Free AI Security Engineer Roadmap

Secure the AI a company builds and buys: LLM apps, RAG, agents, the tools they call and the pipeline and cloud they ship on. Security+ and SecAI+ for the grounding, building and red-teaming AI for the skills, then CISSP, with AAISM as the step into leading AI security.

7 steps · 71 free videos · 22 free reads

Start step 1 →

Create your free account to open all 2,396 free items

The 93 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.

Create free account →Already have an account? Sign in

Before you start

Read these first

The free roadmap

7 steps, in order

The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually). Infrastructure Labs labs are a separate add-on.

Start here →
Step 1 — Security foundation
The security baseline every AI security role assumes.
Follow the free CompTIA Security+ (SY0-701) roadmap.
🔒 The full roadmap adds here: 6 full courses · hands-on labs 1–148 of 239 (courses in Membership · 71 labs in Membership · 77 labs in Infrastructure Labs)
- Course · CompTIA Security+ Certification (SY0-701): The Total Course · 🔒 Membership
- Course · Security+ (SY0-701) - Self-paced Course! · 🔒 Membership
- Course · CompTIA Security+ SY0-701: General Security Concepts · 🔒 Membership
- Course · CompTIA Security+: Viruses, Threats and Compromise Indicators · 🔒 Membership
- Course · CompTIA Security+ Labs · 🔒 Membership
- Course · Security+ Just Labs: The Ultimate Hands-On Bootcamp · 🔒 Membership
- Lab 1 of 239 · Additional Scanning Options · 🔒 Membership
- Lab 2 of 239 · Basics of Metasploit · 🔒 Membership
- Lab 3 of 239 · BCP DRP and Test Planning · 🔒 Membership
- Lab 4 of 239 · BitLocker Setup · 🔒 Membership
- Lab 5 of 239 · Block Incoming Traffic on Known Port · 🔒 Membership
- Lab 6 of 239 · Comparing Controls · 🔒 Membership
- Lab 7 of 239 · Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server · 🔒 Membership
- Lab 8 of 239 · Creation of BCP and DRP · 🔒 Membership
- Lab 9 of 239 · Data Backup to Prep for Recovery · 🔒 Membership
- Lab 10 of 239 · Event Log · 🔒 Membership
- Lab 11 of 239 · Host Data Integrity Baselining · 🔒 Membership
- Lab 12 of 239 · Installing Patches and Testing Software · 🔒 Membership
- Lab 13 of 239 · MITRE - Attack · 🔒 Membership
- Lab 14 of 239 · MITRE - Defend · 🔒 Membership
- Lab 15 of 239 · Network Discovery · 🔒 Membership
- Lab 16 of 239 · Network Segmentation (FW/DMZ/WAN/LAN) · 🔒 Membership
- Lab 17 of 239 · Network Topology Generation · 🔒 Membership
- Lab 18 of 239 · Open Source Collection · 🔒 Membership
- Lab 19 of 239 · Open Source Password Cracking · 🔒 Membership
- Lab 20 of 239 · Scanning From Windows · 🔒 Membership
- Lab 21 of 239 · Windows Event Log Manipulation via Windows Event Viewer · 🔒 Membership
- Lab 22 of 239 · Wireshark · 🔒 Membership
- Lab 23 of 239 · Manage Users and Groups in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 24 of 239 · Manage Users and Groups in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 25 of 239 · Can You Manage Users and Groups in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 26 of 239 · Configure Password Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 27 of 239 · Configure Password Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 28 of 239 · Can You Manage Password Requirements in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 29 of 239 · Configure Standard Linux Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 30 of 239 · Configure Standard Windows Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 31 of 239 · Can You Configure Standard Linux and Windows Permissions? [Advanced] · 🔒 Infrastructure Labs
- Lab 32 of 239 · Can You Manage Access in Linux and Windows? [Expert] · 🔒 Infrastructure Labs
- Lab 33 of 239 · Can You Harden the SSH Service on a Linux Server? [Advanced} · 🔒 Infrastructure Labs
- Lab 34 of 239 · Force Users to Change Password Upon First Sign In [Guided] · 🔒 Infrastructure Labs
- Lab 35 of 239 · Remove a User Account [Guided] · 🔒 Infrastructure Labs
