IronProbe LogoIronProbe
Home/Trainings
OSCP & CREST Certified Instructors

Offensive Security Training & Workshops

Give your development, engineering, DevOps, security, and leadership teams the offensive mindset they need to build resilient systems. Our workshops mirror real-world attack scenarios — so your people learn to think like adversaries, spot weaknesses early, and ship securely.

OSCP & CREST

Certified instructors

100% Hands-on

Lab-driven learning

Any Team

Dev, DevOps, security & leadership

Real Scenarios

Attack simulations, not slide decks

Learn by Attacking

Workshop Offerings

Six specialised programmes covering the attack surfaces that matter most to modern organisations. Every workshop is built around live labs, guided exploitation, and structured debriefs — participants leave with practical skills, not just certificates on a wall.

Application Layer01

Web Application Security Workshop

Break, fix, and defend modern web apps through guided exploitation and secure-by-design principles.

Covers

  • OWASP Top 10 deep-dive with live exploitation
  • Authentication & authorization bypass techniques
  • API and microservice attack surfaces
  • Business logic and workflow abuse testing
  • Burp Suite hands-on labs and methodology
  • Secure coding practices developers can apply immediately
API & Integrations02

API Security Training

Harden REST, GraphQL, and gRPC APIs against the attacks that bypass traditional perimeter defenses.

Covers

  • API-specific attack vectors and abuse patterns
  • JWT manipulation, token theft, and session flaws
  • Broken object-level and function-level authorization
  • Automated API fuzzing and schema abuse
  • Rate limiting, input validation, and secure API design
Cloud & Containers03

Cloud Security Attack Workshop

Think like an attacker across AWS, Azure, and GCP — then build the controls that actually stop them.

Covers

  • AWS security misconfigurations and exposed assets
  • IAM privilege escalation paths and policy abuse
  • Container escape and image supply-chain risks
  • Kubernetes RBAC, network policy, and cluster hardening
  • End-to-end cloud attack simulations with remediation
Adversary Simulation04

Red Team & Adversary Simulation

Walk through the full attack lifecycle so your defenders understand what real adversaries do — and when.

Covers

  • OSINT-driven reconnaissance and target profiling
  • Initial access via phishing, exploits, and misconfigurations
  • Privilege escalation on Windows, Linux, and Active Directory
  • Persistence mechanisms and C2 tradecraft
  • Lateral movement across hybrid environments
  • Detection evasion and purple-team debrief techniques
AI & LLM Security05

AI & LLM Security Workshop

Stress-test generative AI systems before attackers do — from prompt injection to agentic workflow abuse.

Covers

  • Direct and indirect prompt injection attacks
  • RAG pipeline poisoning and data exfiltration risks
  • MCP and tool-integration security testing
  • AI agent authorization and action-boundary assessment
  • Model abuse, jailbreaking, and output manipulation
  • Structured AI red teaming exercises with OWASP LLM Top 10 mapping
Leadership & Governance06

Executive Cybersecurity Workshop

Translate technical risk into board-level decisions — without drowning leadership in jargon.

Covers

  • Cyber risk quantification and prioritization frameworks
  • Ransomware preparedness and crisis decision-making
  • Incident response readiness and communication playbooks
  • Security governance, accountability, and regulatory alignment
  • Board-level cyber awareness and stakeholder reporting

Delivery Models

Flexible formats designed around your team's location, schedule, and learning goals.

01

Virtual Workshops

Live, instructor-led sessions delivered remotely with shared labs, breakout exercises, and real-time Q&A — ideal for distributed teams.

  • Half-day focused intensives
  • Full-day comprehensive workshops
  • Multi-day bootcamps with progressive skill-building
02

Onsite Training

Immersive, in-person sessions at your office or training facility — built for teams that learn best shoulder-to-shoulder.

  • Corporate security workshops for mixed audiences
  • Developer secure-coding programmes with code review
  • Security team upskilling and certification prep
03

Custom Engagements

Fully tailored programmes shaped around your stack, threat model, and business objectives — not a one-size-fits-all syllabus.

  • Curriculum aligned to your technology stack
  • Industry-specific attack scenarios and case studies
  • Capture The Flag (CTF) competitions and gamified learning
  • Internal red team exercises with guided facilitation

Ready to upskill your team?

Tell us about your team size, technology stack, and goals. We will recommend the right workshop format and build a curriculum that fits your organisation.

Schedule a WorkshopExplore Our Services