practical-devsecops.comReviews of practical-devsecops.com

The course is well-designed with clear content and hands-on labs that help reinforce learning. The team is supportive and quick to respond. Lab access is available for 3 months, which encourages focused learning. Overall, a great resource for building DevSecOps skills.

I learned how to embed security to Devops and that was amazing part.

I completed the CCNSE certification after 120+ hours of intensive hands-on labs. This isn't your typical multiple-choice exam - you're actually attacking and defending live Kubernetes clusters, covering container escapes to supply chain attacks. What made this experience great: The practical approach is outstanding. Instead of memorizing theory, you're solving real-world security scenarios. The 6-hour practical exam was challenging but fair - it truly tests your ability to think like both attacker and defender. What they're doing exceptionally well: 1. Real-world lab environments that mirror actual threats 2. Comprehensive coverage of cloud-native security domains 3. Exceptional customer support throughout my extended learning journey - the team was patient and encouraging despite my stop-and-start approach due to personal challenges 4. Quality materials focusing on fundamental security principles 5. Teaching you to switch between attacker/defender mindsets Personal breakthrough: During the exam, I made zero progress for 1.5 hours and thought I'd fail. The breakthrough came when I embraced the attacker mindset: "What would an attacker do here?" Once I identified vulnerabilities, implementing defensive controls became clear. Key takeaway: Complex cloud-native security comes down to fundamentals - least privilege, defense in depth, secure design. Understanding attackers clarifies defensive strategies. This certification transformed my professional approach to cloud security with immediately applicable skills.

Complete course focus on the practice, covering all the domains.

Course has real world examples and scenarios, very clear and systematic approach.

The Certified Cloud-Native Security Expert course proved to be the best of the courses provided by Practical DevSecOps from those I've covered so far. The course serves as a good introduction to Cloud-Native tools, but also covers enough depth to allow those with some experience to potentially learn new things. With the variety covered as well, proactive learning after the course has been completed can be performed to further one's depth of knowledge in many areas, not only Cloud-Native specific. Since the field of Cloud-Native is quite large, not every topic is discussed exhaustively. This is evident in the attacking Kubernetes section, where not all attack paths are fully explored. Instead, the per-requisite knowledge needed to discover vulnerabilities and attack paths are provided, so that you can build on with that knowledge. The course should be approached with a pro-active mindset to make the best of it. This means asking questions and exploring topics / tools in further detail when you do not fully understand something. Although this is the approach that should be taken when learning, the course is somewhat lengthy, and it is easy to overrun the 2 months of lab time if you have a full time job. Some balance should therefore be taken with further exploration during the course. Where balance is not required is with note taking, as this will get you very far if you keep good notes! Overall, the course was educational. The first few chapters will cover very basic information, but later chapters will start to cover the depth I've mentioned.

The course provides everything you want to know about threat modelling. Great place to learn about all the methodologies and tools including open source & commercial.

The CDP course is extremely well structured and full of valuable content. It gave me the confidence and technical insight to understand and implement a wide range of security tools into our development workflow. These are tools that are actually used in real-world environments, and the course helped me see how to integrate them to strengthen our infrastructure security. This initiative came as part of our department’s ongoing security improvements, my manager recommended the course so I could actively support the implementation of new security platforms alongside other team members. The biggest change I’ve noticed is the way I now approach DevSecOps: I now think in terms of automated security checks, real-time scanning, and integrating these directly into CI/CD pipelines. The hands-on labs really make a difference. One thing to consider: if you're not too familiar with Linux, it might take you a bit longer to complete the exercises. But the course materials are clear, comprehensive, and designed to guide you through every step, both for learning and passing the certification exam. Highly recommended for anyone looking to upskill in DevSecOps and apply it in a real-world setting.