Top-tier Training Classes for your team from the industry's best
Our instructors have over two decades of experience in the technology and education industries, ranging from Penetration Testing and Software Development to Open Source Coding and AD Infrastructure.
We are excited to partner with Antisyphon, which hosts our Secure Ideas Training courses.
Looking to have Secure Ideas work privately with your organization? Check out our Corporate Training Catalog and schedule some time with us. We are here to help you stay ahead of the competition!
Corporate Training Catalog
Professionally Evil Application Security
The Professionally Evil Application Security (PEAS) course is designed to teach developers, IT professionals, and penetration testers of all skill levels. This course focuses on the techniques used to assess and exploit applications; including web and mobile applications, APIs, and HTTP-based systems. We combine these techniques with explanations of the risks exposed and defenses required to improve the security of your organization. The course uses a large number of hands-on exercises to reinforce the techniques and understanding an attendee will gain so that they benefit on the very first day back to work. The course focuses on manual techniques for discovery and exploitation while teaching an industry-standard methodology of reconnaissance, mapping, discovery, and exploitation. This methodology provides a comprehensive standard for assessing applications and APIs.
Foundational Data Protection Training
This foundational course is designed to provide the basic tools needed to protect the data that is most valuable to your business. Since data is an integral part of an organization’s core operations, it’s important to build a solid foundation for understanding the considerations and mechanisms related to data protection.
The protection of sensitive data is paramount for information security professionals. The course is intended to help provide the techniques and tools needed to conduct a self-assessment of your data protection program. This helps ensure that your limited resources are being dedicated to the places within your security program needing the most attention, and based on corporate goals, needs, and regulatory compliance requirements.
OWASP Top 10
In this course, Secure Ideas will walk attendees through the various items in the latest OWASP Top 10 and corresponding controls. Students will leverage modern applications to explore how the vulnerabilities work and how to find them in their own applications.
Red Team Fundamentals for Active Directory
The course mixes lecture with a number of hands-on exercises to reinforce the information and techniques. The activities will cover ways to examine an Active Directory environment, looking for a variety of misconfigurations that are commonly seen in Active Directory implementations (even by some security conscious entities), and then exploit these issues to pivot and escalate our access. Ultimately, the students will gain full control of an AD Forest.
While in class, students will be provided access to a lab containing realistic targets and tools to learn both the attacks and defenses of Active Directory. This environment enables the attendees to understand how the covered techniques are used in the real world.
Professionally Evil Network Testing
Introduction to PCI
Foundational Application Security Training
Professionally Evil Container Security
Professionally Evil API Testing
Professionally Evil CISSP Mentorship Program
ISC2 describes the CISSP as a way to prove “you have what it takes to effectively design, implement and manage a best-in-class cybersecurity program”. It is one of the primary certifications used as a stepping point in your cybersecurity career.
This class is set up to cover the 8 domains of the ISC2 CBK:
- Security and Risk Management
- Asset Security
- Security Architecture and Engineering
- Communication and Network Security
- Identity and Access Management (IAM)
- Security Assessment and Testing
- Security Operations
- Software Development and Security
ICS & OT Fundamentals
This course introduces foundational principles of ICS/OT environments. These systems support critical infrastructure across energy, manufacturing, and transportation sectors. As IT integration increases in these environments, unique security challenges emerge.
Participants will learn about OT system architecture, SCADA networks, and specialized cybersecurity approaches that balance operational reliability with threat mitigation.
Through engaging lectures, hands-on insights, and real-world examples, attendees will gain the knowledge necessary to understand, assess, and improve the cybersecurity posture of ICS/OT systems without compromising operational goals.
