AI and machine learning · Free online course

AI Security and the OWASP Top 10 for LLMs

The security course for people who have already built something with an LLM: the attack surface a model adds, all ten 2026 OWASP LLM risks one at a time, indirect injection and zero-click agent attacks, what leaks out through a chatbot, securing agents with identity and least privilege, the OWASP MCP and agentic guidance, red-teaming with MITRE ATLAS, and the NIST-based governance a plant or a GCC can actually enforce.

15 modules
9h 21m of video
Intermediate
English
₹0, free

AI Security and the OWASP Top 10 for LLMs course cover

₹0Free for good

Worth ₹5,999 by length and depth against classroom training. It has always been free; that is not a former price.

No card. Checkout takes a minute and gives you a receipt.

Overview

About AI Security and the OWASP Top 10 for LLMs

AI Security and the OWASP Top 10 for LLMs is a free, self-paced online course from EDWartens for engineers, developers and students applying AI to real work. It has 15 modules and 9h 21m of video lessons by IBM Technology, Vandana Verma, Jeff Crume, with written notes and worked problems, a practical project with a document pack and a 15-question final assessment (pass mark 60%). Learning is free with an account; an optional certificate with a public verification code is issued when you pass. Last updated 27 September 2026.

Who it is for: Engineers, developers and students applying AI to real work

This course includes

9h 21m of video lessons
15 modules with written notes and diagrams
One final assessment: 15 questions, pass mark 60%
Ask-an-engineer support from practising engineers
Lifetime access, the course does not expire
Optional verifiable certificate when you finish

Step 1 of 3
Learn the 15 modules
9h 21m of video lessons, written notes and a practice task per module, at your own pace.
Step 2 of 3
Pass the final assessment
15 questions drawn from every module, pass mark 60%, 3 attempts.
Step 3 of 3
Take the certificate, if you want it
Optional, paid once, only if you choose it. The course stays free either way.
See the certificate and its price

A look inside

AI Security and the OWASP Top 10 for LLMs: Syllabus at a glance — Syllabus at a glance

AI Security and the OWASP Top 10 for LLMs: What you will be able to do — What you will be able to do

AI Security and the OWASP Top 10 for LLMs: Tools and credits — Tools and credits

From the lessons

Why an LLM is a new attack surface
by IBM Technology
LLM01: prompt injection and its defences
by IBM Technology
LLM02 and LLM08: what leaks out
by Vandana Verma
LLM10 and LLM03: output handling and excessive agency
by Vandana Verma
LLM06: unbounded consumption and the cost of running AI
by Vandana Verma
Agent identity, privilege and delegation
by IBM Technology

Lesson frames belong to the creators named in the Credits and are shown from YouTube.

What you learn

What you will be able to do

Threat-model an AI feature by its parts; name and defend against all ten OWASP LLM risks; trace an indirect injection from a poisoned document to an executed action; write the rule for what may be pasted into a public chatbot; check the provenance of a model, dataset or plugin before it is used; scope an agent's tools, identity and permissions so it cannot act beyond its brief; review a connector before wiring it in; plan a pen test of an LLM feature; and fill the register entry and AI-use policy that make the whole thing auditable.

Draw an AI feature as its parts and mark where an outsider's text can enter
Name all ten 2026 OWASP LLM risks and sort a real incident into the right one
Trace an indirect injection from a poisoned document to an executed action
Write the one-page rule on what may and may not be pasted into a public chatbot
Scope an agent's tools, identity and permissions to the least it actually needs
Plan a pen test of an LLM feature and fill the AI register entry behind it

Syllabus

Course content, module by module

In order, at whatever pace suits you. Each module ends with a practice task that builds on the last.

