Secure AI. Secure your career.
Every company is shipping AI, and very few people know how to secure it. That gap is your opening. We take security, cloud, engineering and risk professionals into AI security: you attack a deliberately vulnerable AI app, fix it and prove the fix, on your laptop first, then in AWS, Azure or Google Cloud.
Enrolment opens soon. Launch price $99 until 30 Nov 2026, then $299.
Your route into AI security
Most AI security work needs skills you already use every day. Find where you start; the course fills in the rest.
-
You areCloud security engineer
You move intoCloud AI security engineering
- Already yours
- IAM policies, posture management, guardrails as code
- What you add
- The AI controls of AWS, Azure and Google Cloud, and signing off AI launches in your cloud
- Modules
- M10 to M16, M20
-
You areCloud or platform engineer
You move intoSecure AI platform engineering
- Already yours
- Infrastructure as code, containers, networking
- What you add
- Private model endpoints, self-hosted models, isolation and egress control
- Modules
- M15, M26, M27
-
You areSOC or detection analyst
You move intoAI detection and response
- Already yours
- Alert triage, log analysis, incident playbooks
- What you add
- Prompt-injection traces, agent tool-call logs, AI incident response
- Modules
- M16, M23, M29
-
You areDeveloper or ML engineer
You move intoAI application security
- Already yours
- Code, APIs, CI pipelines
- What you add
- Prompt injection, output handling, RAG and MCP security, evals that block a bad release
- Modules
- M3 to M9, M30
-
You areAppSec engineer or pentester
You move intoAI red teaming
- Already yours
- Testing method, reporting, exploit thinking
- What you add
- Jailbreaks, agent hijacking, red-team reports for AI systems
- Modules
- M3, M17, M22
-
You areGRC or risk professional
You move intoAI governance and risk
- Already yours
- Frameworks, audits, policy
- What you add
- NIST AI RMF, ISO/IEC 42001 and the EU AI Act, mapped to real technical controls
- Modules
- M18, M28
-
You areIT, support or a new career
You move intoAI security analyst
- Already yours
- Curiosity and basic IT
- What you add
- Foundations from “what is a token”, labs on your laptop, a portfolio and a graded capstone
- Modules
- M0 to M2, M19
The programme in two minutes
AI now sits on both sides of the attack, and security teams are short of people who can defend it. See how the programme gets you there.
AI Security Engineer
One programme, beginner to advanced. A single vulnerable AI app runs through every module: you break it, fix it and prove the fix, all the way to a graded capstone.
-
Foundations
M0 to M2 How LLMs work, threat modelling
You leave with a threat model of the course’s vulnerable AI app
-
Break and fix any AI app
M3 to M6 Prompt injection, data leaks, output handling, RAG
You leave with a break-and-fix write-up with passing tests
-
Agents and MCP
M7 to M9 Agent tools, MCP servers, AI supply chain
You leave with a hardened agent and MCP setup with a permissions review
-
Secure AI in your cloud
M10 to M16 Managed models, guardrails, agent runtimes, detection on AWS, Azure or Google Cloud
You leave with hardened infrastructure code and detection rules for a cloud AI workload
-
Prove it and go advanced
M17 to M32 Red teaming, security evals in CI, governance, capstone
You leave with a red-team report, a graded capstone and a certificate of completion
No AI, machine-learning or maths background needed.
Latest research
Real incidents, how they happened, and the fix. Every claim linked to its source.
- How I'd become a cloud security engineer in 2027: the roadmap in 5 steps The full roadmap from the video: five steps, what to do and what to skip at each one, and free resources for every step. Plus when a certificate is worth it.
- 5 AWS settings attackers hope you skipped (10-minute check) Five account-level AWS settings that close the most common doors: S3 Block Public Access, IMDSv2 by default, root MFA, an all-Region CloudTrail trail and IAM Access Analyzer.
- AI security certifications in 2026: an honest comparison Every AI security certification we could verify in October 2026 (ISACA AAISM, CompTIA SecAI+, GIAC GAIPS, IAPP AIGP, OffSec OSAI and more): price, format, who it is for.
For teams shipping AI
App and agent security reviews, cloud AI platform security on AWS, Azure and Google Cloud, threat modelling and readiness plans. Every engagement is scoped by email first: tell us what you’re building, which cloud you’re on and your timeline. Team purchases of the course and invoices in your company’s name work the same way.
Questions
What is free, and what is paid?
Our research notes, video briefings, briefing emails and the free course lessons cost nothing. The full course is a one-time payment. Advisory work for teams is scoped by email.
Do I need an AI, machine-learning or maths background?
No. The course starts at “what is a token”, and every term gets a one-line plain meaning before it’s used. If you can follow a cloud console or a terminal, you can follow this.
Will the labs cost me money?
Every lab runs free on your laptop first. The cloud versions (AWS, Azure or Google Cloud) are optional; each prints its estimated cost before it deploys, uses budget alerts, and tears itself down.
Do you track visitors?
Only lightly, and Google only with your consent. Cloudflare Web Analytics counts page views without cookies. Google Analytics loads only if you click Accept on the cookie banner, and you can change that any time under Cookie settings. No advertising cookies. The privacy policy lists exactly what is stored, and why.
Are you affiliated with AWS, Microsoft or Google?
No. The Sec Guy is independent and not affiliated with or endorsed by AWS, Microsoft, Google or any other vendor named on this site.
Research briefings
One short email when we publish new research: a real incident, how it happened and the fix. Subscribers also get our Cloud & AI Security Quick Check PDF. Unsubscribe anytime.
We'll only use your email to send our research briefings and the guide you signed up for. See the privacy policy.
Questions and support
Research updates on LinkedIn and video briefings on YouTube.
Lab questions go to GitHub Discussions on the public lab repo. Anything else: [email protected].