Learning path

Security engineer

Everything you need to attack, defend and ship AI agents with confidence.

25 lessons · 132 min left

Start path → From chatbot to agent

FoundationsLesson 3: From chatbot to agentA chatbot talks. An agent acts. That one difference is where the entire security field in this guide comes from.Beginner5 min read🧪 Lab📝 TestUp next
FoundationsLesson 4: Tools: giving the model handsA tool is any button the model is allowed to press. Click each part of the diagram to see where trust is won and lost.Beginner6 min read🧪 Lab📝 Test
FoundationsLesson 5: Context, memory and forgettingThe model has no memory. It has a sheet of paper that gets re-read from scratch every single turn. Once you see that, a whole class of attacks makes sense.Beginner3 min read🧪 Lab📝 Test
FoundationsLesson 6: When agents work in teamsOne agent is a risk you can picture. Five agents passing notes to each other is a risk that grows faster than your ability to watch it.Middle3 min read🧪 Lab📝 Test
Agent securityLesson 7: Why the old security rules stop workingThirty years of security wisdom assumes code and data are separate things. Agents put them in the same pot and stir.Beginner5 min read🧪 Lab📝 Test
Agent securityLesson 8: The trust boundaryOne idea, drawn once, that the next fifteen modules all depend on. Where does trusted instruction end and untrusted content begin?Beginner6 min read🧪 Lab📝 Test
Agent securityLesson 9: Prompt injection, up closeThe number one risk on every serious list of AI vulnerabilities. Step through a live attack and then switch the defences on.Beginner6 min read🧪 Lab📝 Test
Agent securityLesson 10: Indirect injection: the invisible noteThe attacker never speaks to your agent. They just leave a note somewhere your agent will eventually read, and wait.Middle6 min read🧪 Lab📝 Test
Agent securityLesson 11: The lethal trifectaThree capabilities that are each perfectly fine on their own. Put all three in one agent and you have built a data-theft machine. Flip the switches and watch.Middle6 min read🧪 Lab📝 Test
Agent securityLesson 12: How data actually escapesExfiltration rarely looks like a file upload. It looks like a picture, a link, or a slightly odd search query. Click each channel to see the trick.Middle5 min read🧪 Lab📝 Test
Agent securityLesson 13: Excessive agency and blast radiusMost agent disasters are not clever attacks. They are an ordinary mistake meeting a permission nobody thought about. Build an agent below and watch the damage number move.Middle7 min read🧪 Lab📝 Test
Agent securityLesson 14: The confused deputyYour agent has powers your user does not. An attacker who cannot open a door themselves simply asks the agent to open it for them.Middle4 min read🧪 Lab📝 Test
Agent securityLesson 15: Supply chain: plugins, MCP servers and skillsInstalling a tool server hands a stranger a text box that writes directly into your agent's brain. Most people install them like browser extensions.Advanced4 min read🧪 Lab📝 Test
Agent securityLesson 16: Memory poisoningA normal attack ends when the conversation ends. An attack that reaches long-term memory does not end at all.Advanced5 min read🧪 Lab📝 Test
Agent securityLesson 17: Attacks that spread between agentsWhen agents talk to each other, a single poisoned message can travel through a system that has no idea it is under attack.Advanced5 min read🧪 Lab📝 Test
Agent securityLesson 18: Sandboxing: the room with no windowsYou cannot stop the agent being fooled. You can decide what room it is standing in when it happens.Middle5 min read🧪 Lab📝 Test
Agent securityLesson 19: Keeping a human in the loopA human approval step is your strongest control and the easiest one to ruin. The difference is entirely in how you write the dialog box.Beginner5 min read🧪 Lab📝 Test
Agent securityLesson 20: Guardrails, and why they leakFilters, classifiers and safety prompts are worth having. Just be honest about what they are: speed bumps, not walls.Middle6 min read🧪 Lab📝 Test
Agent securityLesson 21: Secrets, identity and who the agent really isEvery agent action happens as somebody. Getting that somebody right is the difference between an audit trail and a shrug.Advanced5 min read🧪 Lab📝 Test
Agent securityLesson 22: Watching what your agent doesYou cannot investigate what you did not record. Agents produce a lot of activity, and almost none of it is logged by default.Middle5 min read🧪 Lab📝 Test
Agent securityLesson 23: Red-teaming your own agentAttack it before someone else does. Here is a concrete list you can run this afternoon on a system you own.Advanced7 min read🧪 Lab📝 Test
Agent securityLesson 24: When it goes wrong: response and kill switchesAssume an incident. Write the plan now, while nothing is on fire and you can still think clearly.Middle5 min read🧪 Lab📝 Test
Agent securityLesson 25: The rules everyone actually citesThree documents come up in every serious conversation about AI risk. Here is what each one is for, in plain language.Middle7 min read🧪 Lab📝 Test
Build an AGILesson 66: Making the executor a real sandboxThe tutorial's executor runs attacker-influenceable code on your machine with your credentials. Here is what has to change before it touches anything you care about.Advanced7 min read🧪 Lab📝 Test
Put it to workLesson 60: The pre-flight checklistEverything in this guide, compressed into things you can tick off before an agent touches anything real. Print it. Use it.Middle4 min read🧪 Lab📝 Test