practical-devsecops.comReviews of practical-devsecops.com

The Certified Cloud-Native Security Expert course proved to be the best of the courses provided by Practical DevSecOps from those I've covered so far. The course serves as a good introduction to Cloud-Native tools, but also covers enough depth to allow those with some experience to potentially learn new things. With the variety covered as well, proactive learning after the course has been completed can be performed to further one's depth of knowledge in many areas, not only Cloud-Native specific. Since the field of Cloud-Native is quite large, not every topic is discussed exhaustively. This is evident in the attacking Kubernetes section, where not all attack paths are fully explored. Instead, the per-requisite knowledge needed to discover vulnerabilities and attack paths are provided, so that you can build on with that knowledge. The course should be approached with a pro-active mindset to make the best of it. This means asking questions and exploring topics / tools in further detail when you do not fully understand something. Although this is the approach that should be taken when learning, the course is somewhat lengthy, and it is easy to overrun the 2 months of lab time if you have a full time job. Some balance should therefore be taken with further exploration during the course. Where balance is not required is with note taking, as this will get you very far if you keep good notes! Overall, the course was educational. The first few chapters will cover very basic information, but later chapters will start to cover the depth I've mentioned.

The course provides everything you want to know about threat modelling. Great place to learn about all the methodologies and tools including open source & commercial.

The CDP course is extremely well structured and full of valuable content. It gave me the confidence and technical insight to understand and implement a wide range of security tools into our development workflow. These are tools that are actually used in real-world environments, and the course helped me see how to integrate them to strengthen our infrastructure security. This initiative came as part of our department’s ongoing security improvements, my manager recommended the course so I could actively support the implementation of new security platforms alongside other team members. The biggest change I’ve noticed is the way I now approach DevSecOps: I now think in terms of automated security checks, real-time scanning, and integrating these directly into CI/CD pipelines. The hands-on labs really make a difference. One thing to consider: if you're not too familiar with Linux, it might take you a bit longer to complete the exercises. But the course materials are clear, comprehensive, and designed to guide you through every step, both for learning and passing the certification exam. Highly recommended for anyone looking to upskill in DevSecOps and apply it in a real-world setting.

I recently completed the Certified Cloud-Native Security Expert (CCNSE) course from Practical DevSecOps, and it was an excellent experience. The course provided me with a deep understanding of how Kubernetes works, how to identify and exploit misconfigurations, and most importantly, how to secure a Kubernetes cluster against such attacks. Thanks to this course, I’ve gained hands-on experience that directly improved my capabilities in securing cloud-native environments. This knowledge has been incredibly valuable not only for my personal growth but also for my team and stakeholders who rely on secure and resilient infrastructure. One of the most significant changes after completing the course is my ability to proactively assess and harden Kubernetes environments, which has helped improve our overall security posture. Highly recommended for anyone seeking to acquire practical skills in cloud-native security. — Volodymyr

Certified Threat Modeling Professional (CTMP) online self-paced training is an awesome platform to start with right from the basics of threat modeling through all the advanced tools and techniques used for threat modeling. This certification helped me achieved the required knowledge to start performing threat modeling right from the beginning and collaborate with teams. The labs deployed are a great platform to practice the tools and gives a full-fledged practical experience. The training might seem stretched and long but it is worth learning the interesting tools and techniques explained in simpler terms. I would also take a moment to appreciate the support and help I received from the Mattermost channel, everyone is friendly and provides instance support whenever needed. Talking about the examination, if one covers all the videos and labs properly from the training, one is good enough to appear and pass the examination. Also, the examination is based on practical approach which is the best part of this certification.

Certified API Security Professional (CASP) course was great! It enabled me to discover and learn about the technical aspects of API Security. The delivery of the theory content was on point and the hands-on lab helps to apply what was taught which helped the learning greatly. This course helped to boost my knowledge working as a security engineer and i highly recommend this to anyone who is interested or is in the application security space.

The Practical DevSecOps certification is an excellent starting point for anyone new to the world of DevSecOps. The course material is structured in a way that’s easy to understand, even for beginners, and it strikes a great balance between theory and hands-on learning. The labs are well-designed, offering practical scenarios that reinforce key concepts and make the learning process both engaging and effective. The exam aligns closely with the course content, testing not just memorization but also your ability to apply what you’ve learned in real-world scenarios. It challenges you to think independently without feeling overwhelming, which is ideal for those starting their journey in this field. Overall, this certification provides a solid foundation in DevSecOps and is a great investment for anyone looking to build secure software development practices from the ground up.

Its course content is rich and easy to get started with. I think it's fantastic! Let me know if you'd like a more formal or informal tone!