A complete offensive-security academy, included with your license
Every StrikeOps license comes with a full Learning Center: offensive-security tradecraft, how to run the platform, and how to put AI to work safely with a human in the loop. Eight curated tracks and five guided pathways take a new hire to a confident operator, no separate training contract required.
Three things, taught together
The library spans the craft, the platform and the AI, because real engagements need all three.
Offensive-security tradecraft
Recon, web, cloud, Active Directory, mobile, wireless, physical and phishing, across the full kill chain and taught from first principles, so operators build real depth, not just tool fluency.
Platform mastery
How to run every workflow in StrikeOps, from first login through engagements, findings, reports and team management.
AI-assisted engagements, human in the loop
How to put AI to work safely on your own key, with approval guardrails and an operator signing off on everything that ships.
What's inside the library
A curated curriculum, not a pile of docs. Each track goes from first principles to the way the work actually happens.
Foundations
The mental models behind offensive security: assumed breach, defense in depth, the kill chain, risk, scoping and the law.
Attack techniques
The tradecraft library across the kill chain: recon, web, cloud, Active Directory, mobile, wireless, physical and phishing, each from first principles.
Methodology & Arsenal
The curated offensive arsenal and the kill-chain methodology behind every engagement: what runs at each phase, the per-scope playbooks, and the risk-gating that keeps every action operator-approved.
AI in offensive security
Running AI-assisted engagements safely: the human-in-the-loop model, on-host AI, the risk-gating that holds sensitive actions for approval, and AI-drafted reporting.
How StrikeOps works
The platform end to end: your isolated environment and per-firm database, the agent fleet over your own Tailscale tailnet, encryption keys you own, and the report pipeline.
Using the platform
Operator how-tos for every workflow, from your first login through engagements, findings, reports, phishing and team management.
Case studies
Anonymized real-world engagements: the attack chain, the findings and the lessons, stripped of anything client-identifying.
Reference
The glossary, the tool index, the frameworks and standards, and the severity rubric: the things you look up mid-engagement.
Step-by-step routes to a real outcome
Pathways thread tracks together into a sequence with a goal at the end, so operators always know what to learn next.
Run your first engagement
Go from an empty tenant to a delivered report: stand up your fleet, scope, test and ship.
Web application testing
Find, prove and report app-layer flaws, from access control to injection.
External & perimeter recon
Map and test the internet-facing edge, where recon, not exploits, wins.
Phishing & social engineering
Test the human layer safely, from pretext to captured credentials.
Internal AD & assumed breach
From a single foothold to domain admin, and how to defend against it.
Teach your team to run AI safely
A whole track is devoted to AI-assisted offensive work: what to delegate, what to never delegate, and how an operator stays in command of every word that reaches a client.
Human-in-the-loop by design
Operators learn where AI accelerates the work and where their judgement is the control that matters.
On your own key
AI runs on your firm's own key inside your environment, so nothing leaves your control. The curriculum teaches that model end to end.
Approval guardrails
Every AI-drafted finding and report is reviewed and signed off before it ships. Nothing goes out on autopilot.
Built for every level on your team
The same library serves the analyst on their first week and the operator running an internal AD engagement.
For new hires and analysts finding their feet: the concepts, the workflow and a first engagement end to end.
For working operators: deeper tradecraft across web, recon and phishing, with the platform behind each step.
For senior operators: full attack chains, internal AD, and how the platform's internals fit together.
The Learning Center is included with every plan, at no extra cost. See pricing.
See the Learning Center for your team
Book a walkthrough and we'll show you how StrikeOps trains operators while they work, all included with your license.
Open for business, licensing to offensive security firms now.