AI Security and the OWASP Top 10 for LLMs

Engineers who have already put an LLM, a RAG chatbot or an agent near company data, and IT or OT security people who now have AI systems on their asset list. It is the security counterpart to the building courses in the AI track.

You should have seen an LLM application from the inside, so any LLM, RAG or agent course in the track first. Some IT or OT security background helps but is not assumed, and no coding is required. Every task is done on paper against a system you already work with.

There is no OWASP certification for the LLM Top 10. The OWASP Top 10 for LLM Applications is a free published document that anyone may read, and this course teaches you to apply it to a real system. This course is not a security certification of any kind and does not prepare you for one.

No. It is defensive: threat modelling, controls, agent permissions, governance and incident response. The testing module covers how an authorised test of an LLM feature is scoped, run and written up, not how to attack somebody else's system.

Fourteen modules plus a final, about nine hours of video and roughly fourteen hours in total once the notes, practice tasks and practice questions are counted. A module a day for a fortnight works well.

Yes. Every module, practice task and assessment. You create an account so your progress is saved and the assessments can be marked. The certificate is the only paid item, and only if you want it.

An EDWartens Certificate of Completion, issued when you have finished every module and passed the final at 60 per cent, with a verification code anyone can check. It is not a vendor credential and is never described as one.

The creators named in the Credits block at the foot of this page, on their own YouTube channels. EDWartens did not make the videos and the creators are not affiliated with EDWartens. What EDWartens wrote is the study plan, the notes, the practice tasks and the assessments.

No. The lab is optional practice. You can skip it whenever you like, and it never blocks your progress, the final assessment or your certificate.

Yes. Every lab level for this course opens in your browser, free, with nothing to install.

The AI Security and the OWASP Top 10 for LLMs course has 15 modules. It opens with "Why an LLM is a new attack surface", goes through "The 2026 OWASP Top 10 for LLM applications", "LLM04 and LLM05: supply chain, data and model poisoning", "Securing AI agents: architecture and zero trust" and "Governance: NIST AI RMF and a rule people can follow" and ends with "Final assessment". The full list with minutes is under "What you learn" on this page.

After the AI Security and the OWASP Top 10 for LLMs course: Draw an AI feature as its parts and mark where an outsider's text can enter; Name all ten 2026 OWASP LLM risks and sort a real incident into the right one; Trace an indirect injection from a poisoned document to an executed action. These are the practical outcomes the course is written around, and the final assessment of 15 questions checks them.

For the AI Security and the OWASP Top 10 for LLMs course, software: None required. A free chatbot account is enough for the leakage and grounding exercises. Hardware: none. The course itself is free.

AI Security and the OWASP Top 10 for LLMs is rated intermediate. Intermediate. Best after any LLM, RAG or AI agent course in the track. Some IT or OT security background helps, but no coding is required. It is written for engineers, developers and students applying AI to real work, and takes about 13.8 hours at your own pace.

Skills from the AI Security and the OWASP Top 10 for LLMs course (for example: draw an AI feature as its parts and mark where an outsider's text can enter) are used in roles such as AI engineer, machine learning engineer, data analyst and automation developer, and in machine learning engineer work. The course gives you practical evidence of the skill; it does not promise a job, and employers decide on experience and interview.