How long is the AI Security and Red-Teaming Bootcamp?

12 weeks at about 15 hours a week. The weeks run as six two-week blocks; each block ends in a project you deploy and a gate you must pass before the next block opens.

Is the AI Security and Red-Teaming Bootcamp live or self-paced?

Live. It is taught on Zoom by one instructor, with a 30-minute one-to-one every week. Nova, Square 1's AI tutor, grades every exercise and project between sessions against a rubric you can read.

When are the live sessions for the AI Security and Red-Teaming Bootcamp?

Live sessions run on weekday evenings from 5:30 PM Sri Lanka and India time, with full-day sessions at weekends. That is 5:00 PM in Pakistan, 5:45 PM in Nepal and 6:00 PM in Bangladesh, so the sessions fit around a working day.

How much does the AI Security and Red-Teaming Bootcamp cost?

A$200 for the founding cohort, paid once; the standard price is A$400. It is the same price in every country. Founding students keep their founding price on any second programme.

What will I build in the AI Security and Red-Teaming Bootcamp?

6 deployed projects: The attack log, The harness, Defended, The audit, The engagement and Employer brief. Each is graded against a published rubric and kept on a record an employer can open at /verify.

What skills does the AI Security and Red-Teaming Bootcamp teach?

Python, LLM security, prompt injection, guardrails, sandboxing and reporting. It prepares you for roles such as AI security engineer, AI red-teamer, Security engineer (ML) and Trust and safety engineer.

Does the AI Security and Red-Teaming Bootcamp guarantee a job?

No. No placement rate is published because the first cohorts have not graduated. What you leave with is six deployed projects, a recorded defence of your code and a hiring plan worked through with your instructor, including a two-week hiring sprint at the end.

Live bootcampTaught live on Zoom, one instructor

AI Security and Red-Teaming Bootcamp

Attack and defend LLM applications: prompt injection, data exfiltration, model abuse.

AI Security and Red-Teaming Bootcamp is a 12-week live online bootcamp, taught on Zoom by one instructor at about 15 hours a week, with 6 deployed projects and a one-to-one every week. The founding price is A$200, down from A$400. Live sessions run on weekday evenings from 5:30 PM Sri Lanka and India time, with full-day sessions at weekends.

Taught with

PythonClaudeChatGPTHugging FaceDocker

Not sure it is for you?Take the free Cybersecurity skill check

By week 12, you will have shipped

Week 1Jailbreak LogA log of jailbreak attempts against a lab chatbot with the outcome of each
Weeks 1–2The attack surfaceA vulnerable LLM application and an attack log, published in a lab
Week 3Attack GeneratorA Python script that generates prompt variations from a seed attack and runs them
Weeks 3–4Automated red-teamingAn automated red-team harness, deployed against the lab app
Weeks 5–6DefencesA defended version of the lab app with measured attack reduction
Week 7Model Card ReviewA review of a Hugging Face model's card, licence and files with risks noted
Weeks 7–8Data and modelsA model supply-chain audit with findings, published
Week 9Engagement ScopeA written scope and rules of engagement for a red-team test on one application
Weeks 9–10ProgrammesThe capstone: a full red-team engagement on a real application with a report
Weeks 11–12Employer brief and hiring sprintThe employer brief shipped, and demo day

weeks, live on Zoom: 12
hours a week: 15
projects to build: 10
minutes 1-1, every week: 30

Who it is for, and what you receive.

Engineers who have built or tested an LLM application, ideally with some security background, who want to attack and defend AI systems for a living.

Before you start

You have built or tested an LLM application; some security background helps.

Skills

PythonLLM securityprompt injectionguardrailssandboxingreporting

A week, about 15 hours

Live on Zoom: 4h
Set reading and exercises: 6h
The project: 5h

1
Six deployed projects
Each graded by Nova against a published rubric and signed off by the instructor at the gate.
2
The twelve-week plan
Every week has its theme, its topics and what you build, published before you apply and taught live by your instructor.
3
Live on Zoom every week
A 90-minute live code review, a 60-minute squad lab, 60 minutes of office hours, and a 30-minute 1-1 with your instructor.
4
Your hiring plan
Opened in week 1 and reviewed in every 1-1: target roles, the gap map, the proof list, weekly actions, an interview log, the outcome.
5
The record
Every grade and every project with its repository at square1ai.com/u/{handle}, and the recording of your viva, verifiable by any employer.
6
The certificate
A credential ID that resolves at square1ai.com/verify to the real completion.
7
The hiring sprint
Weeks 11 and 12: CV and portfolio from graded work, applications, mock interviews scored against the role, demo day.
8
Nova for twelve weeks
A tutor with every submission of yours in its memory, at 2am as well as in class.

