Cyber Everywhere, AI in Everything
4-Day AI Cybersecurity Masterclass: From a Chatbot to Trustworthy Customer Platform
A hands-on masterclass for engineers, business leaders, and compliance professionals running AI in any form. Building practical AI security skills from technical implementation to executive understanding.
Why AI Security, Why Now
Most organizations didn't choose to deploy AI - it crept in or was ordered in. Engineers use coding assistants with repo access. Vendors quietly add AI features. Customer-facing products gain agents that browse the web and call internal APIs. Compliance teams are asked to certify systems nobody fully understands.
This masterclass is built for the people in the middle of that reality. You'll work through practical AI deployments, find how broken things are, fix and mitigate, and learn how to communicate, to engineers, to executives, to customers, and to regulators.
Why This Masterclass Works
Learn by Breaking and Fixing Real AI Systems
Work with vulnerable AI deployments - chatbots with account access, agents with tool use, coding assistants with repo permissions. Find prompt injection, confused deputy scenarios, supply chain weaknesses, and agentic exploitation. Then fix them.
Governance That Actually Works
Understand how AI risk maps to OWASP LLM Top 10, MITRE ATLAS, the EU AI Act, NIST AI RMF, and ISO 42001 - without drowning in compliance checklists. Build governance grounded in what you've actually tested and fixed.
Three Audiences, One Room
Engineers, business leaders, and compliance professionals all face AI security from different angles. This masterclass brings them together to practice the conversations that need different language and risk appetite - board-level trade-offs, customer questionnaires, regulator-facing posture statements.
Take It Back to Monday
Leave with a working AI inventory methodology, a tested risk assessment approach, an acceptable use policy you actually believe in, and templates you can adapt to your organization the week you return.
Feedback from Previous Masterclasses
Testimonials from "Cyber Everywhere All at Once" — the foundation masterclass that this AI-focused edition builds on.
Cybersecurity Masterclass, April 2026: "I would definitely recommend this workshop to others, I loved it especially how it made us wear different hats from Pentesters right to Compliance officers. I discovered the hats I am somewhat confident wearing and those that still need some work. I also loved how it refined our soft skills like tips on presentation and public speaking."
Cybersecurity Masterclass, April 2026: "The multiple perspectives were really useful in understanding what goes on in an organisation. It can get pretty intensive and hectic, probably because of how much is distilled into this short sessions. I would definitely recommend this workshop. There's a lot of gems and knowledge shared, and the multiple perspectives are truly appreciated."
Cybersecurity Masterclass, April 2026: "The hands-on approach and direct feedback during the exercises and from speakers were valuable and helped with absorbing and retaining the knowledge of the topics that were worked through. I would highly recommend this workshop to others, just because the experience was excellent and of high standard."
Cybersecurity Masterclass, Feb 2025: "The course is brilliant. The speaker spoke from experience he gathered over the past years, and most of the use cases are really realistic to the point that it is quite scary to be an infosec manager. He's not only warning us many things that can go wrong, but also telling us how to make things right. Simulation, practice, even the management roleplay he did is impeccable as many upper management didn't actually know what even their company is doing."
Cybersecurity Masterclass, April 2026: "Most valuable: Insights, anecdotes, guests, teamwork. Would recommend this workshop to anyone, 10/10 times. Solid 10/10."
Cybersecurity Masterclass, April 2026: "Very useful, handy and educational. This is a startup and should be raised on community level — every tech and dev company should be involved."
Cybersecurity Masterclass, April 2026: "All 4 days information and workshop are relevant to company-oriented problems. Advanced workshop with practical usage and examples. Yes, will recommend — very useful workshop with practical application."
Who Should Attend?
This masterclass is intentionally cross-functional. AI security fails when engineers, business, and compliance work in isolation.
- ✓ Engineers building or integrating AI features
- ✓ Engineering managers responsible for AI-enabled products
- ✓ Product managers shipping AI capabilities
- ✓ Security leads facing AI in their organization
- ✓ Compliance and risk professionals working on AI governance
- ✓ CTOs and technical founders deploying AI in production
- ✓ Consultants advising on AI security and governance
- ✓ Anyone responsible for AI decisions across business and technical lines
Core Learning Objectives
- ✓ Discover and inventory AI in your organization (including shadow AI)
- ✓ Test AI systems for prompt injection, agentic exploitation, and RAG flaws
- ✓ Apply OWASP LLM Top 10 and MITRE ATLAS practically
- ✓ Build defensive patterns for input handling, output filtering, and tool scoping
- ✓ Conduct AI risk assessments grounded in real testing findings
- ✓ Communicate AI security to executives, customers, and regulators
- ✓ Navigate the EU AI Act, NIST AI RMF, and ISO 42001
- ✓ Draft acceptable use policies and AI security posture statements
Meet the Speakers
Masterclass Leads
Bozidar Spirovski
Masterclass LeaderChief Information Security Officer
CISO at Blue dot and Sourcico, with experience across SaaS startups and large enterprises in banking, telco and energy sectors. Founder of BeyondMachines.net.
