OSAI+
OffSec AI Security Professional
Created per CertMap methodology · Updated 1 June 2026 · About the editorial team →
▾ Jump to …4 sections
Overview
What is OSAI+?
OSAI+ is OffSec's offensive AI certification from the AI-300 course, aimed at experienced red teamers and penetration testers who attack AI systems. It is tested with OffSec's signature rigor: a 24-hour, proctored hands-on red team engagement in a realistic, AI-enabled enterprise environment. Content covers attacking LLMs and multi-agent systems, RAG pipelines and embeddings, AI infrastructure, generative vulnerabilities, and the exploitation of ML models. Strength: OffSec's practical exams carry high credibility, and the format demands real proof of skill rather than a knowledge test. Limitation: the certification is new, market recognition of this specific title is still building, and the focus is narrowly offensive. Unlike the classic OSCP, OSAI+ is valid for only three years.
Suitable for
Quick facts
Key details
Cost, prerequisites, exam & renewal
Prerequisites
No formal prerequisites. OffSec targets experienced security professionals (penetration testers, red teamers, security engineers). Solid prior experience in offensive security is factually necessary for exam success.
Exam format
24-hour proctored hands-on exam as a red team engagement in a realistic, AI-enabled enterprise environment. The practical outcome of the engagement is assessed. Recommended study effort around 65 hours of course content.
Renewal & maintenance
OSAI+ is valid for three years. OffSec does not specify an ongoing CPE or continuing-education requirement.
Classification
CertMap score and matching roles
Rating
Matching NICE roles
Mapping from NIST NICE Framework SP 800-181, status 2025. NIST source ↗
More certifications
More certifications
This page follows CertMap methodology: editorial content is curated by hand. Score, costs and NICE mapping are aggregated from official provider documents. Score methodology → · TCO methodology →
Transparency: CertMap is operated by Daniel Thomas Heessel, who is also managing director of Threat‑Informed, a company specialising in Threat‑Informed Defense. CertMap currently receives no commissions from certification providers, no affiliate links, no sponsored placements. Podcast and interview guests are not paid for appearances and receive no affiliate commissions.
From the knowledge base
View all articles →Nobody is an AI security expert yet.
Which path fits your background, and the certifications that actually count. Three ways into a field where nobody has a ten-year head start.
About the CertMap editorial team
CertMap is an independent platform for comparing cybersecurity certifications, built on data-journalism standards that combine editorial curation with mechanical aggregation.
Certification vs. Certificate: What's the Difference?
Personnel certification per ISO/IEC 17024 versus a training certificate. Why the distinction matters.