practical-devsecops.com Opiniões 

As AI rapidly reshapes the threat landscape, mastering AI security is now essential for every cybersecurity architect aiming to future-proof their defenses. The Practical DevSecOps official CAISP training offers a high-quality, hands-on experience tailored for real-world challenges.

Too rich, I like it so much, it covers all DevSecOps important stages and best practices .
I strongly recommend it

The platform is amazing, and the labs are amazing.

But the content is bad, there is so much replicate in it, you don't need to told me each time how to go the pipeline and edit just go to the point and minimzie the wasted time, rather than told me in every lab to use one new feature like allow failure or when and for each i will start a lab and create the pipeline and .....

Just create a lab named 'Pipeline Features' and summarize all the features that I can use. Then, make a scenario where I need to use all of them.

Amazing course , especially for beginners ..
It really helped in understanding different CI/CD platforms and gave an understanding on plenty of tools ..
Highly recommend this course and looking forward to explore other courses too ..

The course is a proper introduction to the world of DevSecOps and everything-as-code security. I highly recommend the course to security professionals as well as software engineers.
The exam is hands-on, challenging and the certification earned never expires!

I've been in Software Engineering for 12 years and in Security for 5 of those. I thought the course did a greta job in reinforcing concepts I already knew as well as presenting information I hadn't considered or learned before. It is definitely worth taking for someone just getting into APIs and API Security regardless of how long you've been in the industry. The labs were very useful and I was a big fan of the lab environment that is provided.

That said, the course was entirely narrated by a generated voice which left it feeling unpolished, especially when its mispronouncing common terms and acronyms. I think the course would feel much more professional if a real narrator could be brought on to read the content. Not a deal breaker by any means, but it definitely took away from my focus.

I also didn't realize that the exam was an actual practical exam, not a standardized test. That could be my own fault as I may have skipped through that part of the intro. I ultimately ended up thinking that this was better than a regular standardized test, but I would have gone through the course a little differently had I known earlier. Pay special attention to the labs!

I will be recommending this course to my colleagues and would recommend to anyone reading this review looking to get more hands on with the full breadth of API Security and development.

The experience with the instructor was very thorough. All the preparation for the final exam was meticulous and with the right personal reading, it ensured your success in the final exam.

The lab courses and practical labs were useful. I liked how the course had set up a lab for the participants to play around. The courses are up to date and they are real world scenarios.

it was pretty good course and exam

I was one of the early "Alpha" or "Beta" students, and at the time, the course was still under development, with content released progressively—chapter by chapter. As such, I chose to wait until the course was fully completed before beginning. After the course was finalized, I received a follow-up email from Practical DevSecOps, which showed their effort in keeping early students updated.

During my learning journey, I noticed that course materials were occasionally moved or updated. If you're planning to enroll, do be aware that the course is relatively new and actively maintained. The team frequently refreshes and improves the content, which is a positive sign of commitment to quality. Just keep in mind that you might see your course progress drop (e.g., from 100% to 90%) when new content is added—this is normal and reflects ongoing updates, not missing progress.

In terms of content, this course is one of the few that offers hands-on, practical experience in this domain. Personally, I found it worth the investment. Although I later discovered a cheaper alternative, I have no regrets about choosing this program.

Key topics I learned include:

Building Large Language Models (LLMs)

Implementing Retrieval-Augmented Generation (RAG)

Checking for outdated packages and dependencies

Detecting toxicity and evaluating model accuracy

Most importantly: vulnerability scanning using a variety of tools, and applying appropriate patches

Overall, it’s a solid course for those seeking hands-on skills in secure AI development and operations.

Great content, for beginner to mid-level DevSecOps engineers, exam could've been much better TBH

The labs were the difference makers. concepts got easy to understand using labs

Great content, easy to understand, great applicability

I recently completed the Certified DevSecOps Professional (CDP) certification, and I found it to be an exceptionally hands-on and well-structured program that delivers both breadth and depth across modern DevSecOps practices.

The course stands out for its practical, lab-driven approach. Rather than just theory, it dives into real-world tools and scenarios — including CI/CD pipeline integration, container security, static/dynamic analysis, Infrastructure-as-Code (IaC) scanning, and runtime security monitoring. Each module is supported with detailed walkthroughs, example scripts, and guided labs, which made the learning process not only interactive but also applicable to real environments.

What I appreciated most was the quality and completeness of the training materials. The documentation is thoughtfully organized and rich with diagrams, code snippets, and tool comparisons, making it easy to reference even after the course. Whether you're new to DevSecOps or looking to strengthen your implementation knowledge, the materials provide a solid foundation.

The certification reinforces security as a shared responsibility across development and operations, emphasizing automation and continuous security integration. Overall, it’s a valuable investment for professionals aiming to build or enhance secure DevOps pipelines in their organization.

Whether you are just bootstrapping your Supply Chain Security knowledge or working towards increasing the maturity of your org's processes this course is highly recommended!

As with most PDSO courses, this was jam packed with materials, hands on practice, tool exposures, threat modeling, attacks & defenses, and related framework information.

The coursework can mostly be tied to Code, Container, Cluster, and Cloud (aka “The 4C’s of Cloud Native Security).

There were a ton of cool things in this course. All of the hands-on tool exposure is a given. Besides that, I found the concept of software provenance to be a nice escalation from the SBOM-centric state that the industry has embraced (particularly after log4j).

It was also really cool to get increased exposure to frameworks such as SLSA, NIST SSDF, SCVSD, OpenSSF S2C2F, SCITT, DORA, and CII.

I have recently completed CAISP course. Well structured course! Cover vast areas include Red team activities, mitigations, security best practices. Best course for AI security.

The certification boosted my confidence. Previously, my experience was limited to Jenkins pipelines and a few licensed security tools. Through the labs, I gained practical hands-on to GitLab CI/CD, GitHub Actions, and a variety of FOSS tools. I also developed a much deeper understanding of how CI/CD and DevOps work in real-world environments.
The standout aspects of the program were the labs, the environment setup, and the support channel. Attempting the practice exam twice really helped me prepare for the certification exam.
One suggestion for improvement would be to include more challenges and tasks. I found that solving problems without relying on hints was especially valuable for my learning.
This certification has a positive impact on my organization’s AppSec vertical. We now have the capability to integrate security tools directly into project teams’ CI/CD pipelines.

CAISP is a great introductory course of AI Security. Great for anyone who is interested to learn the overall AI security fundamentals like LLM, RAG, NLP, prompt injection, and more as well as get certified with hands on labs.

The CDP course provides a great hands-on lab environment and well-structured material, making it ideal for learning and practicing DevSecOps in real-world scenarios.

The CAISP course provides a great combination of theory and practice. It covers various aspects of AI security.