practical-devsecops.com Arvostelua 

The Highlights:
Mindset Shift: Moves beyond patching bugs to "Secure by Design" using the 8 Security Principles.

Practical & Modern: Deep dives into Kubernetes (K8s) and AWS S3 threat models using Attack Trees.

Actionable Tools: Mastered STRIDE and DFDs for identifying risks at the whiteboard, not just in the code.

A timely and well-pitched course that cuts through the AI hype and jargon, distilling what matters most for anyone looking to understand the risk and security dimensions behind it.

Smooth process. No drama. And honestly, a solid reminder of how much I'd quietly let rust.

You think you know the concepts — until an exam question makes you second-guess yourself for 45 seconds on something you've done in production. That's not a bad thing. That's the point.

What I actually got out of it wasn't just the cert. It was the forced revisit — threat modelling, secure SDLC, compliance frameworks — laid out in a way that connected the dots I'd been treating as separate problems.

If you're deep in the DevSecOps space and haven't formalised it with a cert yet, perhaps it's time. Not because employers demand the paper. But because structured revision exposes the gaps you didn't know you had.

Worth every hour.

Good and straightforward courses, with payloads that prove to be tested before being released.

But, very frustrated from the exam feedback. While I managed to solve the exam, one step I couldn't solve, and I wanted to know what I missed ; the answer from Practical DevSecOps? "we don't disclose".

When I give lessons and trainings, I do it for my students so they learn, they become better. Not to hide them what they did wrong and where they could improve. Pretty unprofessional in my opinion, to hide what could be improved.

Also, the fact that courses must rely on ready machines before being able to start reading the course, is not really optimized, and it could be improved.

I have around 4+ years of experience in Application Security, working on SAST, DAST, SCA, and VAPT activities. In my current role, I’ve been involved in identifying vulnerabilities, supporting remediation, and working closely with development teams to improve application security posture.
What made my experience great was the opportunity to work on diverse applications and learn different security tools and methodologies. The team collaboration was strong, and there was good support from senior members whenever needed.
The company is doing well in terms of adopting security practices and integrating them into the development lifecycle. There is a clear focus on improving security awareness and maintaining compliance standards.
One area for improvement could be increasing automation in security testing and providing more advanced training opportunities to keep up with evolving threats.

Most certifications make you feel competent. This one tests whether you actually are. The Practical DevSecOps Certified Threat Modeling course strips away the illusion that reading about security equals understanding it. It stands out because it moves into territory most programs don’t touch such as using tools like pyTM for treating threat modeling as code. Overall, great labs and curriculum which is highly pertinent in application security.

I found the CAISP exam demanding but extremely useful, with strong content and a well-structured format. I’d definitely recommend it to anyone looking to boost their AI security knowledge in a practical way.

The Certified Cloud Native Security Expert (CCNSE) by Practical DevSecOps is refreshingly practical—labs and real attack/defense scenarios make Kubernetes, containers, and cloud-native security concepts stick. The exam tests real capability, not just theory, which is a big plus.

The depth can feel intense at times, and a gradual progression or pacing is required to make the learning experience smoother. Lab access duration could have been longer given the depth.

Overall, a solid, no-nonsense program if you’re serious about applying cloud-native security in real-world environments.

I took the CAISP course. The labs were great and really helped me to up skill myself. Great labs and customer support.

It was an incredible course. I gained useful knowledge and practical skills, which I can use in my day-to-day work. Labs were detailed enough. I'm happy that I purchased this course, and plan to purchase other Practical DevSecOps courses, as they are needed for my career.

I did the CDP certification and I found it complete. The learning goes through several lessons through videos, followed by practical exercises. I discovered several tools that will undoubtedly be an add up for my work and my pipelines.

The 24/7 support made the entire experience great. Additionally, the content was good, but I think it needs to be more up to date and include more attacks (I already emailed the company about this, and they were open to and appreciative of my feedback). Overall, I would definitely recommend this certificate to my colleagues.

The Certified DevSecOps Professional exam was a solid mix of DevOps and security concepts. It focused on how to integrate security into CI/CD pipelines, covering areas like SAST, DAST, IAM, container security, and secrets management. The questions were mostly scenario-based, so understanding real-world application mattered more than memorization. It felt practical and relevant, especially for cloud and DevOps roles. Overall, it’s a good certification if you want to build secure, production-ready systems.

Good for entry into SSDLC.
(If you never touched DevSecOps).
If you've been working in application security (product security/DevSecOps) for a long time, you might find this a bit boring. You might want to check out the DevSecOps Expert Course instead.

Course content was highly practical. It was very detailed, and easy to learn. Generally, I was satisfied.

Very Good, highly recommended

Very good course and hands-on. I recommend it!