Security Capability Development
for People & AI
Training, detection and response exercises and hacking competitions for people; tailored evaluation and improvement of AI agents
Learn, try it for real, compete, and grow.
We build the practical capability of people and AI to carry out security work and to detect and respond to attacks. The judgements people make, the actions they take and the feedback they get carry into their next piece of work.
Can our people and AI agents make sound judgements and get real security work done?
People build capability through education, hands-on exercises and hacking competitions, and AI agents through evaluation and improvement.
Reviewed
Training programmes
Four programmes for people, by role and purpose. Evaluating and improving AI agents is covered separately below.
Security staff and developers learn the attacker's view first-hand in a controlled lab, from penetration testing, bug hunting and reversing to embedded, industrial and AI systems.
Detection and response staff train against real attack techniques alongside the attack side, one technique at a time, and fix what was missed on the spot.
We run internal, industry and public competitions, from challenge design to running the event: participants test their skills against each other, and you find the people who stand out.
Through realistic situations, such as phishing emails or impersonation calls, all staff build the habit of doubting first and reporting straight away.
COLLAB People & AI Collaboration · KNOWLEDGE Knowledge Infrastructure · EXPLOIT Offensive Engineering
Designed for each programme
Goals, length and conditions are set together for each programme.
Learning goals
What participants should be able to judge and do afterwards, tied to their role and work.
Length and format
From a single workshop to a longer programme that links several courses by role, set to your goals and schedule.
Participants and conditions
Who takes part, at what level, and conditions such as the practice environment.
AI agent evaluation and improvement
Evaluation and improvement of AI agents' task performance and safe operation are delivered as tailored engagements, each shaped around your agents and the work you give them.
- Task performance
Using tasks close to real work, we evaluate whether an agent plans towards its goal, uses knowledge and tools to carry out the security work it is given, and checks its own results.
- Safe operation
We check that operating controls such as permissions, approvals, interruption and recovery hold in practice, and that people can stay involved throughout the work and step in when needed.
- Improvement
Gaps found in evaluation feed improvements to the knowledge, tools, procedures and review flow the agent works with. Where new tools or agents are needed, we can build them with you through Custom Security & AI Engineering.
Here we look at whether AI agents can do security work. Testing an AI system as the target of attack is covered by AI System Security Assessment & Penetration Testing.
Targets, scope, deliverables, timelines and operational responsibilities are agreed for each engagement.