After this course you can attack AI systems deliberately to find their weaknesses: you test LLM applications for prompt injection and jailbreaks, check models for extraction and poisoned training data and examine agents, infrastructure and the supply chain. You classify your findings against OWASP and MITRE ATLAS and turn them into hardening and response plans. The course suits you if you already run penetration tests or work in a red team, blue team, SOC or DevSecOps and need to secure AI applications.
What you’ll take away.
- Map the attack surface of AI applications methodically and test them for weaknesses
- Carry out and assess prompt injection, jailbreaks and attacks on LLM applications
- Understand and demonstrate adversarial ML, model extraction and data poisoning
- Assess attacks on AI agents, infrastructure and the supply chain
- Classify findings against OWASP and MITRE ATLAS and plan hardening and incident response
Your training in detail
- Who is it for?
- Penetration testers, red and blue teams, SOC analysts, AI and ML engineers and DevSecOps specialists who need to attack or defend AI systems.
- Prerequisites
- Solid cybersecurity foundations and hands-on penetration testing experience. A basic understanding of machine learning and LLM applications makes it easier to get started. The course is not intended for newcomers to IT security.
- Format & planning
- Standard length: 5 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Offensive AI methodology, reconnaissance and attack surface mapping
Vulnerability scanning and fuzzing of AI systems
Prompt injection and attacks on LLM applications
Adversarial machine learning and model privacy attacks
Attacks on data and training pipelines
Agentic AI, model-to-model attacks, infrastructure and supply chain
Testing, evaluating and hardening AI systems, plus incident response and forensics
In a lab environment you assess an LLM application with a connected agent: map the attack surface, test prompt injection routes, classify findings against the OWASP LLM Top 10 and MITRE ATLAS and write concrete hardening measures.
Exams, licences & credentials
The course prepares you for EC-Council's Certified Offensive AI Security Professional (C|OASP) certification. EC-Council sets the exam format and eligibility. The exam and its fee are only included if the offer explicitly confirms this. The certificate is issued by EC-Council. This is not an official EC-Council course unless the offer states otherwise.
Vendor references & review date
Sources checked on 2026-11-10. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
Is the course suitable for beginners?
No. You should bring penetration testing experience. A foundation course makes more sense if you are new to IT security.
Do I work hands-on with real systems?
You work in a lab environment with AI applications set up for attack exercises, not on production systems.
Does EC-Council Certified Offensive AI Security Professional (C|OASP): attacking and hardening AI systems include a certificate?
The course prepares you for EC-Council's Certified Offensive AI Security Professional (C|OASP) certification. EC-Council sets the exam format and eligibility. The exam and its fee are only included if the offer explicitly confirms this. The certificate is issued by EC-Council. This is not an official EC-Council course unless the offer states otherwise.