- Lab 36 of 239 · Can You Add Server Access for a Group? [Advanced] · 🔒 Infrastructure Labs
- Lab 37 of 239 · Examine Log Files to Block Bad Actors [Guided] · 🔒 Infrastructure Labs
- Lab 38 of 239 · Harden a Server by Limiting Access to a Single Subnet [Guided] · 🔒 Infrastructure Labs
- Lab 39 of 239 · Can You Harden a Server by Restricting Access per Protocol? [Advanced] · 🔒 Infrastructure Labs
- Lab 40 of 239 · Can You Harden a Linux Web Server? [Expert] · 🔒 Infrastructure Labs
- Lab 41 of 239 · Deploy a Private Certificate Authority [Guided] · 🔒 Infrastructure Labs
- Lab 42 of 239 · Configure Custom Certificate Templates and Deployment Options [Guided] · 🔒 Infrastructure Labs
- Lab 43 of 239 · Manually Request a PKI Certificate [Guided] · 🔒 Infrastructure Labs
- Lab 44 of 239 · Can You Deploy a Certificate Authority and Issue Certificates? [Advanced] · 🔒 Infrastructure Labs
- Lab 45 of 239 · Enable DNSSEC [Guided] · 🔒 Infrastructure Labs
- Lab 46 of 239 · Use EFS To Encrypt Files on NTFS Volumes [Guided] · 🔒 Infrastructure Labs
- Lab 47 of 239 · Can You Secure DNS Resource Records and Windows NTFS Volume File Objects? [Advanced] · 🔒 Infrastructure Labs
- Lab 48 of 239 · Enable SSL/TLS on a Website [Guided] · 🔒 Infrastructure Labs
- Lab 49 of 239 · Enable Client SSL/TLS [Guided] · 🔒 Infrastructure Labs
- Lab 50 of 239 · Can You Secure a Website with an SSL/TLS Certificate? [Advanced] · 🔒 Infrastructure Labs
- Lab 51 of 239 · Can You Use PKI to Secure a Network Environment? [Expert] · 🔒 Infrastructure Labs
- Lab 52 of 239 · Cryptography: Attacking Classic Ciphers · 🔒 Membership
- Lab 53 of 239 · Cryptography: Breaking Repeated Key XOR Cipher · 🔒 Membership
- Lab 54 of 239 · Cryptography: Breaking Weak RSA Keys · 🔒 Membership
- Lab 55 of 239 · Cryptography: Decrypting Files With a Dictionary Attack · 🔒 Membership
- Lab 56 of 239 · Cryptography: Forging Digital Signatures · 🔒 Membership
- Lab 57 of 239 · Cryptography: Forging MACs With Side Channels · 🔒 Membership
- Lab 58 of 239 · Cryptography: Hidden Veracrypt Containers · 🔒 Membership
- Lab 59 of 239 · Cryptography: Man In the Middle Attack · 🔒 Membership
- Lab 60 of 239 · Cryptography: Password Cracking · 🔒 Membership
- Lab 61 of 239 · Cryptography: Setting Up HTTPS in Windows and Linux · 🔒 Membership
- Lab 62 of 239 · Cryptography: Setting Up Two Factor Authentication · 🔒 Membership
- Lab 63 of 239 · Cryptography: Steganography · 🔒 Membership
- Lab 64 of 239 · Cryptography: Using GPG for Encryption and Key Management · 🔒 Membership
- Lab 65 of 239 · Cryptography: Using the OpenSSL CLI Tool · 🔒 Membership
- Lab 66 of 239 · Getting Started with Security Concepts in Windows and Linux Environments [Getting Started] · 🔒 Infrastructure Labs
- Lab 67 of 239 · Configure Windows Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 68 of 239 · Configure Linux Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 69 of 239 · Configure Security Settings by Using Microsoft Group Policy [Guided] · 🔒 Infrastructure Labs
- Lab 70 of 239 · Identify Non-secure Network Traffic [Guided] · 🔒 Infrastructure Labs
- Lab 71 of 239 · Can You Secure Host Settings Through Firewall Settings and Group Policy? [Advanced] · 🔒 Infrastructure Labs
- Lab 72 of 239 · Configure IPSec [Guided] · 🔒 Infrastructure Labs
- Lab 73 of 239 · Configure a Windows PPTP VPN [Guided] · 🔒 Infrastructure Labs
- Lab 74 of 239 · Can You Secure Network Access? [Advanced] · 🔒 Infrastructure Labs
- Lab 75 of 239 · Can You Harden Windows Hosts? [Expert] · 🔒 Infrastructure Labs
