Free lessons
Free lessons: GenAI Security Engineering
45 lessons free to read — no subscription required. Open any one to read the full lesson; subscribe to unlock the rest. Browse all 45 by course ↓
Start here
What you'll build in GenAI Security Engineering
Signature lessons unique to this discipline — start here.
Foundation
The same four core lessons on every hub — shared across all twelve disciplines.
Browse by course
Every free lesson on this path, course by course, in curriculum order.
Python Essentials for Agent Builders1 lesson
LLM Foundations for Agent Builders1 lesson
Kubernetes Essentials for GenAI Engineers1 lesson
Web APIs & Services for GenAI Engineers1 lesson
AI Security Engineering41 lessons
- Ch 1Build prompt injection classifier using LLM-as-judge via LiteLLM3 free labs
- Ch 1Implement input sanitization pipeline with NeMo Guardrails
- Ch 1Detect indirect injection in RAG-retrieved documents
- Ch 1Build defense-in-depth with layered guard chain3 free labs
- Ch 1Deploy injection defense as FastAPI sidecar on GKE3 free labs
- Ch 1Monitor injection attempts with Prometheus and Grafana
- Ch 3Deploy output sanitizer as response middleware on GKE
- Ch 4Deploy multi-stage safety pipeline on GKE
- Ch 5Deploy multimodal defense on GKE with resource limits
- Ch 6Deploy canary documents for tampering detection
- Ch 6Deploy RAG defense system on GKE with pgvector
- Ch 7Enforce supply chain policies in GKE with Binary Authorization
- Ch 8Build bidirectional PII redaction pipeline
- Ch 8Integrate PII defense with LiteLLM gateway
- Ch 8Deploy PII defense pipeline on GKE
- Ch 9Implement row-level access control for vector stores
- Ch 9Implement embedding integrity and provenance tracking
- Ch 9Encrypt embeddings at rest and in transit
- Ch 9Deploy secure vector store on GKE with network isolation
- Ch 9Monitor vector store access patterns and anomalies
- Ch 10Enforce least-privilege for agent tool access
- Ch 10Detect and contain rogue agent behavior
- Ch 10Deploy agent security monitor on GKE
- Ch 10Test agent security with adversarial scenarios
- Ch 11Detect tool poisoning in MCP tool descriptions
- Ch 11Implement MCP server authentication and authorization
- Ch 11Secure agent-to-agent communication channels
- Ch 11Deploy secure MCP infrastructure on GKE
- Ch 11Audit MCP security with automated testing
- Ch 12Configure GKE network policies for AI service isolation
- Ch 12Implement GKE Workload Identity for secure service auth
- Ch 12Monitor GKE security posture continuously
- Ch 13Implement OAuth2/OIDC authentication for LLM APIs
- Ch 13Deploy LLM API gateway on GKE with LiteLLM
- Ch 14Deploy secrets infrastructure on GKE with Workload Identity
- Ch 16Test agent security with DeepTeam vulnerability scans
- Ch 17Monitor agent behavior for security anomalies
- Ch 17Deploy security monitoring stack on GKE
- Ch 18Deploy incident response automation on GKE
- Ch 19Deploy compliance monitoring on GKE
- Ch 20Deploy security infrastructure on GKE
Ready for the full path?
Unlock every lesson, lab, and the skill graph. Cancel anytime.