Your cloud is exposed. Your AI is next.
Hands-on training for engineers who have to secure the AI their company ships. You attack a deliberately vulnerable AI app, then fix it: on your laptop first, then in AWS, Azure or Google Cloud.
Pre-sale opens 1 Nov. Founding price $99 until 30 Nov 2026, then $299.
- 33 modules In 6 parts, from “what is a token” to a graded capstone. See the curriculum
- 3 clouds AWS, Azure or Google Cloud. Pick one or all, all included. How the streams work
- $0 labs Every lab runs on your laptop first. The lab code is public on GitHub. Open the lab repo
- 25 free lessons Try the course before you pay anything. See the free lessons
AI Security Engineer
Defender-first and built from zero. One vulnerable AI app runs through the whole course: you break it, fix it and prove the fix, from the first module to the capstone.
-
Foundations
M0 to M2 How LLMs work, threat modelling
You leave with a threat model of the course’s vulnerable AI app
-
Break and fix any AI app
M3 to M6 Prompt injection, data leaks, output handling, RAG
You leave with a break-and-fix write-up with passing tests
-
Agents and MCP
M7 to M9 Agent tools, MCP servers, AI supply chain
You leave with a hardened agent and MCP setup with a permissions review
-
Secure AI in your cloud
M10 to M16 Managed models, guardrails, agent runtimes, detection on AWS, Azure or Google Cloud
You leave with hardened infrastructure code and detection rules for a cloud AI workload
-
Prove it and go advanced
M17 to M32 Red teaming, security evals in CI, governance, capstone
You leave with a red-team report, a graded capstone and a certificate of completion
Built for SOC analysts, cloud and AppSec engineers, developers, GRC and platform teams. No AI or maths background needed.
Free videos and notes
Cloud & AI Security in 5 Minutes: one real incident per episode, how it happened, and the fix.
- 6 Ways Hackers Hijack Your AI Agent Six real cases where an error log, a contact form, a PDF, a GitHub issue, an email and a browser extension hijacked AI agents, and the five fixes that stop all of them.
- Your Bucket Is Private. Your Data Isn't. Six real ways data leaks from S3 buckets that look locked down, from public objects to CloudFront and leaked keys, and how to close each one.
- Your Cloud Is Exposed. Your AI Is Next. The trailer for Cloud & AI Security in 5 Minutes: what's coming every week across AWS, Azure, GCP, OCI and AI agents, and the free Cloud & AI Security Quick Check.
For teams shipping AI
App and agent security reviews, cloud AI platform security on AWS, Azure and Google Cloud, threat modelling and readiness plans. Every engagement is scoped by email first: tell us what you’re building, which cloud you’re on and your timeline. Team purchases of the course and invoices in your company’s name work the same way.
Questions
What is free, and what is paid?
Videos, notes, checklists and the free course lessons cost nothing. The full course is a one-time payment. Advisory work for teams is scoped by email.
Do I need an AI, machine-learning or maths background?
No. The course starts at “what is a token”, and every term gets a one-line plain meaning before it’s used. If you can follow a cloud console or a terminal, you can follow this.
Will the labs cost me money?
Every lab runs free on your laptop first. The cloud versions (AWS, Azure or Google Cloud) are optional; each prints its estimated cost before it deploys, uses budget alerts, and tears itself down.
Do you track visitors?
Only lightly, and Google only with your consent. Cloudflare Web Analytics counts page views without cookies. Google Analytics loads only if you click Accept on the cookie banner, and you can change that any time under Cookie settings. No advertising cookies. The privacy policy lists exactly what is stored, and why.
Are you affiliated with AWS, Microsoft or Google?
No. The Sec Guy is independent and not affiliated with or endorsed by AWS, Microsoft, Google or any other vendor named on this site.
Get the free Quick Check
25 checks that catch the mistakes behind common cloud and AI breaches. The PDF lands in your inbox, plus a short note when a new video is out or the pre-sale opens. Unsubscribe anytime.
We'll only use your email to send the checklist and new-video notes. See the privacy policy.
Follow and ask
New episodes on YouTube, short reels on Instagram, and posts on LinkedIn, X and Threads.
Lab questions go to GitHub Discussions on the public lab repo. Anything else: [email protected].