Romana Stojceska
Masterclass Co-LeadJunior Cyber Security Engineer
As a Junior Cybersecurity Engineer at BeyondMachines, Romana helps organizations that don’t have the time to stay on top of security. She also helps build and improve the BeyondMachines platform. Much of her day is spent analyzing cybersecurity incidents, giving her a firsthand view of what goes wrong in the world of technology. She has also previously presented at cybersecurity workshops.
Day 1 Fri 27 Nov
Bojan Jakimovski
Guest SpeakerML & Applied Research Lead, AWS Ambassador
Bojan is a Machine Learning and Applied Research Lead at Loka, AWS Certified engineer and Ambassador. Works at the intersection of applied GenAI, inference infrastructure, and MLOps, helping teams transition AI models from experiments into production.
Darko Bozhinovski
Guest SpeakerCo-founder & CTO at Axiomatic
Darko is a seasoned programmer with roots in the web platforms, currently running the Developer Relations department at SuperTokens. He is the founder of BeerJS Skopje, DevCon, the CodePub podcast. Passionate about open-source software, Linux, and technical education, he brings experience and a developer-first perspective to building robust technical solutions.
Day 2 Sat 28 Nov
Olgica Strezoska
Guest SpeakerPrincipal Product Owner & Co-Founder of ProdACT
Olgica is a Principal Product Owner with 9+ years of experience in product management and software development, specializing in product strategy, 0→1 product development, discovery, and cross-functional delivery. She is passionate about customer-centric product discovery and AI-assisted research and prototyping. Olgica is also the Co-Founder & President of ProdACT, a community supporting and connecting product professionals in North Macedonia.
Damjan Dano
Guest SpeakerTech Entrepreneur & Founder of Aqtos
Damjan brings over two decades of tech entrepreneurship, having delivered digital projects for telecom operators, Wall Street investment banks, global mining companies, and even Michelin-starred chefs. He is currently building Aqtos.com, the operational context layer for businesses. In 2006, he launched North Macedonia’s first internet security company, Net Security Solution. From there, he pivoted to founding IWM Network, successfully operating today.
Day 3 Fri 4 Dec
Miodrag Cekikj
Guest SpeakerFounder of Adopt Intelligence & University Professor
Dr. Miodrag Cekikj is the Founder of Adopt Intelligence, a Founding Partner at GAIA, and a University Professor. As a Microsoft MVP for Azure AI, he specializes in bridging the gap between AI demos and dependable production systems. With a PhD in Applied AI, his work focuses on leading AI-first products, enterprise solutions using LLMs, and multi-agent architectures.
Viktor Mitrevski
Guest SpeakerSenior Engineering Director
Experienced technology leader with expertise in software and data engineering, and strengths in people management, communication, negotiation, sales, and leadership. Currently serving as Senior Engineering Director at G+D Netcetera, leading multiple mobile, web, and integration engineering teams within the Digital Banking division and Retail Banking Value Stream.
Day 4 Sat 5 Dec
Martina Drangovska Martinova
Guest SpeakerLawyer at Macedonian Young Lawyers Association & Consultant at the Council of Europe
Privacy lawyer working on what GDPR, the EU AI Act and Macedonian data protection law mean for the teams that build and run AI systems. Leads digital rights work at the Macedonian Young Lawyers Association and is a Council of Europe consultant on data protection and freedom of expression.
Aleksandra Gjinovska
Guest SpeakerSenior Engineering Manager | Head of Technology
Aleksandra (Alex) Gjinovska is a Senior Engineering Manager at NetRoadshow and a Head of Technology, with 14+ years of hands-on experience in system design and people leadership. She drives technology strategy, AI-led transformation and technical business development, building scalable architectures and high-performing engineering teams. Her work sits at the intersection of strategy and execution, turning complex technology into measurable business impact.
Masterclass Details
4-Day Intensive Masterclass - Split Over Two Weekends
When: November 27-28 (Friday & Saturday) and December 4-5 (Friday & Saturday), 2026. Full days from 9:00 AM to 5:00 PM.
Where: Base 42 (Rimska 25, Skopje)
A practical AI security program built around two simulated organizational environments. Over two weekends, participants discover what AI is being used, test those systems, experience an AI-related incident, fix the flaws, and argue their decisions to management, customers, and auditors.
Limited to 20 participants, split into groups of five per company, working in isolated environments to ensure hands-on interaction without cross-team interference.
Includes: Pre-masterclass preparation week with OWASP LLM/GenAI and MITRE ATLAS materials, a mid-session bridge week with conference calls and homework, full lab access (including hosted model gateways, trace observability, and MCP tool servers), ready-to-use governance templates, and post-masterclass support.
- ✓ Verification team: Open the workshop URL, sign in, and verify gateway reachability
- ✓ Technical roles: Pull and run the participant client container
- ✓ Pre-reading: OWASP LLM/GenAI overview, MITRE ATLAS primer, agent tool supply chain, and shadow AI
"What AI do we actually have, what can it do, whose identity does it act with, and what risks have we already introduced?"
