📅 Book a 30-min Demo📞 Call/text (571) 293-0242

Cybersecurity courses

Cybersecurity courses from ibl.ai. Securing LLM applications and AI agents: threat modeling, prompt injection, RAG and MCP security, guardrails, PII and model protection, vulnerability disclosure, security testing, and the governance frameworks (EU AI Act, NIST AI RMF, ISO/IEC 42001).

Open on lms.ibl.ai

Last updated:

Courses

Alphabetical. Each course page shows its outline and details; Enroll opens the course on lms.ibl.ai.

Information Technology

AI Governance, Compliance and Audit Trails: EU AI Act, NIST AI RMF and ISO/IEC 42001

Read what the EU AI Act, NIST, ISO/IEC 42001 and SOC 2 ask for, then build a tamper-evident audit log for an AI agent and the plan that turns it into evidence

A hands-on, self-paced course for security, platform and compliance teams on AI governance evidence: the EU AI Act as amended in July 2026, the NIST AI RMF and Generative AI Profile, ISO/IEC 42001 and SOC 2 at the level their publishers describe, and five local labs that build and test a tamper-evident audit log for an AI agent.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
AI Governance, Compliance and Audit Trails: EU AI Act, NIST AI RMF and ISO/IEC 42001

Information Technology

Continuous Security Testing for LLM Apps: Automated Evaluation and CI Gates

Scope authorized self-tests, scan with garak and PyRIT, build a canary regression suite, and block risky merges with a CI gate

A hands-on, self-paced course for security, AppSec, platform and ML teams on making security testing of LLM applications continuous: authorized scope and rules of engagement, framework scans with garak and PyRIT, a harmless canary and policy regression suite, thresholds and trial counts, and a CI gate that blocks a merge when the failure rate is too high, taught from OWASP, NIST and MITRE ATLAS.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Continuous Security Testing for LLM Apps: Automated Evaluation and CI Gates

Information Technology

Coordinated Vulnerability Disclosure for AI Systems

Receive AI vulnerability reports well, triage them, fix them and publish what defenders need

A hands-on, self-paced course for security, product security and ML teams on running a vulnerability disclosure program for AI products: a policy with safe harbor language, security.txt, intake that separates security from model behavior, triage and severity, canary regression tests, coordination and publication through CVE and CSAF, taught from CISA, CVE, OASIS, OWASP, MITRE ATLAS and NIST sources.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Coordinated Vulnerability Disclosure for AI Systems

Information Technology

Defending Against Prompt Injection: Direct, Indirect and Multi-Turn

Measure how often injected instructions are followed with harmless canaries, layer controls that hold even when the model obeys, and monitor whole conversations

A hands-on, self-paced course for security and engineering teams on defending LLM applications and agents against direct, indirect and multi-turn prompt injection. Measure exposure with harmless canaries on a local sample app, add least-privilege tools, human approval, output handling and structured input one at a time, and build a conversation-level monitor and regression suite, taught from OWASP, NIST and MITRE ATLAS.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Defending Against Prompt Injection: Direct, Indirect and Multi-Turn

Information Technology

FBI FLASH: Defending Against ARTEX Autonomous Intrusions

Turn the FBI's 13 November 2026 FLASH on the ARTEX agentic penetration testing framework into an attack surface inventory, identity and cloud hardening, detections, and an evidence-first response plan

A hands-on, self-paced course built from the FBI FLASH-20261113-001 (13 November 2026, TLP:CLEAR) on the ARTEX autonomous penetration testing framework. Map the FBI's observed activity to MITRE ATT&CK, inventory peripheral applications, restrict administration and publishing paths, review service principals and consent grants, build detections over synthetic logs, vet the FBI's indicators before acting, and prepare an evidence-first response and FBI report pack.

