Secure Agentic Software Development: Beyond Vibe Coding

About this course

This course contains the use of artificial intelligence. You already know how to get a coding agent to write code. That part is solved. What is not solved is everything that happens after it hits enter — who checks it, what it was allowed to touch, whether the tests it wrote mean anything, and whether anyone can tell six months later which commits an agent authored. This is not another course about driving Claude Code or Copilot. It is a course about the engineering control system around coding agents — the part almost nobody teaches, and the part that decides whether agent velocity becomes throughput or becomes incidents. What the evidence actually says DORA 2025: AI is an amplifier — it raises throughput and instability together. Veracode: across 80 tasks, models chose the insecure implementation about 45% of the time. METR: experienced developers measured 19% slower with AI while estimating they were 20% faster. GitGuardian: AI-assisted commits leak secrets at roughly twice the human rate. The six controls you will build Specify — agent-executable specs with machine-checkable acceptance criteria, non-goals and stop conditions. Constrain — least-agency permission tiers, sandboxing, worktrees and default-deny egress. Review — a checklist tuned to what agents actually get wrong, a ten-minute triage, and adversarial agent-vs-agent review. Test — tests as a contract the agent cannot game, plus mutation testing to prove the suite has teeth. Gate — seven blocking CI checks: secrets, static analysis, dependencies, tests, test integrity, SBOM and a workflow audit. Prove — commit provenance, SBOM and signed attestations that answer an auditor without a human explaining.

Read the full description on Udemy on Udemy (opens in a new tab)

Prices, discounts and availability are set by Udemy. We may earn a commission when you purchase through links on this site.