OSAI (OffSec AI Red Teamer)
OSAI is the certification attached to OffSec's AI-300: Advanced AI Red Teaming course. Its exam tests offensive assessment of AI-enabled systems, including LLM applications, multi-agent systems, RAG pipelines and the infrastructure that supports them. OffSec designed the course for experienced penetration testers, red teamers and security engineers expanding into AI security.
Exam Details
Proctored online red team engagement against an AI-enabled enterprise environment of ten machines, eight of them scored, graded on proof files and a written report. The exam is open book, and OffSec permits and strongly encourages the use of AI tools.
AI-300 Course + Cert Bundle, with 90 days of course and lab access and one exam attempt. Learn One costs $2,749 per year and includes one year of access and two exam attempts.
Requirements and Renewal
Prerequisites
OffSec recommends experience with penetration testing concepts, networking, Linux and Windows systems and basic scripting, plus OSCP or equivalent hands-on experience. Familiarity with AI systems such as LLMs is helpful but not required.
Renewal
OSAI does not expire. The OSAI+ designation, awarded for the same exam, expires three years after it is earned. It can be maintained by passing a recertification exam within six months before expiry, passing another qualifying OffSec exam (OffSec names OSEP, OSWA, OSED and OSEE for OSAI+), or earning 120 CPE credits over the three years. The CPE route requires annual AMP ($299 per year) or AMF ($145 per year) coverage, and OffSec applies the same coverage to the other routes where its program rules call for it.
Certification Lists
Related Tool Categories
Red-teaming suites, prompt injection scanners, LLM guardrails, and model evaluation utilities.
Intercepting HTTP proxies, security assessment toolkits, and network exploitation frameworks.
Adversary emulation platforms, C2 frameworks, and atomic test libraries for authorized red team operations.
Frequently Asked Questions
What is the difference between OSAI and OSAI+?→
Passing the exam awards both. OSAI has no expiration date. OSAI+ expires three years after it is earned unless it is maintained through CPE credits, a recertification exam or a qualifying OffSec exam.
Is AI allowed in the OSAI exam?→
Yes. Unlike most OffSec exams, OSAI permits AI chatbots and LLMs and strongly encourages their use. The exam is open book and has no tool restrictions.
What score is needed to pass OSAI?→
The pass mark is 75 of 100 points. AI-vector machines are worth 15 points each, traditional machines 10 points each, and the Domain Controller flag 5 points.
How much does the OSAI course cost?→
OffSec sells the AI-300 Course + Cert Bundle for $1,749, with 90 days of access and one exam attempt. Learn One costs $2,749 per year and includes two attempts.
When did AI-300 launch?→
OffSec released AI-300 on March 31, 2026. The earliest OSAI+ exam date it opened was July 15, 2026.
Sources
- OffSec AI-300: Advanced AI Red Teaming
- OffSec Help Center: OSAI Exam Guide
- OffSec Help Center: OSAI+: Advanced AI Red Teaming (AI-300) FAQ
- OffSec Help Center: OSAI+: Advanced AI Red Teaming Exam FAQ
- OffSec Help Center: OSAI+ (AI-300) Pre-Release Offer FAQ
- OffSec Help Center: CPE Program and Annual Maintenance Handbook
Exam details are checked against official OffSec pages. Fees, exam versions, and renewal rules change; confirm with OffSec before registering. OSAI is a trademark of its owner. This site is not affiliated with or endorsed by OffSec.