Twelve weeks in six parts.

Each part teaches for a week, then you build and deploy a project, then a gate checks it before the next part opens. The project and its gate are the part's entry on your record.

Live time each week on Zoom: a 90-minute class where the instructor reviews real submissions, a 60-minute squad lab, 60 minutes of office hours, and your own 30-minute 1-1. Nothing is lectured live; the recorded lessons do that.

Key skillsHow LLM applications failPrompt injection, direct and indirectTool and agent abuse
Week 1
The attack surface
- How LLM applications fail
- Prompt injection, direct and indirect
- Tool and agent abuse
You build: A vulnerable lab app
Week 2
Project 1: the attack log
- Attack taxonomies
- Reproducible attacks
You build: A vulnerable app and an attack log covering five classes
Project 1 · the gate at week 2
The attack log
A vulnerable LLM application and an attack log, published in a lab
You hand in
- Lab app
- Attack log
- Reproductions
The gate
Five distinct attack classes demonstrated.

What you can do by week 12.

Six red-team and defence projects and a reusable harness, in a field where the number of people who can do this is far smaller than the number of companies who need it.

1
Demonstrate the attack classes against LLM applications: direct and indirect prompt injection, tool and agent abuse.
2
Build automated red-team harnesses that generate attacks, fuzz prompts and tools, and score harm.
3
Build defences: guardrails, permission design for agents, isolation and sandboxing, and measure the reduction.
4
Audit the data and model supply chain: poisoning, extraction, theft, provenance.
5
Run an AI red-team engagement and report to leadership against standards.
6
Defend a finding and its fix, on camera.

Roles this prepares you for

AI security engineerAI red-teamerSecurity engineer (ML)Trust and safety engineer

No placement rate is shown, because there are no graduates to count yet. The roles above are what the projects are built for.

Your record at week 12.

Every exercise and project is graded by Nova against a rubric you can read, and every grade is kept on one page an employer can open and run. This is what the programme writes to it.

Graded, line by line: Nova reads every submission against the brief and the rubric and returns a score, what you did well and what to fix.
Six gates: A block does not open until the previous project passes its gate. You always know where you are and what is next.
A weekly 1-1: Thirty minutes with your instructor, who has already read your code before the call.
One page an employer can run: Every grade, project and the viva recording at /verify. An employer opens it, runs the code and watches you defend it.

Record, AI Security and Red-Teaming BootcampExample

Week 2
The attack log
Five distinct attack classes demonstrated
Graded, gate signed
Week 4
The harness
The harness finds the seeded vulnerabilities
Graded, gate signed
Week 6
Defended
Attack success drops below a stated rate
Graded, gate signed
Week 8
The audit
Findings are reproduced
Graded, gate signed

The entries, not the grades: those are yours to earn. The page lives at /verify and an employer needs no account to open it.

8 entries, twelve weeks. Reserving a spot holds the founding price.

Reserve a seat

How we help you find a job.

The last block is not curriculum. It is the hiring sprint, and the proof you built in the ten weeks before it.

The course booklet

The whole plan on a few pages: the parts, the projects, the gates and the price. We email it to you.

Get the booklet

1
Your hiring plan, from week 1
Six parts you and your instructor keep: target roles, the gap map from real postings, the proof to send, weekly actions, an interview log, the outcome. Read before every 1-1.
2
The hiring sprint
Weeks 11 and 12: CV, portfolio, applications, mock interviews, and demo day in front of hiring partners.
3
A record an employer can run
Your deployed projects and the recorded viva on /verify. An employer opens it, runs the code and watches you defend it.
4
The career agent
Paste a real job posting at /career and it maps the role to your graded work and what to do next.
5
The roles directory
Every role we prepare people for, what it pays and what it asks, at /roles.

Questions people ask.

About AI Security and Red-Teaming Bootcamp, answered from the plan on this page.

One cohort, one instructor. Hold your spot.

A cohort of 25, one instructor, 12 weeks, six things you ship. Spot holders hear the start date first, and nothing is charged before you confirm.

Six red-team and defence projects
A recorded viva
Your record on /verify

A$200~~A$400~~