Modules: 15
Video lessons: 49
Of video: 9h 21m
Final questions: 15

01
Why an LLM is a new attack surface
4 lessons · 34m
02
The 2026 OWASP Top 10 for LLM applications
2 lessons · 40m
03
LLM01: prompt injection and its defences
4 lessons · 57m
04
Indirect injection, promptware and zero-click attacks
3 lessons · 36m
05
LLM02 and LLM08: what leaks out
4 lessons · 36m
06
LLM04 and LLM05: supply chain, data and model poisoning
4 lessons · 26m
07
LLM10 and LLM03: output handling and excessive agency
4 lessons · 29m
08
LLM09 and LLM07: retrieval weaknesses and misinformation
4 lessons · 34m
09
LLM06: unbounded consumption and the cost of running AI
4 lessons · 37m
10
Securing AI agents: architecture and zero trust
4 lessons · 45m
11
Agent identity, privilege and delegation
3 lessons · 41m
12
OWASP guidance for agentic applications and MCP
2 lessons · 40m
13
Testing AI systems: MITRE ATLAS, pen-testing, adversarial AI
3 lessons · 1h 5m
14
Governance: NIST AI RMF and a rule people can follow
4 lessons · 41m
15
Final assessment
0 lessons · 0m
Final assessment · 15 questions, pass mark 60%

Show all 15 modules

Project

The course project

Optional practice that ends in the kind of job the course prepares you for, with the documents that go with it.

About 16 hours

Securing a maintenance-manual chatbot before it goes on the plant network at a Cork pharma plant

Take a RAG chatbot that answers technicians' questions from PLC and drive manuals on an OpenRouter free model, and do to it what a plant's OT security team does before anything reaches the plant network: inventory its parts, map its threats to the OWASP Top 10 for LLM Applications with a test for each, red-team it with promptfoo and by hand, write the security requirements from what you found, fix it, re-test on the same test IDs, and hand over an incident-response and model-update procedure. You deliver the risk register, the test report with the prompts you tried, the CRS and the re-test evidence. The sample pack shows what each document looks like when a plant's security team signs it.

Sample document pack, 7 documents, filled in for the scenario

Asset inventoryOT Asset Inventory: Maintenance Manual Chatbot and Everything It Reaches
Risk registerThreat and Risk Register: Maintenance Manual Chatbot, mapped to the OWASP Top 10 for LLM Applications 2026
CRSCybersecurity Requirements Specification: Maintenance Manual Chatbot on the Plant Network
Test reportRed-Team Test Report: Baseline and Re-test of the Maintenance Manual Chatbot
ProcedureIncident Response and Model Update: Maintenance Manual Chatbot
PlanRemediation and Go-Live Plan: Maintenance Manual Chatbot on the Plant Network
Training recordTraining Record: Chatbot Users, Owner and Corpus Custodian

Read inside the course and download as a workbook. The project is optional practice, marked when you submit it; the certificate needs only the modules and the final assessment.

Tools

Software, hardware and lessons

Software

None required. A free chatbot account is enough for the leakage and grounding exercises.

Hardware

None.

Who it is for

Intermediate. Best after any LLM, RAG or AI agent course in the track. Some IT or OT security background helps, but no coding is required.

Video lessons by

IBM Technology
Vandana Verma
Jeff Crume

Independent creators, credited in full under Credits.

Software you need

What to download, where from, what it costs and how to install it. Every link goes to the maker's own site, never a mirror.

Nothing to install

A free account on any AI assistant is enough for the leakage and grounding exercises.

One AI assistant

Any one is enough.

