practical-devsecops.comReviews of practical-devsecops.com

The Certified API Security Professional (CASP certification) provided me with a structured and hands-on approach to mastering API security. It enabled me to validate and strengthen my expertise in securing APIs, identifying vulnerabilities, and implementing robust security controls. Several stakeholders benefited from this achievement. Developers, DevOps teams, security engineers, and compliance officers will be target audience as it directly contributes to enhancing the security posture of our applications and services. The most significant change has been a proactive approach to API security. With its practical exam, you can benefit from if you study the syllabus that comes with the course. I totally recommend this certification.

I recommend the CDP course to anyone wanting to start learning about DevSecOps and how to add security controls as part of the SSDLC. Passing the exam will validate that the student is ready to start applying the knowledge in a professional environment. For DevSecOps professionals, already in the field for a couple of years, the course might be too foundational.

If you want to become a DevSecOps professional, CDP is a course you should consider. It is highly beneficial for enhancing your career expertise, offering materials and hands-on labs for trial and error learning. Overall, this course is highly recommended.

This is really helpful if you are taking the DevSecOps path.

I had a very good experience with the Practical DevSecOps team. The support team was very helpful and prompt in answering any doubts. The CDP course was well planned and thorough for any first time learner. The hands on labs were pretty good, the main thing was there were plenty of labs with various tools. Regarding the exam, its a hands on exams with quite challenging tasks which would require some thinking and effort. Overall it was a good learning experience. I think as of now its the best course to learn DevSecOps.

very good content I recommend it

The course started reviewing basic concepts I was already familiar so that I can confirm they teach properly. Then I have been introduced to DevSecOps' specific topics having to practice a lot so that I have been able to understand well and memorize. The final exam is very serious and it took 6 hours to do the lab exam plus another 2-3 hours to prepare the final document to submit. I can sincerely say this is not definitely a "pay per certificate" course, you have to deserve your certificate.

PDSO CTMP certification provides a solid foundation of threat modeling methodologies. The course has a higher degree of focus on continuous organizational implementation over conducting the threat enumeration and risk calculation exercises, which is why I would recommend prospective students to also get familiar with or review threat/attack frameworks like those provided by MITRE and OWASP, this will complement the course content beautifully. Remember that you will NOT come out an expert threat modeller by just doing this course, the learning does not end with you passing the exam, it will only be valuable if you continue beyond. Course structure ultimately delivers value through smooth labs and knowledgeable instruction, you may feel lost in the initial chapters but it eventually comes together. Remember to take notes and ask for help on their Mattermost forum. An underrated aspect of the course was the webinars, they invite industry experts to talk about TM and other DevSecOps stuff, some of the recordings are accessible through their YouTube channel.