How it works
Three steps. Infinite operations.
Write a template
Define your operation as a JSON node graph. Nodes connect by parent_id (execution order) and context_from (data flow). Parametrize with {{target}}, {{user}}, {{password}}.
{ "id": "scan", "type": "core.shell",
"action": "nmap -sV {{target}}",
"parent_id": "root" }AI runs every node
Click Run. Altron walks the graph — parallel branches execute concurrently, conditional branches evaluate with shell exit codes or LLM judgment, for_each iterates lists.
[running] scan → nmap -sV 10.0.0.1 [found] 22/ssh 80/http 443/https [running] analyze → core.simple_task [done] 3 findings identified
Findings recorded automatically
core.session, core.credential, core.finding, and core.persistence nodes write structured records to the red team data model. Query, export, and build on them in future ops.
✓ Session: root@10.0.0.1 ✓ Cred: admin / Summer2024! ✓ Finding: Weak Password [CRIT] ✓ Persist: cron @ /etc/cron.d/
Features
Everything a red teamer needs.
Node graphs that run themselves
Every operation is a JSON plan template — a directed graph of typed nodes. Write it once, replay it anywhere. The node library covers shell commands, LLM tasks, web browsing, file writing, process control, and more.
- 26 built-in templates across 6 categories
- Parametric: swap targets without editing the graph
- Version-controlled JSON — diff, branch, share
- Custom templates auto-registered to the AI planner
Template library
Ready-to-run attack plans.
26 templates across 6 categories
Screenshots
See Altron in action.
Roadmap
What's coming.
26 built-in red team templates
ShippedFull library of ready-to-run offensive operation templates across recon, initial access, priv-esc, persistence, lateral movement, and more.
Node graph template editor
ShippedVisual JSON node graph editor for building and editing operation templates directly in the GUI.
Graphiti memory integration
ShippedPersistent long-term memory via Graphiti — entities, relationships, and findings persist across operations.
Red team data model (sessions, creds, findings, persistence)
ShippedStructured recording of all red team artifacts: sessions, credentials, findings, and persistence mechanisms.
CoT-driven red team panel auto-population
In ProgressChain-of-thought output automatically populates the red team panel — no explicit recording nodes needed in templates.
Operator timeout extension prompt
In ProgressWhen a node times out, the operator is prompted with an LLM time estimate and the option to extend before retrying.
Windows AD attack template library
PlannedA full library of Active Directory attack templates: AS-REP roasting, Kerberoasting, DCSync, NTLM relay, and more.
Collaborative multi-operator mode
PlannedMultiple operators share a live mission session, with role-based access and real-time task coordination.
Custom LLM provider support (OpenAI, Gemini)
PlannedSwap out the local Ollama executor for OpenAI, Gemini, or any OpenAI-compatible API endpoint.
Mobile operator dashboard
PlannedRead-only mobile view of active mission state: live task tree, findings, sessions, and credentials.
Tasks tab
Inspect every step.
Every task is a tree. Drill into any completed node to replay its chain of thought — see exactly how the AI planned and executed each action, with full context in and out.
Pricing
Currently in beta. Join the waitlist.
Built for operators.
Join the beta.
Altron runs entirely on your machine. No telemetry. No cloud dependency. Your ops stay yours.
Request Beta Access