Course contents
Tsahi Levent-Levi

About

About this course

This course is free and open, with no account and no sign-up. It was written by Tsahi Levent-Levi and his agents for people who build their own agent systems with Claude Code and do not write code for a living.

Where the lessons come from

The lessons are things our own InfoSec agent does on our own system, and the last one is how often it does them. That agent descends from Hercules, the security agent Tom Even designed, and grew from there through months of work on a real setup. The course teaches the patterns it found. None of our findings, systems or names are in it.

The questions and the stories at the top of each lesson come from conversations with people who build their own agent systems, paraphrased and without names.

Credit

Thanks to Tom Even, whose Hercules is the ancestor of our InfoSec agent. More at getagents.today and agentsandme.com.

Tsahi Levent-Levi

Tsahi is a long-time engineer who has worked in technology companies big and small, in development, product, management and executive roles, and has taken part in decisions on technology adoption, M&A and strategy. Today he helps small companies with no in-house IT or software team take their first steps with AI and automation, at bloggeek.ai. He runs his own business on a system of agents built the same way.

What this course does not do

It does not see your answers. The quiz and the self-audit run in your browser and send nothing anywhere. It cannot tell you that your system is secure. It can help you ask the agent that runs your system better questions, and recognize a real answer.

When each lesson was last checked

Security advice dates. Every lesson carries the date it was last checked against current practice, and the course is re-checked every quarter.

0. You run a software company nowOctober 25, 2026
1. Your agent follows instructions, including ones you never wroteOctober 25, 2026
2. A rule in a prompt is only a habitOctober 25, 2026
3. The Rule of TwoOctober 25, 2026
4. Keys have three homes, and deleting one revokes nothingOctober 25, 2026
5. Downloading a skill is hiring a strangerOctober 25, 2026
6. Hackers log inOctober 25, 2026
7. Assume it already happenedOctober 25, 2026
8. Security theater, and the one test that is notOctober 25, 2026
9. Security is a habit, not a setupOctober 26, 2026