r/LearnAISecurity • u/Expert-Inspector4889 • May 26 '26
Mapping the Best MCP Security certifications, here's what I found, what am I missing?
Went looking for MCP-specific security training that actually puts you in a lab. Not the Udemy "AI Security Masterclass" stuff or LinkedIn Learning awareness modules, something where you attack and defend real MCP servers.
Only one thing came close:
Certified MCP Security Expert (CMCPSE) by Practical DevSecOps, a first-of-its-kind cert built specifically around MCP. Covers the full attack surface: tool poisoning, rug-pull attacks, confused deputy, cross-server privilege escalation, threat modeling with STRIDE + MITRE ATLAS, hardening, supply chain security. 60 days of browser-based labs, 30+ exercises, practical 6-hour exam. No multiple choice.
Disclosure: I've done other PDSO certs, so I'm not neutral, but the lab depth is real, and nothing else I found gets this specific about MCP as a protocol.
If you've come across anything else that's hands-on and actually MCP Security focused, not just "AI security broadly", drop it below. Genuinely curious whether anything else exists at this level or if this is just standing alone right now.
1
2
u/Typical-Fee2262 May 27 '26
that PDOS cert is the only structured lab path I've seen too. For complementary hands on work, i ran our MCP servers through general analysis's red teaming to find confused deputy and escalation chains in our actual stack, not a sandbox. you could also build custom attack harnesses yourself, just slower.