practical-devsecops.com

I had a very positive experience with…

I had a very positive experience with the DevSecOps certification. The training was practical, well-structured, and focused on real-world security integration in CI/CD pipelines. I especially liked that the labs were hands-on and helped me apply concepts such as SAST, DAST, SCA, and secure pipeline practices in a realistic way. It was a valuable learning journey and a useful certification for anyone who wants to strengthen their DevSecOps and application security skills.

As a Security Lead with over 20 years…

As a Security Lead with over 20 years of experience, I found the CAISP exam to be a strong and practical assessment of real-world security skills. The exam had a good balance of theory and hands-on practical components, which made it more meaningful than a purely knowledge-based certification. The six-hour lab was challenging but fair. It tested not only technical understanding, but also the ability to analyse scenarios, apply security concepts, make decisions under time pressure, and demonstrate practical competence. I appreciated that the exam reflected situations security professionals are likely to face in real environments, rather than only focusing on memorised definitions. The theory section was also useful, as it covered important security principles and helped validate broader knowledge across governance, risk, controls, and applied security practices. The practical lab was the highlight for me because it required proper thinking, structured troubleshooting, and clear application of security controls. Overall, CAISP is a valuable certification for professionals who want to demonstrate both conceptual understanding and hands-on capability. I would recommend it to security practitioners, architects, engineers, and leads who want a certification that feels relevant to day-to-day security work.

CAISP a great course to start with on learning AI security

I recently passed the CAISP certification and can attest that it is a fantastic course to start with on securing AI systems albeit with still some room to improve. The hands-on lab-oriented approach is a good way to learn about vulnerabilities and weaknesses of AI systems and then how to protect against the threats. The shortcoming of the course is that it is based totally on local LLMs and doesn't cover LLMs as a cloud hosted service (OpenAI, Amazon Bedrock etc.). It doesn't go too much into the platform layer on top of the model layer and how to secure them. MCP and AI Agents lesson is also too short IMO, and more depth would have been good. Finally replicating the labs locally was a bit challenging as the Python version used is 3.10 which is a bit old now and some Python modules are not compatible. My suggestion for PDSO would be to upgrade the labs to run on Python 3.12 or greater. Nevertheless, AI security is a fast-emerging field, and this course will set you on the journey to securing AI systems.

I’ve seen many certifications over the…

I’ve seen many certifications over the years, and only a few really stand out. CAISP is one of them. The hands-on labs made the experience real for me. Working through real scenarios, instead of just reading about them, helped me remember what I learned much better than theory alone. The exam was challenging in a good way. It checks if you truly understand the material, not just if you memorized it. I finished the program feeling sharper, more confident, and ready to use my new skills right away. If you’re unsure about it, I recommend giving it a try. It’s definitely worth it.

A timely and well-pitched course that…

A timely and well-pitched course that cuts through the AI hype and jargon, distilling what matters most for anyone looking to understand the risk and security dimensions behind it.

Very easy to follow course and great…

Very easy to follow course and great for teaching what is actually practical in implementation!

Worth the certification

Smooth process. No drama. And honestly, a solid reminder of how much I'd quietly let rust. You think you know the concepts — until an exam question makes you second-guess yourself for 45 seconds on something you've done in production. That's not a bad thing. That's the point. What I actually got out of it wasn't just the cert. It was the forced revisit — threat modelling, secure SDLC, compliance frameworks — laid out in a way that connected the dots I'd been treating as separate problems. If you're deep in the DevSecOps space and haven't formalised it with a cert yet, perhaps it's time. Not because employers demand the paper. But because structured revision exposes the gaps you didn't know you had. Worth every hour.

The Highlights:

The Highlights: Mindset Shift: Moves beyond patching bugs to "Secure by Design" using the 8 Security Principles. Practical & Modern: Deep dives into Kubernetes (K8s) and AWS S3 threat models using Attack Trees. Actionable Tools: Mastered STRIDE and DFDs for identifying risks at the whiteboard, not just in the code.

Excellent Course and Value for Money

Most certifications make you feel competent. This one tests whether you actually are. The Practical DevSecOps Certified Threat Modeling course strips away the illusion that reading about security equals understanding it. It stands out because it moves into territory most programs don’t touch such as using tools like pyTM for treating threat modeling as code. Overall, great labs and curriculum which is highly pertinent in application security.

I have around 4+ years of experience in…

I have around 4+ years of experience in Application Security, working on SAST, DAST, SCA, and VAPT activities. In my current role, I’ve been involved in identifying vulnerabilities, supporting remediation, and working closely with development teams to improve application security posture. What made my experience great was the opportunity to work on diverse applications and learn different security tools and methodologies. The team collaboration was strong, and there was good support from senior members whenever needed. The company is doing well in terms of adopting security practices and integrating them into the development lifecycle. There is a clear focus on improving security awareness and maintaining compliance standards. One area for improvement could be increasing automation in security testing and providing more advanced training opportunities to keep up with evolving threats.

Good and straightforward courses, but do they want you to become better?

Good and straightforward courses, with payloads that prove to be tested before being released. But, very frustrated from the exam feedback. While I managed to solve the exam, one step I couldn't solve, and I wanted to know what I missed ; the answer from Practical DevSecOps? "we don't disclose". When I give lessons and trainings, I do it for my students so they learn, they become better. Not to hide them what they did wrong and where they could improve. Pretty unprofessional in my opinion, to hide what could be improved. Also, the fact that courses must rely on ready machines before being able to start reading the course, is not really optimized, and it could be improved.

Practical and insightful course

I found the CAISP exam demanding but extremely useful, with strong content and a well-structured format. I’d definitely recommend it to anyone looking to boost their AI security knowledge in a practical way.

Well structured.

Hands-on, real-world cloud-native security—not just theory

The Certified Cloud Native Security Expert (CCNSE) by Practical DevSecOps is refreshingly practical—labs and real attack/defense scenarios make Kubernetes, containers, and cloud-native security concepts stick. The exam tests real capability, not just theory, which is a big plus. The depth can feel intense at times, and a gradual progression or pacing is required to make the learning experience smoother. Lab access duration could have been longer given the depth. Overall, a solid, no-nonsense program if you’re serious about applying cloud-native security in real-world environments.

Good content!!

Great experience

The 24/7 support made the entire experience great. Additionally, the content was good, but I think it needs to be more up to date and include more attacks (I already emailed the company about this, and they were open to and appreciative of my feedback). Overall, I would definitely recommend this certificate to my colleagues.

I took the CAISP course

I took the CAISP course. The labs were great and really helped me to up skill myself. Great labs and customer support.

CDP Certification

I did the CDP certification and I found it complete. The learning goes through several lessons through videos, followed by practical exercises. I discovered several tools that will undoubtedly be an add up for my work and my pipelines.

It was an incredible course

It was an incredible course. I gained useful knowledge and practical skills, which I can use in my day-to-day work. Labs were detailed enough. I'm happy that I purchased this course, and plan to purchase other Practical DevSecOps courses, as they are needed for my career.

The Certified API Security Professional

The Certified API Security Professional provide a both knowledge to understand the API security and the practice to exercise the skills that can be applied in real world