AI Security and LLM Red Teaming is a hands-on course in testing and defending LLM applications and AI agents using the OWASP Top 10 for LLM Applications 2026, from prompt injection, data leakage and RAG weaknesses to automated red teaming with promptfoo and layered guardrails. It suits security engineers, penetration testers and developers who build AI applications.
LLM applications, from chatbots and RAG systems to AI agents that call tools on their own, are moving into real business systems. Their weaknesses are unlike those of ordinary web applications. Plain text in an email or a document can instruct the model to do something it should not, secrets in the context can leak into an answer, and an agent with too many permissions can be tricked into deleting data or sending it outside the organisation. Traditional scanners miss most of these risks.
This course takes learners through hands-on security testing of LLM applications from a defender's point of view, using the OWASP Top 10 for LLM Applications 2026 and the OWASP Top 10 for Agentic Applications as the framework. Every lab targets only deliberately vulnerable demo applications that run on the learner's own machine. Learners start with direct and indirect prompt injection, data leakage and RAG weaknesses, then move on to attacking AI agents through tools and MCP. They then use promptfoo for automated red teaming, build layered guardrails, run the tests in CI/CD, and finish with a capstone in which they write a findings report with recommended fixes for the development team. (2 days, 6 hours per day, 12 hours in total, Intermediate level.)
Course Details
A 2-day course, 6 hours per day (12 hours in total, 09:00-16:00), alternating lectures with labs. Intermediate level. Every lab targets only deliberately vulnerable chatbot, RAG and AI agent applications that run on the learner's own machine with Docker. The content follows the OWASP Top 10 for LLM Applications 2026 and the OWASP Top 10 for Agentic Applications, from a defender's point of view:
every attack ends with how to fix it. The course builds on Ethical Hacking and Penetration Testing Fundamentals and focuses entirely on LLM-based applications. Learners use small local models through Ollama, or their own or company LLM API key, with API usage billed by actual use. Learners take home a lab guide, docker-compose files for the demo applications, promptfoo configurations and a red team report template.
Section 1: Lab: AI Red Teaming and Setting Up the Test Range
Section 2: OWASP Top 10 for LLM Applications 2026
Section 3: Lab: Direct and Indirect Prompt Injection
Section 4: Lab: Data Leakage and Hidden Context Exposure
Section 5: Lab: Output Handling and Unbounded Consumption
Section 6: Lab: RAG Weaknesses and the Supply Chain
Section 7: Excessive Agency and the Agentic Top 10
Section 8: Lab: Testing AI Agents, Tools and MCP
Section 9: Lab: Automated Red Teaming with promptfoo
Section 10: Lab: Guardrails and Defence in Depth
Section 11: Continuous Testing and Production Monitoring
Section 12: Workshop: Capstone Red Team Engagement
No public rounds are open right now. Join the waiting list and we will contact you first when the next round opens, or ask us on LINE. Or call 02-570-8449 or 088-807-9770
Built for Security engineers and penetration testers who need to test systems built on LLMs or AI agents · AI engineers and developers who build chatbots, RAG systems or agents and want them secure from the start · AppSec and DevSecOps teams who set testing standards for AI applications in the organisation Background you should have: Basic Python, and the ability to read application code that calls an LLM API · An understanding of web security basics such as XSS, SQL injection and HTTP requests Not sure the fit is right? Talk to our team on LINE @itgenius or call 02-570-8449.
THB 8,900 (currently THB 8,010 on promotion). The course runs 12 hours. The price excludes 7% VAT (for payment in a company's name). Pay by bank transfer to the company account, confirm it on our payment page, and we can issue the receipt or tax invoice in your company's name.
Yes. Everyone who completes the course receives a Certificate of Completion from IT Genius Institute. Each certificate carries its own number, and anyone holding that number can verify it online on our certificate page, so you can add it to your portfolio or pass it to HR as evidence of training.
You can attend onsite at IT Genius Institute or arrange to join online, and we also run it as a private in-house session for your team. Ask about dates and venues on LINE @itgenius or call 02-570-8449.
Yes. You may retake the same course free of charge in a later round, under the institute's conditions. Tell our team which course and round you attended, and we will check it and offer you the rounds that still have seats. Ask us on LINE @itgenius or call 02-570-8449.
Enrol online with the registration form on this page. You can register several attendees at once and enter your tax ID and billing address for the tax invoice. Or request a company quotation straight from the quote button. For anything else call 02-570-8449 or reach us on LINE @itgenius.
Most SOC teams are not short of data. They are buried in alerts that must be opened one at a time, switching screens to look up IPs or hashes, rewriting queries for every hunt and spending hours turning incidents into reports. AI and LLMs can take a lot of…
An organization can only defend well when it understands how attackers think and operate. This course teaches ethical penetration testing following a standard methodology: defining scope and obtaining written authorization, reconnaissance, scanning and…
Development teams now ship code to production several times a day with CI/CD, yet much of the security work still waits for a final check just before release. Vulnerabilities are found late, when they are hard and expensive to fix, or they slip into…
