Hands-on training that teaches teams to securely develop and deploy AI and LLM applications. Learn how to prevent prompt injection, data leakage, and other critical risks from the OWASP Top 10 for LLMs.
AI-driven applications, especially those powered by Large Language Models (LLMs), are rapidly transforming products, developer workflows, and customer experiences.
But these systems introduce unique security risks that traditional AppSec practices don’t address.
This 2 days hands-on course teaches developers, AppSec engineers, and architects how to design and build secure AI/LLM applications. Participants learn to defend against prompt injection, insecure output handling, model poisoning, data leakage, and other risks from the updated OWASP Top 10 for LLM Applications 2025.
Through labs and real-world case studies, attendees gain practical skills for deploying safe, trustworthy, and compliant AI capabilities at scale.
This course helps organisations confidently integrate AI technologies by addressing the emerging security challenges associated with LLM-powered systems.
You will learn to:
Participants will be able to:
This course is designed for anyone building, integrating, or securing applications that use large language models (LLMs):
To fully benefit from this course, participants should have:
Part I: Foundations of AI and LLM Security
Part II: Threat Modeling and Architecture
Part III: The OWASP Top 10 for LLM Applications 2025
Part IV: Secure AI/LLM Design and Governance
This instructor-led workshop is available for both onsite or online deliveries. It combines focused technical instruction with practical, hands-on labs in a secure AI/LLM Lab environment. Participants engage in guided exercises, real attack simulations, and collaborative problem-solving, ensuring the skills learned can be applied immediately to real-world AI and LLM application development.The course combines theory and hands-on practical exercises.
• Live instructor-led sessions (online or in-person)
• 365 days access to slides and course materials via Cycubix Academy
• Specific labs for secure coding for AI and LLM
• Certificate of Completion
• Option to customise content for organisational objectives
Senior Official ISC2 Authorised Instructor for CISSP, CCSP, CSSLP and SSCP
Fabio Cerullo is the Managing Director of Cycubix. He has extensive experience in understanding and addressing the challenges of cybersecurity from over two decades working in and with organisations across a diverse range of industries – from financial services to government departments, technology and manufacturing.
Fabio Cerullo is a Senior Authorised Instructor for ISC2,the global leader in information security education and certification. Fabio has delivered training to thousands of IT and security professionals world wide in cyber, cloud, and application security. As a member of ISC2 and OWASP organisations, Fabio helps individuals and organisations strengthen their application security posture and build fruitful relationships with governments, industry and educational institutions.
Fabio is a regular speaker and delivers training at events organised by leading Cybersecurity associations including OWASP and ISC2. He holds a Msc in Computer Engineering from UCA and the SSCP, CISSP, CSSLP & CCSP certifications from ISC2.
Fabio Cerullo is the Managing Director of Cycubix. He has extensive experience in understanding and addressing the challenges of cybersecurity from over two decades working in and with organisations across a diverse range of industries – from financial services to government departments, technology and manufacturing.
Fabio Cerullo is a Senior Authorised Instructor for ISC2,the global leader in information security education and certification. Fabio has delivered training to thousands of IT and security professionals world wide in cyber, cloud, and application security. As a member of ISC2 and OWASP organisations, Fabio helps individuals and organisations strengthen their application security posture and build fruitful relationships with governments, industry and educational institutions.
Fabio is a regular speaker and delivers training at events organised by leading Cybersecurity associations including OWASP and ISC2. He holds a Msc in Computer Engineering from UCA and the SSCP, CISSP, CSSLP & CCSP certifications from ISC2.
.NET provides unprecedented flexibility and productivity to web application developers. Application developers are responsible for understanding the limitations of .NET and adopting best practices to ensure that their code is secure.
Web applications drive business success by streamlining operations and enhancing customer experience. Yet, without understanding and addressing vulnerabilities, organisations risk exposing critical data, disrupting operations, and damaging reputation
Security must be an integral part of the development process and consider risks in a focused and efficient way. Including threat modeling in the application life cycle ensures that applications are developed with security built-in from inception.
The PCI DSS enhances the security of cardholder data. Applications handling payment information must be secure. This course equips developers with the skills to code defensively and meet the secure coding and application security requirements of PCI
