The engineering school for people who build with AI. Learn to direct, verify and ship software that survives real users, real money and real attackers.
Free to learn. Progress saves to your account.
export async function getInvoice(req, res) { const invoice = await db.invoice.findUnique({ where: { id: req.params.id }, }); anyone can read anyone's invoice const fx = await fetch(FX_URL); waits forever return res.json({ invoice, fx, key: process.env.NEXT_PUBLIC_PAY_SECRET }); secret ships to the browser}
In 2026 a handwritten list of 111 things went around: rate limiting, idempotency, rollbacks, postmortems. It was a joke, and it was true. AI made building effortless. It did not make production forgiving.
of AI code-generation tasks introduced a known security flaw in Veracode's 2026 tests.
apps exposed by a single missing database policy in one AI app builder (CVE-2025-48757).
AI agent deleted a live production database during a code freeze (July 2025).
You never just read. Every module ends with something you built, broke and proved.
A real incident, then the concept that would have prevented it.
Direct your AI with tested prompts. You are the tech lead; it is the junior engineer.
Attack your own build. The labs are designed so the AI's first attempt fails.
Tick the Definition of Done with evidence: test output, scan reports, restore logs.
Four terms, fifteen modules. Take the whole programme or any module on its own.
Each level requires evidence, not attendance. Leak a secret, expose another tenant's data, or let an agent act without approval, and the module is not passed.
Safe to take real users and data.
Safe to take payments and run agents.
Can lead an AI-native team and pass vendor security reviews.
Half day
Build a real app with your AI against 14 security tests, and see how often its first attempt fails.
2 days
Bring your own app. Leave with it production ready and the Vibe Builder credential.
4 weeks per term
Learn with a group, one term at a time, 10 to 12 hours a week.
Custom
The full programme, plus our rules file and release checklist adopted as your standard.
The instructor kit includes the run of show, a presenter deck with speaker notes, and Ledgerly: a starter app with 14 security tests and a live scoreboard.
Speed and creativity are why building with AI feels like magic. We keep that, and add the tests, scans, restore logs and audit trail that let people trust what you ship.
Begin with Module 00