SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Use AI to Attack
Use AI across the attack lifecycle. Learn how to apply AI throughout offensive operations, from reconnaissance and social engineering to exploit development and malware creation, with SEC535: Offensive AI – Attack Tools and Techniques.
Attack the AI
Assess AI systems by attacking them. Apply the same attacks adversaries use against LLMs, RAG pipelines, AI agents, ML models, and vision systems to uncover security weaknesses with SEC536: Adversarial AI - Penetration Testing AI Systems.
Bring Both AI Disciplines Together
Attack with AI, and attack AI itself. Use AI across offensive operations, then turn those skills toward AI systems themselves. SEC537 combines SEC535 and SEC536 into one learning path spanning Offensive AI and Adversarial AI.
Mick Douglas
Managing Partner at InfoSec InnovationsMick Douglas is a SANS Principal Instructor, cybersecurity practitioner, and community mentor with 20+ years helping defenders master detection, incident response, and OSINT—combining hands-on tools, real-world frameworks, and a knack for making hard concepts stick.
SEC537 is not a new course. It is the name given to represent the union of SEC535: Offensive AI – Attack Tools and Techniques and SEC536: Adversarial AI - Penetration Testing AI Systems courses. Together they form SEC537: AI for Offensive Security.
With the expansion of AI in Offensive Security Operations, we understand that you might have different needs. You might only need the knowledge of Offensive AI (SEC535), or only Adversarial AI (SEC536), or you might need to take both complementary disciplines.
These are short courses and priced accordingly. If you need to take both, it would be a higher price than our standard long courses, that's why we created SEC537: AI for Offensive Security, so you can take both courses, at the same time, priced accordingly to a SANS long course.
The bundle makes it easier to complete both through a single learning path and pricing model.
No. The bundle is not retroactively applicable.
No. The SEC537 bundle is simply a combination of both courses to give you flexibility and the standard price of a long course.
You will receive one completion certificate for SEC535, and one for SEC536. There will not be a completion certificate for SEC537 as it is not a course.
Since SEC537 is a naming convention for the bundle of two courses, there isn't a GIAC certification associated with it.
However, you can choose to add GOAA and/or GAIPT to your checkout.
- SEC535 is associated with GIAC Offensive AI Analyst (GOAA)
- SEC536 is associated with GIAC AI Penetration Tester (GAIPT)
You'll see SEC535 and SEC536 as separate course enrollments because each course has its own labs, materials, and student resources.
The course material will not change. You will receive the books named accordingly to each course in the SEC537 bundle:
- SEC535: Offensive AI – Attack Tools and Techniques
- SEC536: Adversarial AI - Penetration Testing AI Systems
Initially, we are making the bundle available in Live Online and In-Person formats. The OnDemand format is not available as of today.
Live Online and In-Person are event-based delivery formats. If needed, you may take any portion of the bundle in different formats. However, the bundle is designed to be completed at the same event.
Example: You are attending SEC537 In-Person, but you need to be home for the last two days of the week; you can connect Live Online.
We do not offer flexible days for an event-based format.
When taking the SEC537: AI For Offensive Security in the Live Online or In-Person formats, you will complete SEC535 first, followed by SEC536. However, there is no set order to take them outside the bundle.
Yes. SEC535 and SEC536 remain available as individual courses. The bundle is intended for students who want to complete both courses at the same time.
The bundle is intended for practitioners who want to both use AI during offensive operations and assess the security of AI-enabled systems. Students interested in only one discipline can continue to enroll in SEC535 or SEC536 individually.