- Lab 76 of 239 · Back Up and Restore Data in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 77 of 239 · Back Up and Restore Data in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 78 of 239 · Can You Back Up and Restore Data in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 79 of 239 · Configure and Test the Firewall in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 80 of 239 · Configure and Test the Firewall in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 81 of 239 · Can You Configure the Firewall in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 82 of 239 · Configure Patch Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 83 of 239 · Configure Update Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 84 of 239 · Can You Configure Update Management in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 85 of 239 · Can You Manage Windows and Linux Systems? [Expert] · 🔒 Infrastructure Labs
- Lab 86 of 239 · Applying Filters to TCPDump and Wireshark · 🔒 Membership
- Lab 87 of 239 · DNS as a Remote Shell · 🔒 Membership
- Lab 88 of 239 · Firewall Setup and Configuration · 🔒 Membership
- Lab 89 of 239 · Gap Analysis of Firewall Rules · 🔒 Membership
- Lab 90 of 239 · Implementing Least-Privilege on Windows · 🔒 Membership
- Lab 91 of 239 · Setting Up Zones in a Firewall · 🔒 Membership
- Lab 92 of 239 · Snorby Setup and Operation · 🔒 Membership
- Lab 93 of 239 · TCPDump · 🔒 Membership
- Lab 94 of 239 · Tweaking Firewall Rules for Detection · 🔒 Membership
- Lab 95 of 239 · Using Snort and Wireshark to Analyze Traffic · 🔒 Membership
- Lab 96 of 239 · Getting Started with Cybersecurity Defensive Tools [Getting Started] · 🔒 Infrastructure Labs
- Lab 97 of 239 · Managing Log Files on a Windows Server [Guided] · 🔒 Infrastructure Labs
- Lab 98 of 239 · Configure Windows Defender on a Windows System [Guided] · 🔒 Infrastructure Labs
- Lab 99 of 239 · Configure a Local Security Policy on Server 2016 [Guided] · 🔒 Infrastructure Labs
- Lab 100 of 239 · Can You Use the Sysinternals Suite to Review Permissions on a Windows System? [Advanced] · 🔒 Infrastructure Labs
- Lab 101 of 239 · Using Encryption to Secure Information [Guided] · 🔒 Infrastructure Labs
- Lab 102 of 239 · Can You Configure Drive Encryption by Using LUKS and BitLocker? [Advanced] · 🔒 Infrastructure Labs
- Lab 103 of 239 · Can You Configure Remote Administration by Using PuTTY and SSH? [Expert] · 🔒 Infrastructure Labs
- Lab 104 of 239 · Use a Password Cracking Utility in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 105 of 239 · Can You Use PowerShell to Gather Computer Information in Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 106 of 239 · Escalate Privileges in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 107 of 239 · Can You Enumerate Network Services by Using Port Scanning in Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 108 of 239 · Auditing Service Accounts and Setting Up Automated Log Collection · 🔒 Membership
- Lab 109 of 239 · Centralized Monitoring · 🔒 Membership
- Lab 110 of 239 · CIRP Creation and Disaster · 🔒 Membership
- Lab 111 of 239 · Creation of Standard Operating Procedures for Recovery · 🔒 Membership
- Lab 112 of 239 · Data Downloads and Validation · 🔒 Membership
- Lab 113 of 239 · Force Point: DLP Email Overview · 🔒 Membership
- Lab 114 of 239 · Force Point: DLP Network Overview · 🔒 Membership
- Lab 115 of 239 · Identifying Key Assets · 🔒 Membership
- Lab 116 of 239 · Leveraging Internal Intelligence Resources · 🔒 Membership
- Lab 117 of 239 · Log Correlation & Analysis to Identify Potential IOC · 🔒 Membership
- Lab 118 of 239 · Monitoring and Verifying Management Systems · 🔒 Membership
- Lab 119 of 239 · Open and Close Ports on Windows 7 · 🔒 Membership
- Lab 120 of 239 · Phishing · 🔒 Membership
- Lab 121 of 239 · Post Incident Service Restoration · 🔒 Membership
- Lab 122 of 239 · Ransomware · 🔒 Membership
- Lab 123 of 239 · Recover from SQL Injection Attack · 🔒 Membership
- Lab 124 of 239 · Sensitive Information Identification · 🔒 Membership
- Lab 125 of 239 · Vulnerability Identification and Remediation · 🔒 Membership
- Lab 126 of 239 · Use Git to Manage Code [Guided] · 🔒 Infrastructure Labs
- Lab 127 of 239 · Analyze Log Files for Malicious Activity [Guided] · 🔒 Infrastructure Labs
- Lab 128 of 239 · Identify and Manage Old Software [Guided] · 🔒 Infrastructure Labs
- Lab 129 of 239 · Deploy a Docker Container [Guided] · 🔒 Infrastructure Labs
