miatz™
Verify a credentialLog inSit ChuunSit Chuun
  • Learners
  • Mentors
  • Business
CoursesApplied AIProgramResidencyPlaygroundsWar RoomsXookAtlasReadiness Check
miatz

The AI-era engineering institute. The machines got fast — we train the drivers. Real work, a daily loop that compounds, and a record that proves you can think.

Toggle theme
Explore
  • Courses
  • Applied AI
  • Program
  • Residency
  • Playgrounds
  • War Rooms
  • Xook
  • Atlas
  • Readiness Check
  • Tokenizer Lab
  • Chunking Lab
  • Prompt Anatomy
  • Calibration Lab
  • All playgrounds →
Learn
  • Courses
  • The Method
  • The Residency
  • Chuun · Entrance Examination
  • Manifesto
  • The Itz'at credential
  • Verified engineers
  • Playground Catalog
  • AI Use-Case Atlas
  • AI Readiness Check
  • Guides
  • Glossary
  • Compare approaches
  • Blog
  • What's New
For teams
  • For Students
  • For Mentors
  • For Business
  • Classroom migration
  • Miatz Index
  • API reference
  • Sit Chuun
  • Log in
Company
  • About
  • Experts
  • Why it's free
  • Pricing
  • FAQ
  • Contact
  • Privacy Policy
  • Terms of Service
  • Your data & privacy requests
  • Grievance redressal
  • Security & disclosure
  • Subprocessors
  • Data Processing Agreement
Take miatz with you

The Android app is live. iOS is on the way.

Available on AndroidGet it on Google Play
Not yet on iPhoneiOS — use the web app

Miatz Private Limited

Registered office:
C-101, Lotus Tower, Arge Urban Bloom, 30/A, 4th Main, 2nd Stage, Yeswanthpur, Bengaluru, Karnataka 560022, India
CIN:
U62013KA2026PTC226418
GSTIN:
29AAVCM3922D1Z6
Phone:
+91 82802 73456
Email:
hello@miatz.com
Website:
miatz.com
Grievance Officer:
Aishwarya · aishwarya@miatz.com · replies within 30 days
© 2026 miatz · Miatz Private Limited · Built in Bangalore·PrivacyTerms

miatz™, Itz'at™, Tuukul™, T'aan™, Kanan™, Xook™ and Chuun™ are trademarks of Miatz Private Limited (registrations in progress) · what the names mean

miatz
Security Engineering · 300-level

Security Engineering

A staff-level tour of how systems get broken and how they get defended — threat modeling, the OWASP vulnerability classes, identity, applied cryptography, cloud and supply-chain security, detection and response, and a secure SDLC that turns controls into tests.

Sit Chuun — free All modules
SEC-3013 creditselectiveno prerequisites
Start this course — free
What's inside

Sections & lessons

01

Threat modeling

  • Mapping trust boundaries with data-flow diagramsconcept35 min
  • Enumerating threats with STRIDE, element by elementconcept35 min
  • Attack trees and ranking risk by expected lossconcept40 min
  • Threat-modeling a payment webhook end to enddemo45 min
02

Application security & OWASP

  • Injection: why parameterized queries end the classconcept40 min
  • XSS, contextual output encoding, and CSP as defense in depthconcept35 min
  • SSRF: from a URL field to cloud credentialsconcept40 min
  • Insecure deserialization and reading the OWASP Top 10 as a backlogconcept35 min
03

Authentication, authorization & identity

  • Sessions vs. tokens: storage, revocation, and blast radiusconcept40 min
  • OAuth2 and OIDC flows you will actually deployconcept40 min
  • Authorization: RBAC, ABAC, and killing IDORconcept40 min
  • Phishing-resistant MFA and the bypasses that beat OTPconcept35 min
04

Cryptography in practice

  • Password storage: Argon2id, bcrypt, and cracking economicsconcept40 min
  • Symmetric, asymmetric, and why you want AEADconcept35 min
  • TLS 1.3, certificate validation, and the trust chainconcept40 min
  • Key management, envelope encryption, and what NOT to roll yourselfconcept35 min
05

Cloud & infrastructure security

  • IAM least privilege and shrinking blast radiusconcept40 min
  • Network segmentation, security groups, and default-denyconcept35 min
  • The instance metadata service: identity, IMDSv2, and container pitfallsdemo40 min
  • Lab: auditing an over-permissioned roledemo40 min
06

Secrets & supply-chain security

  • Secret management, rotation, and what leaks in gitconcept40 min
  • Dependency risk, typosquatting, and the SBOMconcept40 min
  • Securing CI/CD: the pipeline is productionconcept35 min
  • Signing, provenance, and SLSAconcept35 min
07

Detection & response

  • Logging for security and detection engineeringconcept40 min
  • SIEM, detections-as-code, and beating alert fatigueconcept40 min
  • The incident-response lifecycle and forensic basicsdemo35 min
08

Secure SDLC & compliance

  • Shift-left: SAST, DAST, IAST, and where each liesconcept40 min
  • Threat-driven testing and security in code reviewconcept35 min
  • SOC 2, ISO 27001, and turning controls into testsreflection35 min
Start this course — free

This module ends in a gate you can fail.

That's what makes passing it mean something. Sit Chuun, get placed, and start earning.

Sit Chuun — free All modules