  • 8 to 10 hours
  • Intermediate
  • Free
Enroll Course page
FBI FLASH: Defending Against ARTEX Autonomous Intrusions

Information Technology

Identity and Delegated Access for AI Agents: OAuth, Scoped Tokens and Human Approval

Give agents their own identities, delegate narrowly with OAuth and token exchange, gate consequential actions on a person, and revoke and audit every grant

A hands-on, self-paced course for security, identity and platform teams on giving AI agents access safely: why agents must never hold users' passwords or standing admin keys, OAuth 2.0 under RFC 9700, token exchange, scoped and short-lived tokens, the MCP authorization specification, human approval and revocation, with labs on a local authorization broker.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Identity and Delegated Access for AI Agents: OAuth, Scoped Tokens and Human Approval

Computer Science

Interpretability for AI Assurance: Inspecting Model Internals

Cache activations, read the logit lens, patch and probe a model on your laptop, and decide where interpretability evidence can and cannot support a deployment decision

A hands-on, self-paced course for security and ML teams on mechanistic interpretability as assurance evidence. Learn why black-box testing leaves gaps, run activation caching, the logit lens, activation patching and probing on GPT-2 small with TransformerLens, read what research found on sycophancy, reward hacking and hidden objectives, and write an assurance plan that states what interpretability can and cannot certify.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Interpretability for AI Assurance: Inspecting Model Internals

Information Technology

Output Validation and Guardrails: Structured Outputs, Constrained Decoding and Sanitization

Treat model output as untrusted input: enforce schemas, sanitize for every destination, fail closed and prove it with tests

A hands-on, self-paced course for security and engineering teams on controlling what LLM applications output: OWASP LLM05 and LLM09, structured outputs and constrained decoding, local schema validation, sanitizing for browsers, shells, databases and tools, guards that fail closed, NeMo Guardrails, and logging and testing every decision, in eight local labs on synthetic data.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Output Validation and Guardrails: Structured Outputs, Constrained Decoding and Sanitization

Information Technology

Protecting Models and Training Data: Extraction, Membership Inference and Defenses

Make model extraction expensive and visible, protect training data with differential privacy, and lock down weights, with hands-on labs on your own laptop

A hands-on, self-paced course for security, platform and ML teams that serve models through an API: what extraction, membership inference and weights theft achieve and the evidence they leave, then gateway quotas, detection of systematic querying, differential privacy in training and signed artefact checks, taught from OWASP, NIST and MITRE ATLAS.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Protecting Models and Training Data: Extraction, Membership Inference and Defenses

Information Technology

Protecting PII in LLM Applications: Masking, Tokenization and Privacy Proxies

Measure what your detector misses, tokenize before the model sees it, and keep personal data out of logs, training data and memory

A hands-on, self-paced course for security, AppSec, platform and ML teams on protecting personal data in LLM applications: map the data flows, minimise, measure PII detection on a synthetic test set, build a privacy proxy that tokenizes values before a model sees them and restores them after, and log without leaking, taught from OWASP, NIST, MITRE ATLAS and primary legal texts.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Protecting PII in LLM Applications: Masking, Tokenization and Privacy Proxies

Information Technology

Securing Agent Tools and MCP Servers

Map the MCP attack surface, build a server whose tools validate, authorize and log every call, and review any MCP server before you trust it

A hands-on, self-paced course for security, platform and ML teams on securing MCP servers and agent tools: tool poisoning, look-alike tools, rug pulls, over-broad scopes and the confused deputy, and the server-side controls that stop them. Build and test a hardened server with the official Python SDK, then write a tool security review and hardening plan.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Securing Agent Tools and MCP Servers

Information Technology

Securing RAG: Access Control, Provenance and Poisoning Defenses

Enforce permissions at retrieval time, sign what enters your knowledge base, verify citations and catch poisoned documents with harmless canaries

A hands-on, self-paced course for security, platform and ML teams on securing retrieval augmented generation: permission-aware retrieval, ingestion controls, signed provenance, citation verification, and detecting poisoned documents with harmless canaries, taught from OWASP LLM08 and LLM04, NIST, MITRE ATLAS, CISA and the vector databases' own documentation.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Securing RAG: Access Control, Provenance and Poisoning Defenses

Information Technology

Threat Modeling AI Agents and LLM Applications

Map the attack surface, find threats with STRIDE, OWASP and MITRE ATLAS, design out the confused deputy, and prove every control with a test

A hands-on, self-paced course for security engineers, AppSec, platform and ML teams on threat modeling LLM applications and tool-using agents: data-flow diagrams and trust boundaries, STRIDE with the OWASP catalogues and MITRE ATLAS, the confused deputy, and a control, test and monitoring signal for every threat.

  • 10 to 12 hours
  • Intermediate
  • Free
Enroll Course page
Threat Modeling AI Agents and LLM Applications