01
ChatGPT
OpenAI, in the browser
Free plan with limits
Runs on
Any modern web browser, plus mobile and desktop apps
Account
A free OpenAI account
The Free plan allows everyday text chats. File uploads, image creation, voice and data analysis have tighter limits than paid plans, and ads may appear in some countries. Paid plans raise the limits.
Show the 4 stepsHide the steps
Steps
1. 1.Open chatgpt.com.
2. 2.Click Sign up and create an account with your email, or a Google, Microsoft or Apple account.
3. 3.Verify your email and confirm your details.
4. 4.Type your question in the message box.
- Do not paste personal data, passwords or confidential work files.
- ChatGPT tells you when you reach a limit. Wait for it to reset or switch to a lighter task.
Open ChatGPTchatgpt.com
02
Claude
Anthropic, in the browser
Free plan with limits
Runs on
Any modern web browser, plus desktop and mobile apps
Account
A free Claude account (you must be 18 or over)
The Free plan covers chat on web, desktop and mobile, web search, file creation and Artifacts. Usage limits reset on a rolling five-hour window and depend on message length and features used. Paid plans give more usage.
Show the 4 stepsHide the steps
Steps
1. 1.Open claude.ai (or see the plans at claude.com/pricing).
2. 2.Sign up with your email or Google account and confirm your email.
3. 3.Confirm you are 18 or over and accept the terms.
4. 4.Type your question in the message box.
- Long conversations and large files use up your limit faster. Start a new chat for a new topic.
- Do not paste personal data or confidential work files.
Open Claudeclaude.com
03
Google Gemini
Google, in the browser
Free with limits
Runs on
Any modern web browser, plus Android and iOS apps
Account
A free Google account
Free with a Google account, including a Flash model, limited access to the Pro model, image generation, Deep Research and Gems. Paid Google AI plans give higher limits. Some features require you to be 18 or over.
Show the 4 stepsHide the steps
Steps
1. 1.Open gemini.google.com.
2. 2.Sign in with your Google account.
3. 3.Accept the terms the first time you use it.
4. 4.Type your question or upload a file in the prompt box.
- Use a personal Google account. Work or school accounts depend on your administrator's settings.
Open Google Geminigemini.google.com
04
Microsoft Copilot and Microsoft 365 Copilot Chat
Microsoft, in the browser
Free
Runs on
Any modern web browser, plus Windows, macOS, Android and iOS apps
Account
None needed
Microsoft Copilot is free for individuals; you must be at least 13 (older in some countries). Microsoft 365 Copilot Chat is included at no extra cost for organisations with an eligible Microsoft 365 licence and needs a work or school (Microsoft Entra ID) account.
Show the 4 stepsHide the steps
Steps
1. 1.Open copilot.microsoft.com.
2. 2.Optionally click Sign in and use your personal Microsoft account.
3. 3.Type your question in the message box.
4. 4.For work or school use, sign in at microsoft365.com with your organisation account and open Copilot Chat.
- Copilot Chat with a work or school account adds enterprise data protection. Use it for work material if your organisation provides it.
Open Microsoft Copilot and Microsoft 365 Copilot Chatcopilot.microsoft.com

Checked against each maker's own page on 27 September 2026. Trial lengths and editions change; the maker's page is the final word.

What you walk away with

Your certificate for AI Security and the OWASP Top 10 for LLMs

Finish the course, pass the final, and this is the document with your name on it.

Sample Wartens Certificate of Completion for AI Security and the OWASP Top 10 for LLMs, issued through the EDWartens training portal — Sample. The issued certificate carries your name, your final score, a unique certificate ID and its own QR code.

Verifiable by anyone
A unique certificate number and a public verification page. A recruiter checks it in ten seconds.
Adds to LinkedIn in one click
Issuer, credential ID and URL prefilled, with 5 matching skills to pin to your profile.
QR code on the certificate
Scans straight to the verification page, so a printed copy proves itself.
Names what you can do
Lists the topics covered, from the llm attack surface: model, system prompt, retrieval, tools and output to testing with mitre atlas and governance under the nist ai risk management framework.
A permanent link
Put it on a CV, a portfolio or an application. The URL never changes.
Earned, not attended
Issued only after every module and a final assessment at 60%, with 3 attempts. That is why it stands up.

Learning is free. The certificate is optional.

Add it now and pay only when you have finished the course, or come back for it later. One-off, US$28.99, with a receipt.

Issued by Wartens Ltd (England and Wales, company no. 15262249) through the EDWartens training portal, as a Certificate of Completion for this self-paced course. Sold in India by Wartens Automation Private Limited. It is not a vendor certification, a university award or a CPD-accredited activity, and it does not certify competence on live equipment. Delivered electronically; see the refund policy.

FAQ

Common questions

Who is the AI Security and the OWASP Top 10 for LLMs course for?

Engineers who have already put an LLM, a RAG chatbot or an agent near company data, and IT or OT security people who now have AI systems on their asset list. It is the security counterpart to the building courses in the AI track.

What do I need to know first?

You should have seen an LLM application from the inside, so any LLM, RAG or agent course in the track first. Some IT or OT security background helps but is not assumed, and no coding is required. Every task is done on paper against a system you already work with.

