Recommended Paths: AI Secure Code Training
This article describes our recommended paths for AI-focused learning, covering secure AI/LLM development, agentic engineering, AI-augmented development, MCP application security, and hands-on AI/ML challenges.
Practical Agentic Engineering for Software Teams
Practical Agentic Engineering for Software Teams teaches developers how to design, build, and secure AI-powered software agents that can reason, use tools, collaborate, and complete complex development tasks. Through hands-on lessons, you’ll learn best practices for AI-ready repositories, multi-agent systems, agent communication, security boundaries, and evaluating coding agents for reliability and performance.
Duration: 1hr 10 mins
| Lesson Title | Lesson Type |
| AI-Ready Repositories: AGENTS.md, Agent Skills, and Repo Contracts | Break/Fix |
| Secure Multi-Agent Orchestration | Break/Fix |
| Trust Boundaries in Agent-to-Agent (A2A) Communication | Break/Fix |
| Enforcing Environment Boundaries for AI Agents | Break/Fix |
| Evals and Benchmarks for Coding Agents | Break/Fix |
Modern AI Development Techniques
Modern AI Development Techniques introduces developers to emerging practices including vibe coding, AI agents, and the Model Context Protocol (MCP). Through focused, hands-on lessons, learners will master the art of integrating AI into everyday development workflows and build more intelligent, more efficient systems using modern AI techniques and tools (such as Guardian AI).
Duration: 1hr 6 mins
| Lesson Title | Lesson Type |
| Video | |
| AI/LLM | Prompting Best Practices | Video |
| AI/LLM | Vibe Coding Rule Files | Video |
| AI/LLM | Vibe Coding Guardian | Video |
| AI/LLM | Intro to AI Agents | Video |
| AI/LLM | AI Agent Implementation | Video |
| AI/LLM | Introduction to MCP | Video |
| AI/LLM | MCP Architecture | Video |
AI/ML Tournament Challenges | Cybersecurity Awareness Month 2026
Three AI challenges and two ML challenges make up this path, ready for Cybersecurity Awareness Month.
Duration: 1hr 55 mins
| Lesson Title | Lesson Type |
| AI/ML Tournament Challenge | The Footnote Takes Control | Break/Fix |
| AI/ML Tournament Challenge | Cleared Cell, Live Token | Break/Fix |
| AI/ML Tournament Challenge | Your Bot Knows My Secrets | Break/Fix |
| AI/ML Tournament Challenge | Poison the Draft | CTF_Challenge |
| AI/ML Tournament Challenge | Deserializing Checkpoints | CTF_Challenge |
AI/LLM Security
Deep dive into AI/LLM security. Starting from foundational topics, working through the OWASP Top 10 threats, and touching on critical business considerations when working with Generative AI.
Duration: 4hr 17 mins
| Lesson Title | Lesson Type |
| Introduction to AI/LLM Security | Video |
| AI/LLM | Prompt Injection | Break/Fix |
| AI/LLM | Sensitive Information Disclosure | Break/Fix |
| AI/LLM | Supply Chain Vulnerabilities | Break/Fix |
| AI/LLM | Data and Model Poisoning | Break/Fix |
| AI/LLM | Improper Output Handling | Break/Fix |
| AI/LLM | Excessive Agency: Human in the Loop | Break/Fix |
| AI/LLM | Excessive Agency: Prompt Security | Break/Fix |
| AI/LLM | Excessive Agency: Insecure Plugin Design | Break/Fix |
| AI/LLM | Hidden Context Exposure | Break/Fix |
| AI/LLM | Vector and Embedding Weaknesses | Break/Fix |
| AI/LLM | Misinformation | Break/Fix |
| AI/LLM | Unbounded Consumption | Break/Fix |
| AI/LLM Security Toolchain | Video |
| Secure Development Leveraging LLMs | Video |
| LLM Enterprise Security | Video |
| Governance for AI/LLM Systems | Video |
| AI/LLM | Model Theft | CTF_Challenge |
AI Augmented Development
AI Augmented Development describes any part of the Software Development Lifecycle that leverages AI tooling. Developers are using AI to help them create, write, test, and deploy code. This course covers Vibe Coding, AI agents, and Model Context Protocol (MCP) systems. Through focused, hands-on lessons, learners will understand how AI can integrate into everyday development workflows to build faster, more intelligent, and more efficient systems.
Duration: 1hr 15 mins
| Lesson Title | Lesson Type |
| Vibe Coding In Professional Environments | Break/Fix |
| Prompting Best Practices | AI_Skills_lab |
| AI Instruction Files | Break/Fix |
| Implementing an AI Agent | Break/Fix |
| MCP Application Security | Confused Deputy | Break/Fix |
MCP Application Security
This course covers the secure development of Model Context Protocol (MCP) applications. Learners will work through a series of short, hands-on lessons covering security and access control in MCP by exploring and remediating a vulnerability in an MCP server or client.
Duration: 1hr 5 mins
| Lesson Title | Lesson Type |
| MCP Application Security | Insufficient Authorization | Break/Fix |
| MCP Application Security | Token Passthrough | Break/Fix |
| MCP Application Security | Resource Prompt Injection | Break/Fix |
| MCP Application Security | Confused Deputy | Break/Fix |
| MCP Application Security | Sampling Abuse | Break/Fix |