◆ The home of SANS SEC590

Threat intelligence, rebuilt for the age of autonomous attackers.

NorseStar is a living training ground for teams who build, wield, and supervise AI-driven penetration testing. See the whole attack surface — before the agents do.

SANSOFFENSIVE OPSSEC590RESEARCHOPEN SOURCE
The platform

One surface. Every angle of attack.

A curated view of the modern offensive landscape — the same map the course teaches you to build for yourself.

◎

Recon & attack map

Outside-in discovery across infra, web, and AI systems, rendered live.

⬡

Harness library

Compare autonomous pentest agents side by side, with real posture data.

◈

Supervision & governance

The controls that let a human stay accountable for an autonomous operation.

The course

SEC590 — AI-Driven Penetration Testing

Fifty-fifty lecture and labs, five days. Enter knowing little about AI; leave building custom agents and supervising autonomous assessments.

Build, don't observeAutonomous harnessesAgent supervisionGovernance
PA
Pedram Amini
Author · Day 1
AW
Adrian Wood
Author · Day 2
Day 1Attack surfaces for AI pentesting
Day 2AI pentest harnesses
Day 3Getting it right
Day 4Autonomous operations
Day 5Supervise & govern
Resources

The AI Pentest Tool Index

Curated weekly from the SEC590 research pipeline.

Auto-synced weekly · updated Monday
ToolCategoryStarsΔ 7dType
HexStrike-AIMCP · 150+ tools8.9k+412Orchestrator
StrixAutonomous · web6.1k+288Agent
PentestGPTGuided assistant9.4k+77Assistant
CAIFramework · REPL3.7k+154Framework
NebulaAssistant · local-LLM1.9k+33Assistant