Episode notes
In this episode, we dive deep into one of the most pressing financial and security threats facing organizations in 2026: Featured Resource: If you are responsible for securing AI infrastructure, this episode highlights the technical controls covered in the Certified AI Security Professional (CAISP) course, which includes hands-on labs for defending against the OWASP Top 10 LLM vulnerabilities and mastering the MITRE ATLAS framework. LLM Jacking. While many security discussions focus on prompt...
Podcast
Practical DevSecOps
Practical DevSecOps Team · Learning · English
Practical DevSecOps is a global cybersecurity education company specializing in hands-on DevSecOps, AI Security, and Application Security training and certifications. Listed on the NICCS/CISA National Initiative for Cybersecurity Careers and Studies platform, Practical DevSecOps has trained ove
More from Practical DevSecOps All episodes →
-
3 Apr 2026 · 20 min
DevSecOps Certification Guide: CDP vs. ECDE Comparison and Courses
Welcome to The DevSecOps Edge, the podcast dedicated to helping you become one of the top 1% of cybersecurity engineers in the industry. In a world where APIs account for 80% of internet traffic and 94% of web breaches start at the API layer, staying ahead of the curve isn't just an advantage—it's a necessity. In our featured episodes, we tackle the biggest questions facing security professionals today. Our deep-dive comparison, "CDP vs. ECDE: Which DevSecOps Certification Is Worth Your Time?...
-
20 Mar 2026 · 21 min
Exploiting Hidden Endpoints and Centralizing Defense with Kong - Your API Documentation is a Lie
Is your API documentation telling the truth? In this episode, we dive into the uncomfortable reality that API documentation is often a "lie" because of the gap between Swagger files and what is actually running in production. We explore how attackers exploit this gap using advanced fuzzing techniques and JWT manipulation, and why a centralised defense strategy using Kong API Gateway is the only way to effectively secure modern microservices. Key Topics Covered: The JWT Illusion: We debunk the...
-
5 Mar 2026 · 22 min
CAISP vs. OSAI Certification Comparison Guide
n this episode, we tackle the rapidly evolving landscape of artificial intelligence and the critical need for specialized security expertise. As Large Language Models (LLMs) and autonomous agents become integrated into the modern enterprise, they bring a new set of risks, including prompt injection, training data poisoning, and insecure plugin designs. To help you navigate your career path in this high-demand field, we provide an in-depth comparison of two premier certifications: the Ce...
-
28 Feb 2026 · 23 min
SLSA Framework: The Definitive Guide for Securing Your Software Supply Chain
In this episode, we dive deep into the SLSA (Supply-chain Levels for Software Artifacts) framework, the definitive standard for securing your software supply chain. With software supply chain attacks increasing by 742% between 2019 and 2022, understanding frameworks like SLSA—pronounced "salsa"—is no longer optional; it is an operational reality. We explore the origins of SLSA, which began at Google as "Binary Authorization for Borg" before being contributed to the Open Source Security Founda...
-
20 Feb 2026 · 16 min
DevSecOps Statistics in 2026: Market Growth, Adoption Trends, and Strategic Insights
In this episode, we explore the explosive growth of the DevSecOps market, which is projected to reach between USD 8.58 billion and USD 10.88 billion by 2026. Driven by cloud-native transitions, AI integration, and intensifying regulatory pressures, the industry is witnessing a compound annual growth rate (CAGR) of up to 22.10%. Course Page: https://www.practical-devsecops.com/certified-devsecops-professional/ What You’ll Learn in This Episode: • The Financial Landscape: Why DevSecOps en...
-
22 Jan 2026 · 15 min
Breaking the Cycle: From Red Teaming to DevSecOps Leadership
In this episode, we explore the remarkable career transformation of Hiroshi Tanaka, a security veteran with 15 years of experience in offensive security, penetration testing, and red team operations. Despite his extensive background in a Fortune 500 company, Hiroshi realised that his ability to "break things" was no longer sufficient as his organisation transitioned towards DevOps and cloud-native development. He shares his candid journey of overcoming the fear of becoming "irrelevant" ...
-
13 Jan 2026 · 13 min
Agentic AI Security Threats, Defenses, Evaluation & Open Challenges
AI Security Certification and Training: https://www.practical-devsecops.com/certified-ai-security-professional/ To address these challenges, the Certified AI Security Professional (CAISP) certification provides the skills needed to secure the AI supply chain and infrastructure. The course covers: The emergence of Agentic AI represents a fundamental paradigm shift in cybersecurity. Unlike traditional, static software, agentic systems are defined by their autonomy, planning capabilities, and ab...
-
6 Jan 2026 · 17 min
Navigating the DSOMM Roadmap and the DevSecOps Revolution
This episode focuses on how these principles fit into the DevSecOps Maturity Model (DSOMM), a structured framework that enables organisations to embed security practices from the start, ensuring that rapid delivery does not come at the cost of protection. Ready to take the first step? The Certified DevSecOps Professional (CDP) course is the ultimate starting point for those looking to automate security and lead organisational change. Through 100+ hands-on labs, the CDP program teaches yo...
-
24 Dec 2025 · 16 min
Top 10 Emerging AI Security Roles in 2026
Secure your future in the most critical career path in tech by enrolling in the Certified AI Security Professional (CAISP) course today! In this episode, we explore the definitive guide to the Top 10 Emerging AI Security Roles for 2026. The shift toward AI-integrated operations is not a future concern—it is happening now, and it has opened a "chasm" in the workforce that only specialised professionals can fill. We break down the responsibilities, required skills, and massive salary pote...
-
17 Dec 2025 · 17 min
AI Security Interview Questions - AI Security Training and Certification - 2026
Enroll now in the Certified AI Security Professional (CAISP) course by Practical DevSecOps! This highly recommended certification is designed for the engineers , focusing intensely on the hands-on skills required to neutralize AI threats before attackers strike. The CAISP curriculum moves beyond theoretical knowledge, teaching you how to secure AI systems using the OWASP LLM Top 10 and implement defenses based on the MITRE ATLAS framework. You will explore AI supply chain risks ...
