Offensive Security
Automation
Platform.

Altron is a deployment platform for offensive security operations. Define workflows as JSON node graphs, deploy them in one click, and let the local AI executor drive each step — shell commands, browser actions, LLM reasoning — while recording every finding automatically.

Request Beta AccessSee how it works →
org.rootStartcore.shellnmap scancore.researchOSINTcore.taskAnalyzecore.sessionRecord
INITIALIZING

Three steps. Infinite operations.

01

Write a template

Define your operation as a JSON node graph. Nodes connect by parent_id (execution order) and context_from (data flow). Parametrize with {{target}}, {{user}}, {{password}}.

{ "id": "scan", "type": "core.shell",
  "action": "nmap -sV {{target}}",
  "parent_id": "root" }
02

AI runs every node

Click Run. Altron walks the graph — parallel branches execute concurrently, conditional branches evaluate with shell exit codes or LLM judgment, for_each iterates lists.

[running] scan → nmap -sV 10.0.0.1
[found]   22/ssh  80/http  443/https
[running] analyze → core.simple_task
[done]    3 findings identified
03

Findings recorded automatically

core.session, core.credential, core.finding, and core.persistence nodes write structured records to the red team data model. Query, export, and build on them in future ops.

✓ Session: root@10.0.0.1
✓ Cred: admin / Summer2024!
✓ Finding: Weak Password [CRIT]
✓ Persist: cron @ /etc/cron.d/

Everything a red teamer needs.

Node graphs that run themselves

Every operation is a JSON plan template — a directed graph of typed nodes. Write it once, replay it anywhere. The node library covers shell commands, LLM tasks, web browsing, file writing, process control, and more.

  • 26 built-in templates across 6 categories
  • Parametric: swap targets without editing the graph
  • Version-controlled JSON — diff, branch, share
  • Custom templates auto-registered to the AI planner
org.rootMission Startcore.shellnmap -sV scancore.researchOSINT lookupcore.simple_taskAnalyze resultscore.sessionRecord session
typeorg.roottitleMission Startparent_idnull

Ready-to-run attack plans.

26 templates across 6 categories

Initial Reconnaissance

reconnmapmasscan
rt-recon-init.json

Initial Access — Default Credential Spray

initial-accessspraycredentials
rt-init-access.json

Web Application Attack — Default Creds, RCE, Shell Upload

webappJenkinsTomcat
rt-webapp.json

Privilege Escalation — Linux Host

privescsudoSUID
rt-privesc.json

Post-Root Credential Harvesting

credential-harvestshadowhashcat
rt-cred-harvest.json

LLMNR/NBT-NS Poisoning and NTLM Relay

BETA
responderNTLMrelay
rt-responder.json

SOCKS Pivot — Tunnel Through Compromised Host

pivotsocks5tunnel
rt-pivot-socks.json

Lateral Movement — Credential-Based Pivot

BETA
lateral-movementsshsmb
rt-lateral-move.json

AD Lateral Movement — Pass-the-Hash / WinRM

BETA
pass-the-hashwinrmad
rt-ad-lateral.json

Active Directory Full Enumeration

BETA
ad-enumbloodhoundldap
rt-ad-enum.json

Kerberoasting and AS-REP Roasting

BETA
kerberoastas-rephashcat
rt-ad-kerberoast.json

Full Domain Compromise — DCSync, Golden Ticket, DA Backdoor

BETA
dcsyncgolden-ticketkrbtgt
rt-domain-own.json

Start Reverse Shell Listeners

listenersc2reverse-shell
rt-start-listeners.json

OPSEC — Log Cleanup and Artifact Removal

opseccleanuplogs
rt-opsec-clean.json

Op Start — Full Red Team Init Sequence

BETA
workflowinitmacro
rt-op-start.json

LabGen Report Parse — Lab Doc to Ground Truth

labgenparsegroundtruth
labgen-report-parse.json

LabGen Report Parse (LLM) — Chunked Extraction

BETA
labgenparsellm
labgen-report-parse-llm.json

See Altron in action.

ScreenshotAltron chat interface

What's coming.

26 built-in red team templates

Shipped

Full library of ready-to-run offensive operation templates across recon, initial access, priv-esc, persistence, lateral movement, and more.

Node graph template editor

Shipped

Visual JSON node graph editor for building and editing operation templates directly in the GUI.

Graphiti memory integration

Shipped

Persistent long-term memory via Graphiti — entities, relationships, and findings persist across operations.

Red team data model (sessions, creds, findings, persistence)

Shipped

Structured recording of all red team artifacts: sessions, credentials, findings, and persistence mechanisms.

CoT-driven red team panel auto-population

In Progress

Chain-of-thought output automatically populates the red team panel — no explicit recording nodes needed in templates.

Operator timeout extension prompt

In Progress

When a node times out, the operator is prompted with an LLM time estimate and the option to extend before retrying.

Windows AD attack template library

Planned

A full library of Active Directory attack templates: AS-REP roasting, Kerberoasting, DCSync, NTLM relay, and more.

Collaborative multi-operator mode

Planned

Multiple operators share a live mission session, with role-based access and real-time task coordination.

Custom LLM provider support (OpenAI, Gemini)

Planned

Swap out the local Ollama executor for OpenAI, Gemini, or any OpenAI-compatible API endpoint.

Mobile operator dashboard

Planned

Read-only mobile view of active mission state: live task tree, findings, sessions, and credentials.

Inspect every step.

Every task is a tree. Drill into any completed node to replay its chain of thought — see exactly how the AI planned and executed each action, with full context in and out.

ALTRON
AGENT: IDLE
DONE
CHAT
TASKS
TMPL
MEM
RED
CFG
TASK HISTORYDONE
Web App AssessmentDONE
Jan 158.1s10 nodes
Network ReconDONE
Jan 1412.3s7 nodes
Establish PersistenceDONE
Jan 144.2s5 nodes

Currently in beta. Join the waitlist.

Built for operators.
Join the beta.

Altron runs entirely on your machine. No telemetry. No cloud dependency. Your ops stay yours.

Request Beta Access