Is this the OWASP certification?

There is no OWASP certification for the LLM Top 10. The OWASP Top 10 for LLM Applications is a free published document that anyone may read, and this course teaches you to apply it to a real system. This course is not a security certification of any kind and does not prepare you for one.

Is this a hacking course?

No. It is defensive: threat modelling, controls, agent permissions, governance and incident response. The testing module covers how an authorised test of an LLM feature is scoped, run and written up, not how to attack somebody else's system.

How long is it?

Fourteen modules plus a final, about nine hours of video and roughly fourteen hours in total once the notes, practice tasks and practice questions are counted. A module a day for a fortnight works well.

Is the AI Security and the OWASP Top 10 for LLMs course really free?

Yes. Every module, practice task and assessment. You create an account so your progress is saved and the assessments can be marked. The certificate is the only paid item, and only if you want it.

What certificate does the AI Security and the OWASP Top 10 for LLMs course give?

An EDWartens Certificate of Completion, issued when you have finished every module and passed the final at 60 per cent, with a verification code anyone can check. It is not a vendor credential and is never described as one.

Who made the video lessons in the AI Security and the OWASP Top 10 for LLMs course?

The creators named in the Credits block at the foot of this page, on their own YouTube channels. EDWartens did not make the videos and the creators are not affiliated with EDWartens. What EDWartens wrote is the study plan, the notes, the practice tasks and the assessments.

Is the AI Security and the OWASP Top 10 for LLMs course free in India, and what does the certificate cost?

Yes. Learning costs ₹0 in India: every module, the written notes, the practice tasks and the final assessment, with no card and no trial period. The only paid item is the optional EDWartens Certificate of Completion, ₹599 including GST for this intermediate course, paid in rupees through Razorpay, and only if you want it after passing the final assessment.

All course facts

Price: ₹0, free for good. No trial, no card. Comparable classroom training of this length costs about ₹5,999.
Who it is for: Engineers, developers and students applying AI to real work
Format: 15 self-paced modules, 9h 21m of video, written notes, a practice task per module and one final assessment.
Level: Intermediate. Intermediate. Best after any LLM, RAG or AI agent course in the track. Some IT or OT security background helps, but no coding is required.
Brand: Vendor-neutral
Software: None required. A free chatbot account is enough for the leakage and grounding exercises.
Hardware: None.
Certificate: Optional EDWartens Certificate of Completion, ₹599 inclusive of GST for learners in India, verifiable by code. Not a vendor credential.
Video lessons by: IBM Technology, Vandana Verma, Jeff Crume (independent creators, credited below)
Language: English
Last updated: 27 September 2026

PLC programming · FreeSiemens TIA Portal

Siemens TIA Portal in Three Hours free course cover

PLC programming · FreeSiemens TIA Portal in Three Hours

TIA Portal: Build a Machine free course cover

PLC programming · FreeTIA Portal: Build a Machine

Instrumentation for PLC Engineers free course cover

Instrumentation · FreeInstrumentation for PLC Engineers

More free courses: Free cyber security courses · Free AI courses for engineers · Free IT security and SOC analyst courses

Classroom course, Bangalore

PLC training in Bangalore

The Automation Engineer Program (AEP) is our classroom course in PLC programming and industrial automation, taught in person at our Electronic City centre.

Credits

Who made the video lessons

The video lessons in this course were created by the people below, not by EDWartens. Every lesson streams from its creator's own YouTube channel; EDWartens neither hosts nor sells that footage, and the creators are not affiliated with EDWartens and do not endorse this course. What EDWartens wrote is the study plan, the notes, the practice tasks and the assessments.

IBM Technologythe attack-surface, prompt injection, promptware kill chain, zero-click, shadow AI, corpus poisoning, LLMjacking, agent security, zero trust, MITRE ATLAS and NIST AI RMF explainers
Vandana Vermathe risk-by-risk walkthrough of LLM01 to LLM10, the first look at the OWASP MCP Top 10, and the OWASP Securing Agentic Applications guide
Jeff Crumethe long adversarial AI session on evasion, model inversion, model theft and deepfakes

If you are one of these creators and would like a lesson removed or credited differently, write to info@wartens.com.