- Lab 130 of 239 · Deploy a Virtual Machine [Guided] · 🔒 Infrastructure Labs
- Lab 131 of 239 · Configure a Jump Box [Guided] · 🔒 Infrastructure Labs
- Lab 132 of 239 · Manage File Redundancy for Resilience and Recovery [Guided] · 🔒 Infrastructure Labs
- Lab 133 of 239 · Manage System Restore Using Windows 11 [Guided] · 🔒 Infrastructure Labs
- Lab 134 of 239 · Use Alerting and Monitoring Tools [Guided] · 🔒 Infrastructure Labs
- Lab 135 of 239 · Digitally Sign Code To Verify Authenticity [Guided] · 🔒 Infrastructure Labs
- Lab 136 of 239 · Configure a Wireless Access Point [Guided] · 🔒 Infrastructure Labs
- Lab 137 of 239 · Sanitize Storage Disks [Guided] · 🔒 Infrastructure Labs
- Lab 138 of 239 · Enhance Security by Using SELinux [Guided] · 🔒 Infrastructure Labs
- Lab 139 of 239 · Manage Configurations by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 140 of 239 · Configure Devices by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 141 of 239 · Perform Security Audits on Linux Services [Guided] · 🔒 Infrastructure Labs
- Lab 142 of 239 · Baseline Systems in Accordance with Policy Documentation · 🔒 Membership
- Lab 143 of 239 · Conduct Baseline Comparison for Indicators of Compromise · 🔒 Membership
- Lab 144 of 239 · Creating a Baseline Using Autopsy · 🔒 Membership
- Lab 145 of 239 · Creating a Secondary Baseline and Conducting Comparison · 🔒 Membership
- Lab 146 of 239 · Manually Creating a Baseline with MD5Deep · 🔒 Membership
- Lab 147 of 239 · Recovering Data and Data Integrity Checks · 🔒 Membership
- Lab 148 of 239 · Windows Deployment Services · 🔒 Membership
See this step on the full roadmap →
Try a free AI security lab: Make it talk (~5 min) → A scripted simulation in your browser. No account needed.
Step 2 — How AI applications are built
Build an LLM app, a RAG pipeline and a cloud AI service. You cannot secure what you have never built.
- Python for Generative AI Apps: Building Intelligent Systems
  4 free video lessons · courses.stationx.net
  Free lessons from this course. Explore the full roadmap.
  - Flask ChatGPT Clone App - IVideo lesson · courses.stationx.net · 9 min
  - Introduction To Gen-AI AppsVideo lesson · courses.stationx.net · 19 min
  - IntroductionVideo lesson · courses.stationx.net · 2 min
  - Video OverviewVideo lesson · courses.stationx.net · 2 min
- LangChain Generative AI Apps
  Free video lesson · courses.stationx.net
  A free lesson from this course. Explore the full roadmap.
  - 1. LangChain Intro(edit)Video lesson · courses.stationx.net · 2 min
- Best Local LLM (Updated Monthly)Article · app.stationx.net · 14 min read
- LLM Limitations: Why the Flaws Won't Stop AdoptionArticle · app.stationx.net · 15 min read
- How to Build an AI AgentArticle · stationx.net · 12 min read
🔒 The full roadmap adds here: 2 full courses · hands-on labs 149–157 of 239 (courses in Membership · 9 labs in Infrastructure Labs)
- Course · Python for Generative AI Apps: Building Intelligent Systems · 🔒 Membership
- Course · LangChain Generative AI Apps · 🔒 Membership
- Lab 149 of 239 · Explore Document Processing in Azure AI's Document Intelligence Studio [Guided] · 🔒 Infrastructure Labs
- Lab 150 of 239 · Create a Bot by Using the Bot Framework SDK [Guided] · 🔒 Infrastructure Labs
- Lab 151 of 239 · Generate Insights from Images by Using Azure AI Vision Services [Guided] · 🔒 Infrastructure Labs
- Lab 152 of 239 · Build an AI Model in Azure AI Machine Learning Studio [Guided] · 🔒 Infrastructure Labs
- Lab 153 of 239 · Integrate Azure AI Immersive Reader Into Your Application by Using Its SDK [Guided] · 🔒 Infrastructure Labs
- Lab 154 of 239 · Translate Text Between Languages by Using Azure AI Translator [Guided] · 🔒 Infrastructure Labs
- Lab 155 of 239 · Generate Image Descriptions from Text by Using Azure AI Services [Guided] · 🔒 Infrastructure Labs
- Lab 156 of 239 · Analyze and Generate Text-Based Sentiment by Using Azure AI Services [Guided] · 🔒 Infrastructure Labs
