
About
About this course
This course is free and open, with no account and no sign-up. It was written by Tsahi Levent-Levi and his agents for people who build their own agent systems with Claude Code and do not write code for a living.
Where the lessons come from
The lessons are things our own InfoSec agent does on our own system, and the last one is how often it does them. That agent descends from Hercules, the security agent Tom Even designed, and grew from there through months of work on a real setup. The course teaches the patterns it found. None of our findings, systems or names are in it.
The questions and the stories at the top of each lesson come from conversations with people who build their own agent systems, paraphrased and without names.
Credit
Thanks to Tom Even, whose Hercules is the ancestor of our InfoSec agent. More at getagents.today and agentsandme.com.
Tsahi Levent-Levi
Tsahi is a long-time engineer who has worked in technology companies big and small, in development, product, management and executive roles, and has taken part in decisions on technology adoption, M&A and strategy. Today he helps small companies with no in-house IT or software team take their first steps with AI and automation, at bloggeek.ai. He runs his own business on a system of agents built the same way.
What this course does not do
It does not see your answers. The quiz and the self-audit run in your browser and send nothing anywhere. It cannot tell you that your system is secure. It can help you ask the agent that runs your system better questions, and recognize a real answer.
When each lesson was last checked
Security advice dates. Every lesson carries the date it was last checked against current practice, and the course is re-checked every quarter.
| 0. You run a software company now | October 25, 2026 |
| 1. Your agent follows instructions, including ones you never wrote | October 25, 2026 |
| 2. A rule in a prompt is only a habit | October 25, 2026 |
| 3. The Rule of Two | October 25, 2026 |
| 4. Keys have three homes, and deleting one revokes nothing | October 25, 2026 |
| 5. Downloading a skill is hiring a stranger | October 25, 2026 |
| 6. Hackers log in | October 25, 2026 |
| 7. Assume it already happened | October 25, 2026 |
| 8. Security theater, and the one test that is not | October 25, 2026 |
| 9. Security is a habit, not a setup | October 26, 2026 |