e3o \u00e9 avisada. Apenas um pequeno grupo de patrocinadores dentro da organiza\u00e7\u00e3o sabe, para manter o exerc\u00edcio seguro e autorizado. Em um pentest, por outro lado, a equipe de defesa geralmente est\u00e1 ciente.<\/p><p><strong>Quanto tempo leva cada exerc\u00edcio?<\/strong> Um pentest geralmente dura de alguns dias a algumas semanas, dependendo do escopo. Um engajamento de Red Team dura mais tempo, geralmente de v\u00e1rias semanas a alguns meses, porque a furtividade, a reconhecimento e o trabalho em dire\u00e7\u00e3o a um objetivo levam tempo.<\/p><p><strong>O que \u00e9 uma equipe roxa?<\/strong> Um exerc\u00edcio de time roxo tem a equipe ofensiva e a equipe defensiva trabalhando juntas em tempo real, de modo que as lacunas de detec\u00e7\u00e3o s\u00e3o encontradas e corrigidas imediatamente. \u00c9 a maneira mais r\u00e1pida de converter os achados de um Time Vermelho em defesas mais fortes, e frequentemente segue um engajamento inicial de Time Vermelho.<\/p><p><strong>Um fornecedor pode fazer ambos?<\/strong> Sim, e h\u00e1 uma vantagem nisso. Um fornecedor que realiza seus pentests entende seu ambiente, o que torna um Red Team posterior mais realista e eficiente. O essencial \u00e9 que o fornecedor recomende o exerc\u00edcio que se encaixa em sua maturidade, em vez de optar pelo mais caro.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Diferen\u00e7a entre pentest e red team, quando usar red team, red team vs teste de penetra\u00e7\u00e3o, avalia\u00e7\u00e3o de red team<\/p>","protected":false},"author":5,"featured_media":3300,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,22],"tags":[],"class_list":["post-3297","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-leadership","category-offensive-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Pentest vs Red Team: Differences and When to Use | Mercurius - Mercurius Cybersecurity<\/title>\n<meta name=\"description\" content=\"difference between pentest and red team, when to use red team, red team vs penetration testing, red team assessment\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mscyber.tech\/pt\/pentest-vs-red-team\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pentest vs Red Team: Differences and When to Use | Mercurius - Mercurius Cybersecurity\" \/>\n<meta property=\"og:description\" content=\"difference between pentest and red team, when to use red team, red team vs penetration testing, red team assessment\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mscyber.tech\/pt\/pentest-vs-red-team\/\" \/>\n<meta property=\"og:site_name\" content=\"Mercurius Cybersecurity\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-20T17:09:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-20T17:13:00+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/mscyber.tech\/wp-content\/uploads\/2026\/07\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"kaue.simoes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"kaue.simoes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/\"},\"author\":{\"name\":\"kaue.simoes\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#\\\/schema\\\/person\\\/2e057da44c0b9c841b3b8acba1459547\"},\"headline\":\"Pentest vs Red Team: Differences and When to Use | Mercurius\",\"datePublished\":\"2026-07-20T17:09:33+00:00\",\"dateModified\":\"2026-07-20T17:13:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/\"},\"wordCount\":1768,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mscyber.tech\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg\",\"articleSection\":[\"Cyber Leadership\",\"Offensive Security\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/\",\"url\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/\",\"name\":\"Pentest vs Red Team: Differences and When to Use | Mercurius - Mercurius Cybersecurity\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mscyber.tech\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg\",\"datePublished\":\"2026-07-20T17:09:33+00:00\",\"dateModified\":\"2026-07-20T17:13:00+00:00\",\"description\":\"difference between pentest and red team, when to use red team, red team vs penetration testing, red team assessment\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#primaryimage\",\"url\":\"https:\\\/\\\/mscyber.tech\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg\",\"contentUrl\":\"https:\\\/\\\/mscyber.tech\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg\",\"width\":600,\"height\":450,\"caption\":\"Comparison between a pentest and a Red Team engagement\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/pentest-vs-red-team\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mscyber.tech\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pentest vs Red Team: Differences and When to Use | Mercurius\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#website\",\"url\":\"https:\\\/\\\/mscyber.tech\\\/\",\"name\":\"Mercurius Cybersecurity\",\"description\":\"AI-Driven Cyber resilience for critical organizations\",\"publisher\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mscyber.tech\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#organization\",\"name\":\"Mercurius Cybersecurity\",\"url\":\"https:\\\/\\\/mscyber.tech\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mscyber.tech\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/MERCURIUS-LOGO-Light-Color-2.svg\",\"contentUrl\":\"https:\\\/\\\/mscyber.tech\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/MERCURIUS-LOGO-Light-Color-2.svg\",\"width\":289,\"height\":48,\"caption\":\"Mercurius Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mscyber.tech\\\/#\\\/schema\\\/person\\\/2e057da44c0b9c841b3b8acba1459547\",\"name\":\"kaue.simoes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/63c12ac971cb2964499a31feebfd9948fa35f6fa184fe2c25d8444b67112460a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/63c12ac971cb2964499a31feebfd9948fa35f6fa184fe2c25d8444b67112460a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/63c12ac971cb2964499a31feebfd9948fa35f6fa184fe2c25d8444b67112460a?s=96&d=mm&r=g\",\"caption\":\"kaue.simoes\"},\"url\":\"https:\\\/\\\/mscyber.tech\\\/pt\\\/author\\\/kaue-simoes\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pentest