- Lab 157 of 239 · Craft Better Prompts in Azure OpenAI Studio [Guided] · 🔒 Infrastructure Labs
See this step on the full roadmap →
Step 3 — The AI security certification
Threats, controls and governance for AI systems.
Follow the free CompTIA SecAI+ (CY0-001) roadmap.
🔒 The full roadmap adds here: 6 full courses · hands-on labs 158–190 of 239 (courses in Membership · 30 labs in Membership · 3 labs in Infrastructure Labs)
- Course · Total: CompTIA SecAI+ (CY0-001) Complete Course · 🔒 Membership
- Course · CompTIA SecAI+ (CY0-001) Complete Course from CertMike! · 🔒 Membership
- Course · CompTIA SecAI+ (CY0-001) Complete Course & Exam Prep · 🔒 Membership
- Course · Generative AI Risks & Cybersecurity: LLM Security · 🔒 Membership
- Course · ChatGPT for SOC Analyst: Master Cyber Security with AI · 🔒 Membership
- Course · Mastering Cybersecurity with ChatGPT: From Basics to Specialist · 🔒 Membership
- Lab 158 of 239 · Working with AI Prompts in Azure OpenAI Studio [Guided] · 🔒 Infrastructure Labs
- Lab 159 of 239 · Configure AI Prompts by Using Company Data [Guided] · 🔒 Infrastructure Labs
- Lab 160 of 239 · Creating a Chatbot from a Custom AI Prompt [Guided] · 🔒 Infrastructure Labs
- Lab 161 of 239 · OWASP Top Ten 2025 - A01 Broken Access Controls · 🔒 Membership
- Lab 162 of 239 · OWASP Top Ten 2025 - A02 Security Misconfiguration · 🔒 Membership
- Lab 163 of 239 · OWASP Top Ten 2025 - A03 Software Supply Chain Failures · 🔒 Membership
- Lab 164 of 239 · OWASP Top Ten 2025 - A04 Cryptographic Failures · 🔒 Membership
- Lab 165 of 239 · OWASP Top Ten 2025 - A05 Injection · 🔒 Membership
- Lab 166 of 239 · OWASP Top Ten 2025 - A06 Insecure Design · 🔒 Membership
- Lab 167 of 239 · OWASP Top Ten 2025 - A07 Authentication Failures · 🔒 Membership
- Lab 168 of 239 · OWASP Top Ten 2025 - A08 Software or Data Integrity Failures · 🔒 Membership
- Lab 169 of 239 · OWASP Top Ten 2025 - A09 Security Logging & Alerting Failures · 🔒 Membership
- Lab 170 of 239 · OWASP Top Ten 2025 - A10 Mishandling of Exceptional Conditions · 🔒 Membership
- Lab 171 of 239 · OWASP Top Ten 2025 - Capstone · 🔒 Membership
- Lab 172 of 239 · OWASP Top Ten 2025 - Capstone (pt.1) · 🔒 Membership
- Lab 173 of 239 · OWASP Top Ten 2025 - Capstone (pt.2) · 🔒 Membership
- Lab 174 of 239 · Analyze Various Data Sources to Confirm Suspected Infection · 🔒 Membership
- Lab 175 of 239 · Assessing Vulnerabilities Post Addressal · 🔒 Membership
- Lab 176 of 239 · BitCoin Mining Web Application on Corporate Network · 🔒 Membership
- Lab 177 of 239 · Check for Indicators of Other Attack Activity (Debug PE File) · 🔒 Membership
- Lab 178 of 239 · Cyber Security Evaluation Tool (CSET) · 🔒 Membership
- Lab 179 of 239 · Entering Information into a CMDB · 🔒 Membership
- Lab 180 of 239 · Event Logs with Autopsy · 🔒 Membership
- Lab 181 of 239 · Internet History · 🔒 Membership
- Lab 182 of 239 · Nexpose: Red Team Exploitation · 🔒 Membership
- Lab 183 of 239 · Overview of Kibana · 🔒 Membership
- Lab 184 of 239 · Performing an Initial Attack Analysis · 🔒 Membership
- Lab 185 of 239 · Preparing Target Media · 🔒 Membership
- Lab 186 of 239 · Recover from Illegal Bitcoin Mining Incident · 🔒 Membership
- Lab 187 of 239 · Recover from Web-Based Flashpack Incident · 🔒 Membership
- Lab 188 of 239 · Report Writing for Presentation to Management · 🔒 Membership
- Lab 189 of 239 · Respond to and Validate Alerts from Antivirus Software · 🔒 Membership
- Lab 190 of 239 · WMI Event Persistence · 🔒 Membership
See this step on the full roadmap →
Step 4 — Attack AI like a red teamer
How each attack on an AI system works and the open-source tools that test for it. The labs drill the web attacks AI apps inherit.
- 6 Prompt Injection Examples You Need to KnowVideo · 3 min
- What Is AI Recommendation Poisoning?Video · 3 min
- What Is Data Poisoning?Video · 2 min
- What Is Model Poisoning?Video · 2 min
- What Is an AI Backdoor?Video · 2 min
- What Is an AI Trojan?Video · 2 min
- What Is a Transfer Learning Attack?Video · 2 min
