Built by a pentester, for the AI systems now in scope.
GenAI Security Lab is hands-on AI security training for pentesters and developers. Every lab is written by Aditya Agrawal, creator of PentestBox and AppSecWiki, with 800+ client pentests behind him. Each lab starts from how the attack runs on a real engagement, then is calibrated against a live model until a genuine exploit works and a lucky guess doesn't.
He started it because LLM and agentic systems were landing in pentest scopes faster than anyone could train for them, and deep, hands-on labs for each attack class were hard to find.
More than a decade in security.
Each claim below links to where you can check it.
Independent bug-bounty research, plus PentestBox, Appie and a mobile-security series. The four HackerOne global reputation Top-100 finishes in the chips above come from these years.
Eight years of offensive-security consulting at NotSoSecure (part of the Claranet Group), principal consultant by 2021, alongside freelance pentests for Cobalt and work as a HackerOne-approved pentester. He launched AppSecWiki in 2018, and left the full-time role in 2026 to build GenAI Security Lab.
Same problem, new domain.
The pattern repeats: a gap in security tooling that nobody was filling, and a project built to fill it. GenAI Security Lab is the fifth.
Practical, hands-on Android app-security material was hard to find.
Android security toolkits all assumed Linux.
No complete Windows-native pentesting environment existed.
Web and mobile app-security knowledge was scattered across a hundred bookmarks.
Deep, hands-on AI security labs were hard to find.
Graded on the exploit, not the essay.
Most AI security training stops at prompt injection. GenAI Security Lab covers the OWASP Top 10s for LLMs, Agentic AI and MCP with 200+ hands-on labs, each scored on what happened in the session rather than on what you wrote afterwards. The Breach Replay track reconstructs documented AI security failures.
Every lab is written, run end to end and maintained by Aditya.
See what a real lab feels like.
The record above is history; the lab is the current work. Talk a support bot into approving a refund it was told to deny — a few minutes, the free tier covers it, and you'll know.
GenAI Security Lab is built and run by Aditya Agrawal.