vs. Red Team: Diferen\u00e7as e Quando Usar | Mercurius - Mercurius Cybersecurity","description":"diferen\u00e7a entre pentest e red team, quando usar red team, red team vs penetration testing, red team assessment","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mscyber.tech\/pt\/pentest-vs-red-team\/","og_locale":"pt_BR","og_type":"article","og_title":"Pentest vs Red Team: Differences and When to Use | Mercurius - Mercurius Cybersecurity","og_description":"difference between pentest and red team, when to use red team, red team vs penetration testing, red team assessment","og_url":"https:\/\/mscyber.tech\/pt\/pentest-vs-red-team\/","og_site_name":"Mercurius Cybersecurity","article_published_time":"2026-07-20T17:09:33+00:00","article_modified_time":"2026-07-20T17:13:00+00:00","og_image":[{"width":600,"height":450,"url":"http:\/\/mscyber.tech\/wp-content\/uploads\/2026\/07\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg","type":"image\/jpeg"}],"author":"kaue.simoes","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"kaue.simoes","Est. tempo de leitura":"9 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/#article","isPartOf":{"@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/"},"author":{"name":"kaue.simoes","@id":"https:\/\/mscyber.tech\/#\/schema\/person\/2e057da44c0b9c841b3b8acba1459547"},"headline":"Pentest vs Red Team: Differences and When to Use | Mercurius","datePublished":"2026-07-20T17:09:33+00:00","dateModified":"2026-07-20T17:13:00+00:00","mainEntityOfPage":{"@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/"},"wordCount":1768,"commentCount":0,"publisher":{"@id":"https:\/\/mscyber.tech\/#organization"},"image":{"@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/#primaryimage"},"thumbnailUrl":"https:\/\/mscyber.tech\/wp-content\/uploads\/2026\/07\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg","articleSection":["Cyber Leadership","Offensive Security"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/mscyber.tech\/pentest-vs-red-team\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/","url":"https:\/\/mscyber.tech\/pentest-vs-red-team\/","name":"Pentest vs. Red Team: Diferen\u00e7as e Quando Usar | Mercurius - Mercurius Cybersecurity","isPartOf":{"@id":"https:\/\/mscyber.tech\/#website"},"primaryImageOfPage":{"@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/#primaryimage"},"image":{"@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/#primaryimage"},"thumbnailUrl":"https:\/\/mscyber.tech\/wp-content\/uploads\/2026\/07\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg","datePublished":"2026-07-20T17:09:33+00:00","dateModified":"2026-07-20T17:13:00+00:00","description":"diferen\u00e7a entre pentest e red team, quando usar red team, red team vs penetration testing, red team assessment","breadcrumb":{"@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mscyber.tech\/pentest-vs-red-team\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/#primaryimage","url":"https:\/\/mscyber.tech\/wp-content\/uploads\/2026\/07\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg","contentUrl":"https:\/\/mscyber.tech\/wp-content\/uploads\/2026\/07\/Comparison-between-a-pentest-and-a-Red-Team-engagement.jpg","width":600,"height":450,"caption":"Comparison between a pentest and a Red Team engagement"},{"@type":"BreadcrumbList","@id":"https:\/\/mscyber.tech\/pentest-vs-red-team\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/mscyber.tech\/"},{"@type":"ListItem","position":2,"name":"Pentest vs Red Team: Differences and When to Use | Mercurius"}]},{"@type":"WebSite","@id":"https:\/\/mscyber.tech\/#website","url":"https:\/\/mscyber.tech\/","name":"Mercurius Cybersecurity","description":"Resili\u00eancia cibern\u00e9tica impulsionada por IA para organiza\u00e7\u00f5es cr\u00edticas","publisher":{"@id":"https:\/\/mscyber.tech\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mscyber.tech\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/mscyber.tech\/#organization","name":"Mercurius Cybersecurity","url":"https:\/\/mscyber.tech\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/mscyber.tech\/#\/schema\/logo\/image\/","url":"https:\/\/mscyber.tech\/wp-content\/uploads\/2025\/09\/MERCURIUS-LOGO-Light-Color-2.svg","contentUrl":"https:\/\/mscyber.tech\/wp-content\/uploads\/2025\/09\/MERCURIUS-LOGO-Light-Color-2.svg","width":289,"height":48,"caption":"Mercurius Cybersecurity"},"image":{"@id":"https:\/\/mscyber.tech\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/mscyber.tech\/#\/schema\/person\/2e057da44c0b9c841b3b8acba1459547","name":"kaue.simoes","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/63c12ac971cb2964499a31feebfd9948fa35f6fa184fe2c25d8444b67112460a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/63c12ac971cb2964499a31feebfd9948fa35f6fa184fe2c25d8444b67112460a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63c12ac971cb2964499a31feebfd9948fa35f6fa184fe2c25d8444b67112460a?s=96&d=mm&r=g","caption":"kaue.simoes"},"url":"https:\/\/mscyber.tech\/pt\/author\/kaue-simoes\/"}]}},"_links":{"self":[{"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/posts\/3297","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/comments?post=3297"}],"version-history":[{"count":4,"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/posts\/3297\/revisions"}],"predecessor-version":[{"id":3303,"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/posts\/3297\/revisions\/3303"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/media\/3300"}],"wp:attachment":[{"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/media?parent=3297"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/categories?post=3297"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mscyber.tech\/pt\/wp-json\/wp\/v2\/tags?post=3297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}