Training plan
Last updated: Nov 4, 2026
Fluid Attacks keeps strict standards for its technical teams. The company has a training plan that its talent must complete. This plan makes sure that the talent has the essential skills in secure coding and application testing. The talent must send their certificates of completion to the applicable staff. Also, Fluid Attacks has a program for more professional development.
Pre-entry certification
Pentesters who join Fluid Attacks must complete a pre-entry certification. This certification makes sure that they have the technical level that they showed in the selection process. Fluid Attacks pays the full cost of two certifications about web or mobile application testing. Fluid Attacks selects these certifications in accordance with the profile of the talent. The talent must get them in a 45-day period.
Secure code training
At Fluid Attacks, the talent of the development and pentesting teams must complete training on some secure coding practices. This training improves their capabilities to recognize and avoid common vulnerabilities.
Secure code training teaches individuals how to write code that is functional and also secure against different types of cyber threats. The main goal of this training is to make sure that security is a key part of software development. Also, with secure coding practices, individuals can identify vulnerable and noncompliant code more efficiently. Software development projects with this approach have fewer vulnerabilities, a better general security posture, and a culture of strong application security.
Fluid Attacks uses the training course Developing Secure Software (LFD121) of The Linux Foundation. Its content covers important security topics that are useful for Fluid Attacks.
These are some of the topics:
- Security basics
- Secure design principles
- Reusing external software
- Input validation
- Processing data securely
- Threat modeling
- Cryptography
Code review training
Fluid Attacks encourages its pentesters to complete code review exercises in different programming languages. The goal is to give deep and continuous code review training with real vulnerabilities.
Fluid Attacks selected PentesterLab as its code review training provider. PentesterLab has a full and up-to-date list of exercises that are based on real-world scenarios.
Further training
Fluid Attacks also wants a culture of continuous learning and professional development. Thus, all the talent has voluntary access to the Certification Hub program of Fluid Attacks. In this program, they can ask for support to get more industry-related certifications that they are interested in. This helps individuals to get specialized knowledge and improve their expertise after the initial training requirements. Also, all the talent completes awareness training every six months.
Compliance training
Fluid Attacks requires all the employees in compliance-related roles to complete essential training on standards and regulations. This privacy and security role training is very important for legal compliance and for the accurate completion of critical obligations. Fluid Attacks applies the topics of the training in accordance with the responsibilities of each role.
Fluid Attacks selected these training courses to comply with the requirements:
These roles require compliance-specific training: Incident Manager, Data Protection Officer (DPO), Legal Analyst, Information Security and Privacy Manager, and Human Resources Leader.