practical-devsecops.comReviews of practical-devsecops.com

Detailed course. Lab helps in the overall understanding.

The course covered many topics which was good. After the expiry of labs, access to lab commands should be given to students. I don't know why the access to commands was also revoked. More practice sessions and scenarios should be introduced in the course so that students can get a better understanding of attacking comtainers concepts. I would say reduce few topics and introduce more practice sessions. For eg. Incident response and forensics can be removed and instead of that more scenarios on how to attack a container can be introduced.

Practical DevSecOps professional exam teaches us how to implement security in pipeline. It is useful for professional developer as well as entry level developer.

PDSO CTMP certification provides a solid foundation of threat modeling methodologies. The course has a higher degree of focus on continuous organizational implementation over conducting the threat enumeration and risk calculation exercises, which is why I would recommend prospective students to also get familiar with or review threat/attack frameworks like those provided by MITRE and OWASP, this will complement the course content beautifully. Remember that you will NOT come out an expert threat modeller by just doing this course, the learning does not end with you passing the exam, it will only be valuable if you continue beyond. Course structure ultimately delivers value through smooth labs and knowledgeable instruction, you may feel lost in the initial chapters but it eventually comes together. Remember to take notes and ask for help on their Mattermost forum. An underrated aspect of the course was the webinars, they invite industry experts to talk about TM and other DevSecOps stuff, some of the recordings are accessible through their YouTube channel.

The certification was easy to follow and understandable. As a dev engineer I was able to refresh on best security practices and learn new tools to improve security in our platform. After taking this course I am more security aware and shifted left with testing and security.

I recently completed the Certified DevSecOps course, and it was a fantastic experience! The program serves as an excellent introduction to the world of DevSecOps, covering key topics such as GitLab, CI/CD pipelines, SAST, DAST, SCA, Docker, and Inspec. It’s highly beginner-friendly and offers a very practical, hands-on approach, making it both engaging and operationally useful. The exam was one of the highlights—it was task-based and really enjoyable, helping to reinforce the skills learned during the course. That said, I feel the course could improve by providing more in-depth theoretical explanations of how these tools and concepts work behind the scenes. Additionally, diving into more advanced use cases for common tools would make it even more valuable for learners who want to deepen their knowledge. Overall, it’s a great starting point for anyone new to DevSecOps and looking to build a solid foundation. Highly recommended!

The Practical DevSecops Certified Threat Modeling Professional (CTMP) is a great vendor-neutral threat modeling certification. One of the best certifications that I obtained in my professional career. Study material is good, but the PDF contains several grammatical or typing errors. The exam is challenging as there are 5 challenges of medium difficulty to tackle within a limited duration. The exam environment is sometimes unstable, but the team has provided me excellent support.

My overall experience with completing the Certified DevSecOps Professional course and exam was really good. I like the learning platform had a good interface, the labs rans smoothly, and it was easy to work on the lessons as I had time. Some of the content seemed to have AI-generated speech, which occasionally mispronounced an acronym or initialism, and this may cause confusion for some. After completing the course, exam, and exam report, I feel confident in my understanding of DevSecOps tools and how to implement them.