practical-devsecops.comReviews of practical-devsecops.com

Overall good course for AI security. Specially i like CICD part for attack and defending against the AI.

It was a great experience!

This is a well-designed course on AI Security. Not only does it cover industry best practices and modern tooling solutions, but it also provides actionable insights on how to secure real-world AI applications against emerging threats.

I recently passed the CAISP certification and can attest that it is a fantastic course to start with on securing AI systems albeit with still some room to improve. The hands-on lab-oriented approach is a good way to learn about vulnerabilities and weaknesses of AI systems and then how to protect against the threats. The shortcoming of the course is that it is based totally on local LLMs and doesn't cover LLMs as a cloud hosted service (OpenAI, Amazon Bedrock etc.). It doesn't go too much into the platform layer on top of the model layer and how to secure them. MCP and AI Agents lesson is also too short IMO, and more depth would have been good. Finally replicating the labs locally was a bit challenging as the Python version used is 3.10 which is a bit old now and some Python modules are not compatible. My suggestion for PDSO would be to upgrade the labs to run on Python 3.12 or greater. Nevertheless, AI security is a fast-emerging field, and this course will set you on the journey to securing AI systems.

I have around 4+ years of experience in Application Security, working on SAST, DAST, SCA, and VAPT activities. In my current role, I’ve been involved in identifying vulnerabilities, supporting remediation, and working closely with development teams to improve application security posture. What made my experience great was the opportunity to work on diverse applications and learn different security tools and methodologies. The team collaboration was strong, and there was good support from senior members whenever needed. The company is doing well in terms of adopting security practices and integrating them into the development lifecycle. There is a clear focus on improving security awareness and maintaining compliance standards. One area for improvement could be increasing automation in security testing and providing more advanced training opportunities to keep up with evolving threats.

The Certified API Security Professional provide a both knowledge to understand the API security and the practice to exercise the skills that can be applied in real world

The practical nature of the course means that in every lesson you have an actual working example. The plethora of different tools presented in the large numbers of labs throughout the course and different means of integrating them into various pipelines prepares you for many different real-world scenarios.

I recently completed the Certified DevSecOps Professional (CDP) online program, and it was a highly valuable learning experience. The course offered well structured, hands-on labs that helped me gain practical exposure to integrating security practices into the DevOps pipeline. Through this certification, I was able to significantly improve my technical skills and build greater confidence in applying DevSecOps principles in real-world scenarios. The practical approach made it easier to connect theory with implementation. One suggestion for further enhancement would be to provide continued access to the labs or course materials even after certification, as this would help learners refresh their knowledge and reinforce key concepts over time. Overall, I highly recommend this certification to professionals who want to strengthen their DevSecOps capabilities and gain a deeper understanding of secure CI/CD practices.