Technical cybersecurity training for development and defense teams
No generic OWASP slides. We teach secure coding and threat detection using the real flaws we find in our audits — often in your own code.
Last updated:
Scope your project · Request technical training
Rather talk it through? Call us at +34 960 730 013
Why generic technical training does not reduce vulnerabilities
An OWASP Top 10 course with textbook examples does not connect with what a developer sees day to day. Training that changes behavior starts from real vulnerabilities, ideally found in your own code during an audit or pentest, and is delivered by the people who exploited them — not by someone who only read about them. The same applies to defense teams: teaching detection requires showing the traces a real attacker actually leaves, not a theoretical checklist.
Programs we deliver
- Secure coding: the OWASP Top 10 explained with real code, using the flaws we find in audits
- Defense team training: what traces an attacker leaves and how to spot them before exfiltration
- Dedicated training for Google Workspace and Microsoft 365 administrators on common misconfigurations
- Bespoke sessions built from the findings of a previous audit or pentest, with the development team fixing issues live
How we prepare the technical training
- Technical assessment: We review the stack, the language and, where available, the report of a previous audit or pentest to build the training on real findings.
- Material built on your own code: Where possible, examples are built on your own code, anonymized where needed, not on textbook examples.
- Hands-on session: On-site, in small groups that allow live practice on the code, not just slides.
- Technical evaluation: A reinforcement exercise with new vulnerabilities to check the learning translates into code, not just a theoretical test.
- Compliance documentation: Attendance record and contents in the format an ISO 27001 or NIS2 auditor expects.
What the team receives
- Training material built on your own code or real stack
- Attendance record and evaluation per participant
- Report on the team's most repeated failure patterns
- Documentary evidence for ISO 27001 or NIS2 audits
- Reusable reference guide for new hires
When this training fits
- Development teams carrying the same flaws audit after audit
- Companies that have run a pentest and want the team to understand the findings, not just patch them
- Defense (blue) teams that need to practice detection against real techniques, not just MITRE ATT&CK theory
- Google Workspace or Microsoft 365 administrators managing configuration with no dedicated security training
Frequently asked questions about technical training
How much does technical training cost?
A secure coding program with several sessions and hands-on work on your own code is quoted per project, based on number of sessions and team size. We give a fixed price before starting, and the first scoping call is free.
Do you need access to our code to prepare the training?
It is not required, but it improves the result significantly. If you have already done a pentest or code audit with us, we already have the findings; otherwise we work with anonymized snippets you provide or with examples in the same language and framework you use.
Is this the same as a source code audit?
No. A code audit finds and reports concrete vulnerabilities in your product; this training teaches the team not to make them in the future, often using the findings of a previous audit as teaching material. The usual sequence is to audit first, then train on what was found.
Do you also train teams in detection, not just secure development?
Yes, it is a separate program within this same technical training: we teach defense teams what traces an attacker leaves in logs, network traffic and endpoint behavior, based on the techniques we use ourselves in pentesting and red team engagements.
Related resources
- Source code review
- Google Workspace Audit
- Microsoft 365 Audit
- Web pentesting
- Training for leadership and boards
Ready to protect your business?
Answer the scoping form at your own pace and we'll use it to prepare your proposal. If you'd rather talk first, book a free 30-minute call.