AI Security Testing: LLM-03 Supply Chain Testing

About this course

Most security checklists treat the LLM itself as the risk. This course treats everything around it as the risk.

This course focuses on OWASP LLM-03: Supply Chain. In plain terms, that means testing the components an LLM application depends on before the application ever reaches a user.

An LLM application depends on a software stack you probably did not build. That includes third-party packages, open-source frameworks, model files from public repositories, hosted APIs, supplier terms, and CI/CD pipelines. Any one of those pieces can introduce risk before your prompt logic or application code ever runs.

This course teaches QA engineers how to test the LLM supply chain systematically. You will learn how to scan dependencies for known vulnerabilities, check package and model licenses, verify model artifact integrity with hashes and safer file formats, and build behavioral baselines that catch model drift after a model, adapter, prompt policy, or runtime changes.

You will also learn how to turn those checks into release gates. The goal is not just to find issues. The goal is to capture evidence your team can use for go/no-go decisions, bug reports, risk reviews, and closure criteria.

Every section follows a test-execute-report pattern. You get real tools, runnable demos, and bug report templates you can adapt for your own QA work.

You do not need to be a security specialist. If you can run a Python script, read terminal output, and follow a test plan, you have what you need.

This course works as a standalone. It also pairs naturally with Course 1, Prompt Injection Testing, and Course 2, Sensitive Information Disclosure Testing, in the AI Security Testing series. Together, the first three courses cover the first three entries in the OWASP LLM Top 10 from a QA engineer’s perspective.

By the end of this course, you will know how to look at an LLM feature and ask the release questions that matter. Where did this model come from? Has it changed since the last verified buil

Prices, discounts and availability are set by Udemy. We may earn a commission when you purchase through links on this site.