Instructors: Bozidar Spirovski, Romana Stojceska
Guest Speakers: Bojan Jakimovski, Darko Bozhinovski
- ✓ Welcome and Scenario Briefing
- ✓ Theory - AI as a Security Surface and MCP tool supply chain
- ✓ Practical exercises - Multiple exercises: AI Tool Safari (Chatbots vs. Agents), Explore the AI Environment, Build the Agent Inventory, and Shadow AI Hunt
- ✓ Discussion - "Would You Put This Into AI?" workplace scenarios
- ✓ Expert presentations and real-world insights
- ✓ Final challenge with evaluation and feedback
"Now that we know what our agents can do, what happens when someone deliberately tests those boundaries?"
Instructors: Bozidar Spirovski, Romana Stojceska
Guest Speakers: Olgica Strezoska, Damjan Dano
- ✓ Recap and Offensive Concepts (OWASP LLM & MITRE ATLAS)
- ✓ Theory - Identifying attack vectors, prompt injection, and agentic tool misuse
- ✓ Practical exercises - Multiple exercises: Build the Attack Plan, Content That Gives Orders, Reach and Recall, and Whose Identity, and How Far?
- ✓ Discussion - Triage the AI Incident and Legal, Customer & Communications Decision
- ✓ Expert presentations and real-world insights
- ✓ Final challenge with evaluation and feedback
- ✓ Clean up Day 2 findings into a structured register
- ✓ Classify findings, read defensive guidance, and prepare remediation
- ✓ Optional short call 1: What broke and why?
- ✓ Optional short call 2: How are we going to defend it?
"We know how the systems failed. Can we actually fix them, and can we prove the fixes work?"
Instructors: Bozidar Spirovski, Romana Stojceska
Guest Speakers: Miodrag Cekikj
- ✓ Return to the Incident (Review findings)
- ✓ Theory - Defensive Patterns (Authorization, least privilege, tool scoping)
- ✓ Practical exercises - Multiple exercises: Trust Boundary Map, Fix the Environment, and Re-Attack (Run the Day 2 attacks again)
- ✓ Discussion - Architecture Review and AI Engineering Guidance
- ✓ Expert presentations and real-world insights
- ✓ Final challenge with evaluation and feedback
"How does the company use AI safely without simply banning everything?"
Instructors: Bozidar Spirovski, Romana Stojceska
Guest Speakers: Martina Drangovska Martinova, Aleksandra Gjinovska
- ✓ Recap
- ✓ Theory - AI Governance Theory (EU AI Act, NIST AI RMF, ISO/IEC 42001)
- ✓ Practical exercises - Multiple exercises: AI Use-Case Risk Assessment, The New AI Tool Request, and Build the Acceptable Use Policy
- ✓ Discussion - Defending decisions in Executive, Enterprise Customer, and Regulated Customer/Auditor Meetings
- ✓ Expert presentations and real-world insights
- ✓ Final challenge with evaluation and feedback
- ✓ "Ask Me Anything" implementation support window
- ✓ Private Discord forum for ongoing peer support
- ✓ Anonymous peer support and experience sharing
Materials & Deliverables
Hands-On AI Environments
- ✓ Simulated organizational AI deployments for hands-on work
- ✓ Vulnerable AI applications spanning chatbots, agents, and developer tools
- ✓ Local lab environments plus shared scenarios for collaborative exercises
- ✓ Findings spanning OWASP LLM Top 10 categories and MITRE ATLAS techniques
Ready-to-Use Templates
- ✓ AI inventory and discovery methodology
- ✓ AI test plan and findings documentation templates
- ✓ AI risk assessment framework
- ✓ Acceptable use policy template
- ✓ External AI security posture statement
- ✓ AI vendor questionnaire and customer response templates
Frequently Asked Questions
Helpful but not required: Prior cybersecurity foundations or attendance at "Cyber Everywhere All at Once." We cover what you need, but participants who already understand basic security concepts will get more from the advanced AI-specific content.
Pricing & Registration Tiers
Reserve your seat now at the current tier price - no payment required to reserve. Pricing is locked at the tier in effect when you reserve.
Full 4-Day Masterclass
(Recommended for maximum impact)Full Package Includes:
- Pre-masterclass preparation week
- 4 full days of training (Nov 27-28 & Dec 4-5)
- Mid-session bridge week
- All materials & templates
- Hands-on AI lab environments
- 30-day post-masterclass Q&A support
- Discord community access
Single-Day Pass
(Subject to availability)Single Day Includes:
- One full day of training
- Day-specific materials
- No prep week
- No mid-session bridge week
- No post-masterclass support
- Limited community access
Reserve Your Seat
Lock in your spot before Regular Registration ends on November 10th. No payment required to reserve. Rezervation held for 15 days.
October until Nov 10th
€550 full masterclass
After Nov 10th
€600 full masterclass
Reservations are held for 15 days: pay the invoice within that time to confirm your seat.