practical-devsecops.com レビュー 716

Practical DevSecOps is doing a fantastic job in promoting learning by practice.

They’ve built an amazing platform that enables this vision. Their courses are well scoped and deep dive into the topics covered.

If you are looking to gain actionable knowledge in the realm of Devsecops these course are as good as it gets.

To touch on some areas of improvement I would have loved to see more challenges during the course labs.

I think this helps the student in both consolidating knowledge and keeping the focus and motivation.

The practical nature of the course means that in every lesson you have an actual working example. The plethora of different tools presented in the large numbers of labs throughout the course and different means of integrating them into various pipelines prepares you for many different real-world scenarios.

Well-structured and practical, tested real-world CDP concepts rather than just theory. The certification was challenging but fair. It required clear understanding of the DevSecOps concepts and best practices. Highly recommended.

One of the best organized course and it is very hands on. Support is great.

I was impressed with how in depth the course was in terms of building various chatbots and AI systems. I would like to see more coverage in terms of how to secure and attack agentic AI implementations.

Overall, I think the course provided a good value and would recommend it to others interested in AI Security.

Grate course and it’s continue all the required topics that will help you understand how to secure the ai and how you can defend your ai sytem

My experience with DevSecOps is rooted in a hands-on certification from Practical DevSecOps. Unlike theoretical courses, this was entirely lab-based. I learned how to integrate security tools directly into CI/CD pipelines so that security checks happen automatically with every commit.

Specifically, I worked with SCA tools to find vulnerable libraries, SAST tools to analyze source code for logic flaws, and DAST for runtime testing. For example, in one of the labs, I configured a pipeline where a build would fail automatically if a high-severity vulnerability was detected by OWASP ZAP and defect Dojo. This taught me not just how to use the tools, but how to tune them to minimize false positives and keep the pipeline efficient.

Great tutorial and introduction to DevSecOps. Recommended for anyone starting on their Devops/ DevSecOps career journey

The Software Supply Chain Security Expert (CSSE) certification was my fourth certification from Practical DevSecOps, and the experience has been consistent with my previous ones.

The courses are well structured and include hands-on labs, a course manual, and a certification attempt. The exams are multi-hour, lab-based assessments followed by a detailed report, which feels much closer to real-world DevSecOps and AppSec work than traditional MCQ-based exams.

This certification felt especially relevant given the growing focus on supply chain risks. Overall, I appreciate the consistent, practical approach and would recommend Practical DevSecOps to anyone looking for implementation-focused security training.

CAISP offers practical, real‑world coverage of AI security, including LLM threats, AI supply‑chain risks, and MITRE ATLAS–aligned defenses.

The labs are realistic and help build confidence in securing AI systems and RAG pipelines.

The course also dives into prompt‑injection attacks, model extraction, data‑poisoning risks, AI red‑teaming techniques, and defensive controls for production AI systems.

The hands‑on exercises, clear structure, and focus on real enterprise use cases make it a strong choice for anyone serious about AI security and responsible AI implementation.

The CAISP certification is a strong and relevant program for security professionals who want to build practical, hands-on expertise in AI and LLM security, rather than just theoretical understanding.

One of the biggest strengths of CAISP is its offensive and defensive balance. The course goes beyond policy-level discussions and dives into real-world attack techniques such as prompt injection, data leakage, model abuse, malicious model artifacts, and supply-chain risks in AI systems. This makes it especially valuable for AppSec, Red Team, Cloud Security, and AI Security engineers.

From a leadership perspective, CAISP helps build the mindset needed to assess AI systems as production-critical assets, not experimental tools. It improves the ability to ask the right security questions around data usage, model governance, third-party AI services, and compliance impact. This is particularly useful for professionals involved in vendor reviews, security architecture reviews, and risk acceptance decisions.

Final verdict:
✅ Highly recommended for security professionals working with or assessing AI and LLM-based systems.

Well designed course for learning AI Security in depth

The CAISP course was exactly what I needed, and much more than I expected! Half of the course is AI Engineering itself, learning deep details on how different AI applications are written; the other half is security around AI. Unlike many other training companies, all of the data is practical, and I was immediately able to have comprehensive discussions with AI experts, test AI code, and it helped me understand how AI works to enhance my usage of tools such as Cursor! The cost was very attractive compared to other AI trainings. based on this experience I've already booked additional trainings with practical-devsecops.

I recently completed the Certified DevSecOps Professional (CDP) online program, and it was a highly valuable learning experience. The course offered well structured, hands-on labs that helped me gain practical exposure to integrating security practices into the DevOps pipeline.

Through this certification, I was able to significantly improve my technical skills and build greater confidence in applying DevSecOps principles in real-world scenarios. The practical approach made it easier to connect theory with implementation.

One suggestion for further enhancement would be to provide continued access to the labs or course materials even after certification, as this would help learners refresh their knowledge and reinforce key concepts over time.

Overall, I highly recommend this certification to professionals who want to strengthen their DevSecOps capabilities and gain a deeper understanding of secure CI/CD practices.

I've recently passed the CTMP course and certification.
I would like to highlight that labs were almost useless as they are lacking feedback - no one actually checks your results and you are just shown the reference results to compare. Overall, the CTMP course is OK, you can learn about some nice instruments and basic mechanics, but the information is not deep enough to to look for threats in business (not technical) part of the applications - which, in my eyes, is more important.

This certificate provided me with a good understanding of cybersecurity threats introduced by the AI and to metigate them

I really liked that the course as well as the exam are hands on. I think it is much better way of learning. The labs worked very well, including the exam time. Writing the report took me much longer than I expected so small advice - allow enough time for it. And lastly, the team is incredible, very helpful! I really appreciated that. Thank you!

The CDP course was an absolute game-changer for my career. The course itself was very lab-intensive which I appreciated, with some theory included to help balance it out. The final exam was grueling, but definitely solidifies your knowledge and prepares you well for a successful specialization in DevSecOps.