- What Is Direct Prompt Injection?Video · 3 min
- What Is Indirect Prompt Injection?Video · 3 min
- What Is AI Jailbreaking?Video · 3 min
- What Is Guardrail Bypassing?Video · 2 min
- What Is an Adversarial Attack?Video · 2 min
- What Is an AI Bias Attack?Video · 2 min
- What Is Model Skewing?Video · 2 min
- What Is AI Model Theft?Video · 2 min
- What Is an AI Model Inversion Attack?Video · 2 min
- What Is a Membership Inference Attack?Video · 2 min
- What Is AI Sensitive Information Disclosure?Video · 2 min
- How Hackers Hijack AI With One SentenceVideo · 3 min
- What Is Insecure Plugin Design?Video · 2 min
- What Is AI Plugin Exploitation?Video · 1 min
- What Is an AI Supply Chain Attack?Video · 2 min
- What Is Excessive Agency?Video · 2 min
- What Is an Output Integrity Attack?Video · 2 min
- What Is Insecure Output Handling?Video · 2 min
- What Is AI Denial of Service?Video · 1 min
- What Is AI Overreliance?Video · 2 min
- 7 Free Tools to Hack (and Secure) Any LLMVideo · 1 min
- 82 Prompt Injection Techniques, Mapped (Free Tool)Video · 1 min
- 82 Ways to Break Any AI (Free Library)Video · 1 min
- How to Steal an AI Model in 3 StepsVideo · 3 min
- Can Hackers Silently Corrupt Your AI?Video · 3 min
- AI PoisoningVideo · 2 min
- Can AI Be Tricked Into Deleting Your Database?Video · 2 min
- Can AI Be Accidentally Racist?Video · 2 min
- Your AI Chatbot Has Keys to EverythingVideo · 3 min
- Your AI Is Making Things UpVideo · 3 min
- Prompt Injection Examples & Attack TechniquesFree tool · app.stationx.net
- AI Security Tools MappedFree tool · app.stationx.net
- AI Attacks Explained: 23 TypesArticle · app.stationx.net · 28 min readEvery attack type with a short video each — data poisoning to chain-of-thought attacks.
- AI Red Teaming ToolsArticle · app.stationx.net · 29 min read
- Garak Tutorial: NVIDIA's LLM ScannerArticle · app.stationx.net · 16 min read
- PyRIT Tutorial: Microsoft's AI Red Team ToolkitArticle · app.stationx.net · 15 min read
- Promptfoo Tutorial: Test LLM Security in CI/CDArticle · app.stationx.net · 18 min read
- Giskard Tutorial: Scan Your LLM for LeaksArticle · app.stationx.net · 27 min read
- DeepTeam GuideArticle · app.stationx.net · 22 min read
- Prompt Injection Testing With a Free ToolArticle · app.stationx.net · 28 min read
- How OpenAI's AI Hacked Hugging Face: Full BreakdownArticle · app.stationx.net · 22 min read
- AI Is About to Forget How to Hack (On Purpose)Article · app.stationx.net · 15 min read
🔒 The full roadmap adds here: hands-on labs 191–204 of 239 (Membership)
- Lab 191 of 239 · Web 201 - Lab 1: Recon Tools · 🔒 Membership
- Lab 192 of 239 · Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injections · 🔒 Membership
- Lab 193 of 239 · Web 201 - Lab 2.2: Advanced Sqlmap · 🔒 Membership
- Lab 194 of 239 · Web 201 - Lab 2.3: Manual Blind SQL Injection · 🔒 Membership
- Lab 195 of 239 · Web 201 - Lab 2.4: NoSQL Injection · 🔒 Membership
- Lab 196 of 239 · Web 201 - Lab 3.1: Cross Site Scripting Filter Evasion · 🔒 Membership
- Lab 197 of 239 · Web 201 - Lab 3.2: Exploiting Misconfigured CORS · 🔒 Membership
- Lab 198 of 239 · Web 201 - Lab 4: Advanced OS Command Injection · 🔒 Membership
- Lab 199 of 239 · Web 201 - Lab 5: Advanced Local File Inclusion · 🔒 Membership
- Lab 200 of 239 · Web 201 - Lab 6: Advanced CSRF · 🔒 Membership
- Lab 201 of 239 · Web 201 - Lab 7.1: XXE to Obtain Arbitrary Files · 🔒 Membership
- Lab 202 of 239 · Web 201 - Lab 7.2: Out of Band XXE Attacks · 🔒 Membership
- Lab 203 of 239 · Web 201 - Lab 8: Server Side Request Forgery · 🔒 Membership
- Lab 204 of 239 · Web 201 - Lab 9: Insecure Deserialization in Python and Java · 🔒 Membership
See this step on the full roadmap →
Step 5 — Secure agents, tools and integrations
Lock down the agents, MCP servers and APIs an AI system calls, and the code that joins them.
- A2A Protocols & APIs - Build Real-World AI Systems with Python
  2 free video lessons · courses.stationx.net
  Free lessons from this course. Explore the full roadmap.
