---
title: "Red Team AI: Models for Authorized Adversary Emulation"
canonical: https://pentestllm.ai/red-team
generated: 2026-11-11T18:04:27.878Z
source: https://pentestllm.ai/red-team
base_url: https://api.pentestllm.ai/v1
---

![Rows of server cabinets in a data centre](https://pentestllm.ai/img/datacenter.webp)

## Where a model fits in an exercise

- Planning: Turn a threat intelligence report into an emulation plan mapped to MITRE ATT&CK techniques, with the objectives and constraints from the rules of engagement.
- Tooling review: Read the output of the team’s own tools and say what it shows, what it does not, and what to confirm by hand.
- Operator log: Rewrite raw timestamped notes into a clean activity log the white cell and the client can follow.
- Detection notes: For each action taken, describe the telemetry it should have produced and a rule the blue team could write.
- Reporting: Draft the narrative, the findings and the remediation plan in the firm’s template.
- Purple sessions: Explain a technique to defenders at the level they need to tune a control.

## Why general assistants fall short here

Red team work is offensive by definition, and general assistants are trained to back away from it. An operator who asks a stock model to explain the technique in a threat report, or to review a tool’s behaviour before an exercise, often gets a lecture instead of an answer. In an agent loop the same refusal ends the run.

The security builds here are tuned or abliterated to answer the questions other models decline. That is reduced refusals, not zero, and it does not replace operator judgment: the model proposes, a person decides what runs against a client’s estate.

## Built for teams that script things

The API is OpenAI-compatible at `https://api.pentestllm.ai/v1` and also takes Anthropic-format requests, so it works from internal tooling, from a C2 operator’s note-taking script, or from a terminal agent. The id `auto/security` routes each request to a fast, balanced or frontier build by what it carries. An `x-session-id` header keeps one build on a session for 30 minutes after its last request, which keeps the voice of an operator log consistent.

Server-side tools are there when a workstation is locked down: web search ($0.01 per search), page fetch ($0.001 per page fetched) and a code sandbox ($0.05 per container-hour, 1-minute minimum). Long inputs fit too; the largest context window listed today is 1M tokens.

## Keeping the exercise inside its rules

Every red team exercise has rules of engagement: scope, timing, forbidden actions and an escalation path. Put them in the system prompt so the model’s suggestions respect them, and keep the signed copy where you can show it. PentestLLM is for systems you own or have written permission to test, and the [acceptable use policy](https://pentestllm.ai/acceptable-use) says a key may be suspended until proof of authorization is shown.

Decide with the client what data may leave their network before any of it goes into a prompt. The privacy page states what the service keeps.

## Cost of a typical week

Usage is billed per token. Planning and reporting are light; agent runs that re-send long tool output are where tokens go, so the input price matters most. The table below is the live catalog on 2026-11-11, and the [pricing page](https://pentestllm.ai/pricing) has the same figures with the tool fees. Start from $10 and see what a real week uses.

## 9 security builds, priced per token

Read from the live catalog on 2026-11-11. Prices are US dollars per million tokens, paid from a prepaid balance that starts at $10. The id `auto/security` has no price of its own: each request is billed at the build that answered.

| Build | Input | Output | Context |
| --- | --- | --- | --- |
| [Qwen3.8 27B Cybersecurity](https://pentestllm.ai/models/qwen3.8-27b-cybersecurity) | $0.40 | $2.40 | 262,144 |
| [Gemma 4 26B A4B Cybersecurity](https://pentestllm.ai/models/gemma-4-26b-a4b-it-cybersecurity) | $0.4224 | $1.3376 | 262,144 |
| [GLM-5.3 Flash Cybersecurity](https://pentestllm.ai/models/glm-5.3-flash-cybersecurity) | $0.5093 | $1.6975 | 1,048,576 |
| [Red Team (Flash)](https://pentestllm.ai/models/uplink-red-team-flash) | $0.90 | $3.00 | not published |
| [Red Team (Pro)](https://pentestllm.ai/models/uplink-red-team-pro) | $1.50 | $6.00 | not published |
| [OrcaCyber MiniMax M3.1 Flash](https://pentestllm.ai/models/minimax-m3.1-flash-cybersecurity) | $2.00 | $4.00 | 261,632 |
| [OrcaCyber Qwen3.8 Flash Next](https://pentestllm.ai/models/orcacyber-qwen3.8-flash-next) | $2.00 | $4.00 | 261,632 |
| [Cyber Frontier](https://pentestllm.ai/models/cyber-frontier) | $5.25 | $15.75 | 1,048,576 |
| [OrcaCyber Zero 1.5](https://pentestllm.ai/models/orca-zero-1.5-cybersecurity) | $7.50 | $18.75 | 999,488 |

[Full price list and tool fees](https://pentestllm.ai/pricing) · [Every model](https://pentestllm.ai/models) · [API docs](https://pentestllm.ai/docs)

## Questions

- A language model used to support authorized adversary emulation: planning against a threat profile, reviewing tooling output, writing detection notes and drafting the report. It assists operators and does not replace them.
- No. AI red teaming usually means testing AI systems for failures. This page is about red teams that test organizations and use a model as a working tool.
- Far less often than general assistants. The builds are tuned or abliterated to answer security questions other models decline. Expect reduced refusals, not none.
- Yes. Ask for technique identifiers with each planned action or finding and check them against the current matrix, since any model can misremember an identifier.
- From a prepaid balance, per token, with a minimum top-up of $10 by card or crypto. There is no seat licence. On 2026-11-11 input prices for security builds start at $0.40 per million tokens.

## Read next

- [Bug bounty Models for scope reading, recon notes, code review and report drafting on programs you are enrolled in.](https://pentestllm.ai/bug-bounty)
- [Vulnerability research Models for code review, CVE and patch analysis, and advisory writing.](https://pentestllm.ai/vulnerability-research)
- [Kali MCP mcp-kali-server on Kali, driven by a security build through an MCP client.](https://pentestllm.ai/agents/kali-mcp)
- [Hacker AI Security-tuned models by API for ethical hacking and authorized testing.](https://pentestllm.ai/hacker-ai)

## One key, from $10

PentestLLM is for systems you own or have written permission to test. The [acceptable use policy](https://pentestllm.ai/acceptable-use) says what is not allowed.

[Get a key](https://app.pentestllm.ai/console)

usage, 1,000 agent turns on Qwen3.8 27B Cybersecurity

- Input, 8,000 tokens at $0.40 per million: $0.0032
- Output, 1,000 tokens at $2.40 per million: $0.0024
- One turn: $0.0056
- 1,000 turns: $5.60

output price per million tokens, 9 builds

$1.3376 Gemma 4 26B A4B Cybersecurity OrcaCyber Zero 1.5 $18.75