A bootcamp is a format, not a marketing word. The question “who offers a hands-on AI and cybersecurity bootcamp” usually means: where can a working security professional sit down for a few intense days, write real code against real security data, and walk out able to do something new on Monday. The honest answer is that very few providers run that format for security teams specifically, because it requires both an AI curriculum and a security threat model, and most training has one or the other.
Here is who offers it, what the labs should actually contain, and how to tell a real bootcamp from a data-science course with the word “AI” stapled to the title.
What Counts as a Bootcamp
A bootcamp compresses weeks of material into a continuous, lab-driven block, typically two to five days. The defining traits:
- Continuous lab time. You are writing and running code most of the day, not watching slides. A bootcamp that is 70 percent lecture is a seminar.
- A pre-configured environment. No setup tax. A real bootcamp ships a VM or container with Jupyter, pandas, scikit-learn, and transformers already installed, plus security datasets loaded. GTK Cyber students work in the Centaur VM, a free Apache 2.0 portable lab, so the first hour is analysis, not installing CUDA.
- Security data, not Kaggle. The labs use Zeek conn.log, Sysmon Event ID 1 process telemetry, Windows Security Event IDs 4624 and 4625, the PhishTank URL feed, and prompt-injection payloads against live LLM endpoints. If the syllabus mentions Titanic survival or housing prices, it is a generic data-science bootcamp wearing a security badge.
Who Offers Them
A short, honest list across the market.
- GTK Cyber. Runs the AI Cyber Bootcamp, an intensive format covering the full spectrum of AI in security, offered at Black Hat USA 2026 and as a custom on-site engagement for corporate and government teams. It sits alongside Applied Data Science & AI for Cybersecurity, AI Red-Teaming, and A Cyber Executive’s Guide for Artificial Intelligence. Instructors include Charles Givre (Apache Drill PMC Chair, CISSP) and Summer Rankin, PhD.
- SANS Institute. SEC595 and related courses teach ML for security at scale. Strong brand, broad audience. Tends toward breadth; good as a survey, less specialized for hands-on red-teaming.
- Conference trainings. Black Hat and Hack In The Box host the densest multi-day AI security labs. Expensive per hour, high signal, built for practitioners.
- Generic coding bootcamps. Data-science and full-stack bootcamps teach the same algorithms but skip the security threat model entirely. The skills transfer in theory; the datasets and adversary context do not. These are not cybersecurity bootcamps.
What the Labs Should Contain
A working bootcamp for a security practitioner covers four pillars. None are optional.
Data engineering for security logs. Loading and normalizing telemetry with pandas: parsing Zeek conn.log with pd.read_csv('conn.log', sep='\t', comment='#'), converting timestamps to UTC, joining EDR, SIEM, and network exports. Everything downstream depends on this layer.
Applied ML for detection. IsolationForest and DBSCAN for anomaly detection on auth and network features, with the contamination parameter set realistically (start around 0.005, not the 0.1 default). RandomForestClassifier for supervised classification of malicious URLs from lexical features. Each technique mapped to a MITRE ATT&CK tactic so you know what it does and does not catch (anomaly detection will not reliably flag living-off-the-land techniques like T1218 when admins use the same binaries).
LLMs applied to security work. Log summarization, threat-intel extraction, and report drafting with the OpenAI or Anthropic APIs, and building Retrieval-Augmented Generation pipelines over a threat-intel corpus.
AI red-teaming. Direct and indirect prompt injection, RAG poisoning, model evasion, and insecure output handling, mapped to the OWASP Top 10 for LLM Applications and MITRE ATLAS (AML.T0051, AML.T0015). This is the pillar generic AI bootcamps skip entirely.
How to Vet One Before You Pay
Apply these tests to any bootcamp, including ours:
- Ask for the dataset list. Named security datasets (Zeek, Sysmon, Windows event logs, PhishTank) are a green flag. Vague “real-world data” is not.
- Ask what you walk out with. A repository of runnable notebooks beats a certificate. A certificate without artifacts is an attendance record.
- Check the prerequisites. A serious bootcamp states a Python requirement. One that promises to teach Python, ML, and red-teaming to absolute beginners in three days is overselling.
- Watch the language. Anyone calling AI a revolution is selling a story. The skill is mundane and specific: fit a model, read the errors, ship the detection.
GTK Cyber built the AI Cyber Bootcamp because the gap between data-science training and what security practitioners actually need was real. The labs, datasets, and pace are designed for security professionals adding AI to an existing toolkit, not for data scientists learning security from scratch. That distinction is the whole point of the format.