  - What are A2A Protocols & Why They Matter in AI SystemsVideo lesson · courses.stationx.net · 6 min
  - Welcome & What You_ll Learn Application to Application ProtocolsVideo lesson · courses.stationx.net · 4 min
- MCP Bootcamp: From Zero to Pro
  5 free video lessons · courses.stationx.net
  Free lessons from this course. Explore the full roadmap.
  - Hello World IntroductionVideo lesson · courses.stationx.net · 2 min
  - What is MCPVideo lesson · courses.stationx.net · 5 min
  - Weather Tool Code ExplanationVideo lesson · courses.stationx.net · 4 min
  - Course OverviewVideo lesson · courses.stationx.net · 4 min
  - Target AudienceVideo lesson · courses.stationx.net · 2 min
- 6 Tools to Secure Your AI Agents, MCP Servers and SkillsVideo · 1 min
- 3 Rules for Running AI Models SafelyVideo · 2 min
- Secure Code Review Checklist + AI WorkflowArticle · app.stationx.net · 25 min read
🔒 The full roadmap adds here: 2 full courses · hands-on labs 205–212 of 239 (Membership)
- Course · MCP Bootcamp: From Zero to Pro · 🔒 Membership
- Course · A2A Protocols & APIs - Build Real-World AI Systems with Python · 🔒 Membership
- Lab 205 of 239 · Secure Coding (Python) - Lab 1: Race Conditions · 🔒 Membership
- Lab 206 of 239 · Secure Coding (Python) - Lab 2: Data Validation · 🔒 Membership
- Lab 207 of 239 · Secure Coding (Python) - Lab 3: Authentication · 🔒 Membership
- Lab 208 of 239 · Secure Coding (Python) - Lab 4: Access Control · 🔒 Membership
- Lab 209 of 239 · Secure Coding (Python) - Lab 5: Cryptography · 🔒 Membership
- Lab 210 of 239 · Secure Coding (Python) - Lab 6: Error Handling · 🔒 Membership
- Lab 211 of 239 · Secure Coding (Python) - Lab 7: Static Analysis · 🔒 Membership
- Lab 212 of 239 · Secure Coding (Python) - Lab 8: Pickles and Imports · 🔒 Membership
See this step on the full roadmap →
Step 6 — Secure the pipeline and the cloud
The courses teach Docker, Jenkins CI/CD, CloudFormation and the OWASP Top Ten. The labs secure the Azure VMs, databases and storage an AI system runs on; there is no container, infrastructure-as-code or pipeline lab yet.
- Ultimate DevSecOps Course - With Real Life Scenarios
  16 free video lessons · courses.stationx.net
  Free lessons from this course. Explore the full roadmap.
  - 278. AWS CloudWatch OverviewVideo lesson · courses.stationx.net · 7 min
  - What is AWS and Why to Choose it Over Others Providers?Video lesson · courses.stationx.net · 10 min
  - What is CI/CD and Continuous Delivery Vs Continuous DeploymentVideo lesson · courses.stationx.net · 3 min
  - What is Docker and Why to Use it ?Video lesson · courses.stationx.net · 6 min
  - What is IAC (Infrastructure As Code)Video lesson · courses.stationx.net · 3 min
  - 316. The Diagram - What we will build ?Video lesson · courses.stationx.net · 1 min
  - 303. What Are Soft Skills?Video lesson · courses.stationx.net · 1 min
  - AWS CloudFormation OverviewVideo lesson · courses.stationx.net · 8 min
  - What is Jenkins and Why to use itVideo lesson · courses.stationx.net · 2 min
  - AWS EC2 OverviewVideo lesson · courses.stationx.net · 11 min
  - 304. The Difference Between Hard Skills vs Soft SkillsVideo lesson · courses.stationx.net · 3 min
  - What Is DevOps Vs DevSecOpsVideo lesson · courses.stationx.net · 1 min
  - 305. Why We Need Soft Skills and The 10 Most Important Soft Skills List & ExamplesVideo lesson · courses.stationx.net · 2 min
  - Linux vs UnixVideo lesson · courses.stationx.net · 3 min
  - Unix ArchitectureVideo lesson · courses.stationx.net · 5 min
  - AWS S3 OverviewVideo lesson · courses.stationx.net · 6 min
- Rapid AppSec Guide: Navigating the OWASP Top 10
  2 free video lessons · courses.stationx.net
  Free lessons from this course. Explore the full roadmap.
  - IntroductionVideo lesson · courses.stationx.net · 8 min
  - Video OverviewVideo lesson · courses.stationx.net · 1 min
🔒 The full roadmap adds here: 2 full courses · hands-on labs 213–222 of 239 (courses in Membership · 10 labs in Infrastructure Labs)
