Skip to content
CSI Cyber Security Awards 2025 — Women in Cyber + Outstanding Training
Macksofy Technologies
OSAI — Advanced AI Red Teaming (AI-300)
OffSec
OSAI / AI-300
AI red-team certification bootcamp
OSAI / AI-300Professional

OSAI — Advanced AI Red Teaming (AI-300)

Break the agent. Poison the pipeline. Pivot through the model.

OSAI is OffSec's AI Red Teamer certification — a 24-hour practical exam against an AI-enabled enterprise where you attack LLM agents, multi-agent protocols, RAG pipelines, embeddings, MCP tool surfaces and the infrastructure underneath. Macksofy's bootcamp pairs the official AI-300 course with the LearnToExploit Model Attack & Red Teaming lab track, so every attack class is practised before exam day.

65-hour OffSec course + 24-hour exam 13 modules Hybrid · Macksofy mentorship + OffSec course
In short

What is the OSAI certification?

The OffSec AI Red Teamer (OSAI) is OffSec's certification for attacking AI-enabled systems, earned through the 24-hour practical exam of the AI-300 Advanced AI Red Teaming course. It covers AI reconnaissance, LLM agents, multi-agent and A2A protocols, RAG pipelines, embeddings, MCP tool surfaces, AI/ML supply chain and AI infrastructure. Macksofy runs an OSAI exam-prep bootcamp in India built around the LearnToExploit Model Attack & Red Teaming lab track.

What you’ll be able to do

Outcomes — concrete, measurable.

Every capability you walk away with, mapped to the cybersecurity domains and the career roles they unlock in India + UAE.

SKILL GRAPH · 7 CAPABILITIES
01 / 07
Skill 01 · AI

Fingerprint an AI target: model, tools, retrieval, guardrails and agent topology

Status
Unlocked
Position
1/7
Category
AI
Up next · skill 02
Compromise AI agents through direct and indirect prompt injection into tool calls
This unlocks roles like
  • AI Red Teamer₹20–40 LPA
  • AI Security Engineer₹18–35 LPA
Who it’s for

Is OSAI right for you?

  • OSCP / OSEP holders moving into AI red teaming
  • Penetration testers asked to assess LLM and agent features
  • AI engineers who want to understand adversarial threats to their own systems
  • Security engineers defending AI infrastructure
Before you start

What we assume you know

  • OSCP or equivalent hands-on penetration testing experience (OffSec's recommendation)
  • Comfort with Linux, Windows, networking and basic scripting
  • No prior AI / ML background required — helpful, not mandatory
Curriculum

13 modules. 65-hour OffSec course + 24-hour exam.

Search modules and topics, and switch between Split and Track views to see how every module flows into the next.

Modules
13
Topics
39
Module 01 / 13 · OSAI

Module 01 · Introduction to Red Teaming AI Systems

  • 01
    How LLM applications are assembled
  • 02
    Why instructions and data share one token stream
  • 03
    Scoping and rules of engagement for AI targets
Tools you’ll operate

The same toolkit our consultants use on real engagements.

Not academic exercises. The tools below are exactly what Macksofy consultants run on paying client engagements every week — so the muscle memory you build in class carries straight into your first job.

Tooling stack
Burp SuitePython attack harnessesgarakPyRITvec2textMCP InspectorkubectlAWS CLILearnToExploit AI labs
Career outcomes

What roles open up after you complete this.

RoleSalary bandExperience
AI Red Teamer₹20–40 LPA4+ years
AI Security Engineer₹18–35 LPA3+ years
Placement support

We don’t promise jobs. We open doors.

Macksofy's placement desk works directly with hiring partners across India and the UAE. Resume coaching, mock interviews and direct intros included.

  • 1:1 resume + LinkedIn rewrite with our hiring desk
  • Mock interviews with active practitioners
  • Direct intros to BFSI, fintech and Big-4 partners
  • UAE placement support (Dubai, Abu Dhabi)
FAQ

Things students ask before enrolling.

OSAI is the OffSec AI Red Teamer certification earned by passing the exam for AI-300: Advanced AI Red Teaming. The course is 11 learning modules covering AI reconnaissance, attacking agents, multi-agent and A2A systems, RAG pipelines, embeddings, MCP tool surfaces, AI/ML supply chain, AI infrastructure (cloud, Kubernetes, containers), threat modeling and a capstone engagement.
A 24-hour proctored practical exam. You are given VPN access to a realistic AI-enabled enterprise environment, must identify and exploit vulnerabilities across the AI application and the infrastructure behind it, and submit a report. An OffSec proctor monitors the session.
OffSec lists the Course + Cert bundle (90 days of access, one exam attempt) at $1,749 and Learn One (one year, two attempts) at $2,749 — roughly ₹1,70,000 and ₹2,67,000 at current rates. Macksofy quotes the mentor-led bootcamp separately on enquiry; EMI across 3, 6 or 12 months is available.
OffSec recommends OSCP or equivalent hands-on experience, and the exam assumes you can already pivot through networks, cloud and Kubernetes once an AI component gives you a foothold. Prior AI or ML knowledge is helpful but not required — the course teaches it.
Both come from the same exam. OSAI never expires. The OSAI+ designation expires three years after you pass, and is renewed by passing a qualifying OffSec exam, a recertification exam, or through OffSec's CPE programme.
The bootcamp wraps the official AI-300 course with the LearnToExploit Model Attack & Red Teaming track — 12 modules and 9 browser labs mapped module-by-module to AI-300 — a timed mock engagement, and mentor review of your report. Most candidates complete LearnToExploit first, then the OffSec material, then the mock.
Yes, if you have not yet attacked an LLM application. It costs ₹10,000, runs in the browser, and covers the attack classes behind every AI-300 module plus jailbreaking, output handling and system-prompt extraction, which AI-300 does not teach as separate modules. Finish it before the OffSec labs and the 65-hour course goes much faster.
If you already test web and infrastructure, OSAI is the shortest path to being the person on the team who can scope and deliver an AI red-team engagement. Demand is coming from BFSI, SaaS and GCC teams shipping copilots and agents; the credential is new, so holders are scarce.
Yes — live online cohorts pan-India, classroom batches in Mumbai, and corporate AI red-team batches for teams in Dubai and Abu Dhabi.
Other career tracks
OSCP — Penetration Testing with Kali Linux (PEN-200)
OSCP / PEN-200

OSCP — Penetration Testing with Kali Linux (PEN-200)

Try harder. Pass with proof.

OSEP — Evasion Techniques & Breaching Defenses (PEN-300)
OSEP / PEN-300

OSEP — Evasion Techniques & Breaching Defenses (PEN-300)

Bypass EDRs. Breach modern defenses.

OSWE — Advanced Web Attacks & Exploitation (WEB-300)
OSWE / WEB-300

OSWE — Advanced Web Attacks & Exploitation (WEB-300)

White-box web exploitation. Source-code-driven.

References & standards

Macksofy delivers this work to the following standards and regulator requirements. Definitions and controls are sourced from the issuing bodies below.

Talk to us

Get a fixed-price proposal in 48 hours.

Tell us about your security need — pentest, audit, training or a wider engagement. A senior consultant will reply within a few business hours.

CERT-In Empanelled
Information Security Auditor · India
  • CERT-In Empanelled
  • EC-Council ATC
  • Thousands of professionals trained
  • India + UAE engagements