Live global attack telemetry

Real-time visibility into
AI-driven cyber attacks

NorseStar operates the training ground where the next generation learns to build, wield, and supervise autonomous offensive agents. A living threat-intel company — and the home of SANS SEC590.

1,284,902Attacks today
47AI pentest tools tracked
RU · CN · IRTop sources
5 daysSEC590 · build to supervise
The Course

SEC590 — AI-Driven Penetration Testing

Students arrive knowing little about AI and leave as practitioners who build custom pentest agents, orchestrate autonomous assessments, and supervise AI-driven operations. Fifty-fifty lecture and labs, every day, for five days.

Build, don't observeAutonomous harnessesAgent supervisionEnterprise governance
PA
Pedram Amini
Author · Day 1
AW
Adrian Wood
Author · Day 2

Why NorseStar?

A tribute to the most spectacular flameout in threat-intel history — rebuilt as a teaching environment. The company is fiction. The lessons are real.

The five days

1 · Attack surfaces for AI pentesting
2 · AI pentest harnesses
3 · Getting it right
4 · Autonomous operations
5 · Supervise & govern

Resources

The AI Pentest Tool Index

A curated, continuously-maintained inventory of the open-source AI offensive-security landscape.

Auto-synced weekly · last update Mon
ToolCategoryStarsΔ 7dPosture
HexStrike-AIMCP · 150+ tools8.9k+412Orchestrator
StrixAutonomous · web6.1k+288Agent
PentestGPTGuided assistant9.4k+77Assistant
CAIFramework · REPL3.7k+154Framework
NebulaAssistant · local-LLM1.9k+33Assistant

Full index: 47 tools · sourced from the SEC590 research pipeline · browse all ▸