- Course · Ultimate DevSecOps Course - With Real Life Scenarios · 🔒 Membership
- Course · Rapid AppSec Guide: Navigating the OWASP Top 10 · 🔒 Membership
- Lab 213 of 239 · Configure Application Insights and App Service Logs for a Web App [Guided] · 🔒 Infrastructure Labs
- Lab 214 of 239 · Configure Security Recommendations for an Azure Virtual Machine [Guided] · 🔒 Infrastructure Labs
- Lab 215 of 239 · Can You Enable Secure Virtual Machines and Application Services? [Advanced] · 🔒 Infrastructure Labs
- Lab 216 of 239 · Enable Database Auditing for an Azure SQL Database [Guided] · 🔒 Infrastructure Labs
- Lab 217 of 239 · Enable Microsoft Defender for SQL in an Azure SQL Database [Guided] · 🔒 Infrastructure Labs
- Lab 218 of 239 · Can You Enable Security for an Azure SQL Database? [Advanced] · 🔒 Infrastructure Labs
- Lab 219 of 239 · Manage Shared Access Signature Keys [Guided] · 🔒 Infrastructure Labs
- Lab 220 of 239 · Configure Security for an Azure Cosmos DB Account [Guided] · 🔒 Infrastructure Labs
- Lab 221 of 239 · Can You Implement Security for an Azure Cosmos DB Account and a Storage Account? [Advanced] · 🔒 Infrastructure Labs
- Lab 222 of 239 · Can You Manage Security for Virtual Machines and Databases? [Expert] · 🔒 Infrastructure Labs
See this step on the full roadmap →
Step 7 — The senior security certification
The certification AI security adverts ask for most.
Follow the free CISSP — Certified Information Systems Security Professional roadmap.
🔒 The full roadmap adds here: 7 full courses · hands-on labs 223–239 of 239 (courses in Membership · 8 labs in Membership · 9 labs in Infrastructure Labs)
- Course · CISSP Certification Introduction. Prepare for the exam right · 🔒 Membership
- Course · Certified Information Systems Security Professional - CISSP · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 1 & 2 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 3 & 4 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 5 & 6 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 7 & 8 Video Boot Camp · 🔒 Membership
- Course · Business Continuity and Disaster Recovery Planning · 🔒 Membership
- Lab 223 of 239 · Using the OWASP Zed Attack Proxy Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 224 of 239 · Using the Burp Suite Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 225 of 239 · Use the Nikto Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 226 of 239 · Use the Arachni Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 227 of 239 · Use Web Application Scanners [Advanced] · 🔒 Infrastructure Labs
- Lab 228 of 239 · Use Greenbone Security Manager to Identify Vulnerabilities [Guided] · 🔒 Infrastructure Labs
- Lab 229 of 239 · Use Nmap for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 230 of 239 · Use hping for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 231 of 239 · Use Responder for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 232 of 239 · Secure Coding (Java) - Lab 1: Race Conditions · 🔒 Membership
- Lab 233 of 239 · Secure Coding (Java) - Lab 2: Data Validation · 🔒 Membership
- Lab 234 of 239 · Secure Coding (Java) - Lab 3: Authentication · 🔒 Membership
- Lab 235 of 239 · Secure Coding (Java) - Lab 4: Access Control · 🔒 Membership
- Lab 236 of 239 · Secure Coding (Java) - Lab 5: Cryptography · 🔒 Membership
- Lab 237 of 239 · Secure Coding (Java) - Lab 6: Error Handling · 🔒 Membership
- Lab 238 of 239 · Secure Coding (Java) - Lab 7: Static Analysis · 🔒 Membership
- Lab 239 of 239 · Secure Coding (Java) - Lab 8: Insecure Deserialization · 🔒 Membership
See this step on the full roadmap →

Where it leads

Where this career leads

Do it hands-on

The full AI Security Engineer roadmap

The same steps with every course and the hands-on labs, and your progress tracked.

The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytime

Advanced

AI-Driven Security Engineering

Become the Cyber Security Expert the AI Era Needs.

StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”

Explore the AI Master’s →