practical-devsecops.com レビュー 717

The Certified Threat Modeling Professional (CTMP) exam was a great challenge and an enjoyable experience. The test truly pushes your understanding of threat modeling concepts, requiring both technical knowledge and strategic thinking.

The accompanying course is incredibly comprehensive, covering everything from foundational principles to practical applications. I highly recommend it to anyone looking to deepen their expertise in threat modeling. In fact, I believe it's unique in its kind, offering a structured and in-depth approach that few other certifications provide.

Great focus on "hands on" limiting theory to what's required. Labs are easy to follow with fully functioning environments.

The syllabus is so up to date, every subjects are delivered so well with complete example and labs.

Passing the exam challenges always comes with a great sense of accomplishment. The courses are very practical, enabling immediate improvements in your projects/organization. My manager likes to showcase the certification I did as well - to proof his organization is, if not ahead, keeping up with the technical development and can support and challenge the platform teams. Gained knowledge allows better visibility and assurance over cloud-native implementations.

The Certified API Security Professional (CASP certification) provided me with a structured and hands-on approach to mastering API security. It enabled me to validate and strengthen my expertise in securing APIs, identifying vulnerabilities, and implementing robust security controls.

Several stakeholders benefited from this achievement. Developers, DevOps teams, security engineers, and compliance officers will be target audience as it directly contributes to enhancing the security posture of our applications and services.

The most significant change has been a proactive approach to API security. With its practical exam, you can benefit from if you study the syllabus that comes with the course. I totally recommend this certification.

I recommend the CDP course to anyone wanting to start learning about DevSecOps and how to add security controls as part of the SSDLC. Passing the exam will validate that the student is ready to start applying the knowledge in a professional environment. For DevSecOps professionals, already in the field for a couple of years, the course might be too foundational.

If you want to become a DevSecOps professional, CDP is a course you should consider. It is highly beneficial for enhancing your career expertise, offering materials and hands-on labs for trial and error learning. Overall, this course is highly recommended.

This is really helpful if you are taking the DevSecOps path.

I had a very good experience with the Practical DevSecOps team. The support team was very helpful and prompt in answering any doubts. The CDP course was well planned and thorough for any first time learner. The hands on labs were pretty good, the main thing was there were plenty of labs with various tools. Regarding the exam, its a hands on exams with quite challenging tasks which would require some thinking and effort. Overall it was a good learning experience. I think as of now its the best course to learn DevSecOps.

The course started reviewing basic concepts I was already familiar so that I can confirm they teach properly. Then I have been introduced to DevSecOps' specific topics having to practice a lot so that I have been able to understand well and memorize. The final exam is very serious and it took 6 hours to do the lab exam plus another 2-3 hours to prepare the final document to submit. I can sincerely say this is not definitely a "pay per certificate" course, you have to deserve your certificate.

PDSO CTMP certification provides a solid foundation of threat modeling methodologies. The course has a higher degree of focus on continuous organizational implementation over conducting the threat enumeration and risk calculation exercises, which is why I would recommend prospective students to also get familiar with or review threat/attack frameworks like those provided by MITRE and OWASP, this will complement the course content beautifully. Remember that you will NOT come out an expert threat modeller by just doing this course, the learning does not end with you passing the exam, it will only be valuable if you continue beyond.

Course structure ultimately delivers value through smooth labs and knowledgeable instruction, you may feel lost in the initial chapters but it eventually comes together. Remember to take notes and ask for help on their Mattermost forum. An underrated aspect of the course was the webinars, they invite industry experts to talk about TM and other DevSecOps stuff, some of the recordings are accessible through their YouTube channel.

My biggest compliment to Practical DevSecOps is the quality of the content it provides. They introduce one to several concepts and tools that hitherto were unknown to the student. The lab gives opportunity to enrich one's skills practically and it feels like having work experience which in turn breeds confidence.

I loved the hands-on exercises that are given before you write the exam. The course opened a new way for me to see how security is integrated into DevOps. The course helped me achieve an internationally recognized certificate.

I recently took the Certified DevSecOps Professional (CDP) course offered by practical-devsecops.com, and overall, I found it lacking the depth I expected for a course labeled “Professional.”

On the positive side, the platform is fantastic—it’s very user-friendly and runs smoothly. However, in terms of actual content, I’d say only about 30% of the material felt truly valuable. A significant portion of the course goes over basic Linux commands and creating CI/CD pipelines, which I would have expected to be prerequisites rather than core parts of a “Professional” certification.

Given the title, I anticipated more advanced security topics, both in theory and practice. Instead, most of the time is spent setting up infrastructure rather than diving deep into software security methodologies. On top of that, the exam seemed straightforward—largely a copy-paste exercise from the course material, rather than a rigorous test of applied knowledge.

For the price, I think the value just isn’t there. The platform itself is great, but the course content and assessment could use a serious overhaul to align with what most would expect from a “Professional DevSecOps” certification.

Great training! Now, I am better prepared to help customers with their supply-chain issues.
The training is well structured (Code, Container, Cluster, Cloud), touching frameworks, tools, guides, etc. The labs help put our knowledge into practice.

I am currently working as a working student at an IT company, so I am a beginner in this field. I appreciated that the Practical DevSecOps team delivered on their promises, particularly that the CCSE training and exam are suitable even for beginners. I was able to significantly enhance my skills in Docker, especially in the security context, even though the learning curve was steep at first. With this certification, I now have the opportunity to further develop my career even before completing my studies. The Practical DevSecOps team truly did a great job—thank you again!

The Practical DevSecOps course is truly outstanding! It provides a friendly and approachable learning environment, making it easy to understand DevSecOps, even for those completely new to the domain. I’m incredibly grateful for enrolling in this course, as it enabled me to quickly grasp DevSecOps concepts and confidently apply them to new projects in my organization. Passing the CDP certification and immediately enrolling in the AI course is a testament to the exceptional quality of Practical DevSecOps’ offerings. Highly recommended!

Few people know that I just went through one of the toughest exams of my life till now. It was a six-hour practical lab exam consisting of five challenges and more than 20 tasks, big and small. This exam allowed me to use any tools I wanted, Google or any documentation. As long as I completed more than 80% of the tasks, I would be recognized as an expert in this field. That alone should give you an idea of how grueling this "bring everything you've got" kind of exam was.
But that’s not all—after completing the exam, I had to write a detailed report within 24 hours describing everything I had done in the past six hours. The report had to include code, commands, screenshots, and more for three examiners to assess whether I truly understood and solved the problems in the shortest time possible. During those six hours, I had to document every step, take over 150 screenshots, and do countless other tasks. At times, the stress was so intense that my hands shook, and my mind felt chaotic. I had to drink water constantly to stay calm when I got stuck on a task. My heart rate during those moments probably rivaled that of a marathon runner. Looking back, the funniest moment was when I kept running the docker build command over and over, closing my eyes and "praying," just hoping it would succeed without any errors.
Because I didn’t manage to complete a few tasks, I spent the next 24 hours pouring my heart into the report. I wanted the examiners to see just how much effort I had put in. If it weren’t for the adrenaline boost from listening to revolutionary songs to keep my spirits up, I’d probably be off somewhere doing some serious recovery therapy right now.
Finally, after 30 hours of living on fast food and barely five hours of sleep, I submitted my report at 2:43 PM. It was a memorable experience that everyone should try at least once in their life. And honestly, I think I’d still be happy even if the results don’t turn out as expected.

Hand on practical labs covering all of important topics required.