Corporate Training

Training built to get your team on the same page, together.

CREST-accredited · SCOPED TO YOUR TEAM

Looking for individual or public training instead?

This page covers private, corporate training for your organization. If you’re an individual looking for a public class, upcoming in-person courses, or the CISSP Mentorship Program, that’s all hosted on our training site, professionallyevil.com

Go to

Get Training Built Around Your Team

Whether you’re closing a specific skills gap, prepping developers ahead of an audit, or want your whole team working from the same real-world methodology, we scope training around what you actually need, rather than sticking to a fixed syllabus.

Our instructors bring over two decades of experience across penetration testing, software development, open-source security, and enterprise infrastructure. When you bring us in privately, your whole team learns together, on your schedule, against your actual environment.

We offer courses like Professionally Evil Application Security (PEAS), the OWASP Top 10, and our Active Directory Red Team Fundamentals. Each one is an excellent starting point, but we also adjust every engagement to meet your team’s skill level, tools, and goals before we build even a single slide.

Fill out the form to start scoping your team’s training.

Tell Us Who to Train

Describe your perfect training and we’ll be in touch.

Training That Fits Your Team, Not the Other Way Around

Private, corporate training gives your organization full control over the timing, depth, and focus of the materials, without having to compete with other groups for seats or wait for the next public cohort. Our courses are…

Tailored to Your Team

Each course can be scoped and adjusted around your actual tech stack, tooling, and the team’s skill levels. We are not offering a generic curriculum.

On Your Schedule

All classes are available either virtually or on-site, and can be scheduled around your team’s availability rather, instead of a fixed public calendar.

Taught by Practitioners

Every one of our instructors actively works in the field they teach, bringing real engagement experience into every session.

What Training Like This Looks Like

There’s no fixed catalog to pick from. Every corporate training engagement is built around what your team needs to learn. We typically start with the same material that we teach publicly, and then tailor it to your needs. Each course is scoped, adjusted, and combined to fit your environment, team’s skill levels, and goals.

The following courses are examples to give you a sense of the range, and are not a fixed menu:

Professionally Evil Application Security (PEAS)

Our most requested course for corporate teams.

Designed for developers, IT professionals, and penetration testers of all skill levels, this course focuses on the techniques used to assess and exploit applications, including web and mobile applications, APIs, and HTTP-based systems. We offer hands-on exercises reinforce an industry-standard methodology of reconnaissance, mapping, discovery, and exploitation, so attendees can apply what they learn immediately back at work.

OWASP Top 10

This course is a walkthrough of the latest OWASP Top 10 Most Critical Web Application Security Risks and their corresponding controls. Students will use modern applications to explore how each vulnerability works, and how to find it in their own applications, whether they’re approaching it as a developer or as a security professional.

Red Team Fundamentals for Active Directory

This class covers the fundamentals of Active Directory, and how different aspects can be exploited during a penetration test, along with why those attacks work and how an environment can be made resilient to them. Students will perform hands-on exercises using a realistic lab environment, where they can examine an AD implementation for common misconfigurations, then exploit them to pivot, escalate, and ultimately gain full control of an AD Forest.

Foundational Application Security Training (FAST)

We offer an 8-hour, lecture-focused class designed for managers, product owners, support staff, and non-developers who need to understand application security without a technical background. The course covers modern application technologies, the development process, how vulnerabilities and risk get exposed, and how attacks actually happen, improving coordination between development, project management, product, IT, and security teams.

Not seeing what you’re looking for? That’s pretty common, as most of what we teach corporate clients isn’t written on any list. Tell us what your team is trying to solve for, and we’ll build the training around it.

Pricing Scoped to Your Team

Corporate training is quoted based on what your team needs: the topics, class size, format (virtual or on-site), duration, and any customization. There’s no fixed per-seat rate to browse, because there’s no fixed course to browse, every engagement is scoped and priced around the specific training your organization is asking for.

Looking for a pay-what-you-can, individual-seat option instead?

That’s specifically how our CISSP Mentorship Program works, and it’s hosted along with the rest of our public training on professionallyevil.com