Platform

Content

Unit Range includes a complete, ready-to-use content library.
Maintained with real-time threat intel, it’s ready to deploy on day one -
no content creation required.

Fundamentals Simulations

Junior Security Analyst

Switchers

Penetration Tester

SOC Analyst L1

Security Team Lead

System Administrator

What is

The entry point for practitioners new to hands-on cyber ranges and for technical teams that want a structured baseline before moving into role-specific tracks. Every topic ends in a live lab — not a multiple-choice test. Participants work with the same tools used in production environments.

MITRE ATT & CK Coverage

Reconnaissance · Credential Access · Lateral Movement · Privilege Escalation · Collection · Command and Control · Defense Evasion

Blue Team Tracks

Junior Security Analyst

Switchers

Penetration Tester

SOC Analyst L1

What is

Structured defensive training from first-day SOC analyst to expert-level forensic investigator. Analysts don't work on synthetic environments — they investigate Gamaredon campaigns, real ransomware families, documented AD compromise chains, and ICS malware used against critical infrastructure. All simulations run in live virtual environments.

MITRE ATT & CK Coverage

Initial Access · Execution · Persistence · Privilege Escalation · Defense Evasion · Credential Access · Discovery · Lateral Movement · Collection · Command and Control · Exfiltration · Impact

Components

Show

SOC Tier 1 — A beginner-level track that prepares analysts to detect common threats, work with SIEM tools, and perform initial incident response.
SOC Tier 2 — An intermediate-to-advanced track focused on threat hunting, deep incident analysis, AD forensics, and APT detection.
SOC Tier 3 — An expert-level track focused on malware analysis, reverse engineering, memory forensics, ransomware investigations, and advanced AD forensics.
Hardening — An intermediate-to-advanced track focused on proactive system protection, Windows and Linux hardening, secure configuration, and vulnerability mitigation.
SCADA/OT — An expert-level track focused on SCADA/ICS security, industrial malware analysis, PLC attacks, and critical infrastructure threat context.
Cryptography & Authentication — An intermediate track focused on cryptographic foundations, RSA attacks, Windows authentication, access control, and brute-force techniques.
Advanced Threats & AI Security — An expert-level track focused on AI security, APT campaigns, microservice exploitation, and securing AI pipelines.

Red Team Tracks

Exploit Developer

Penetration Tester

Cloud Security Tester

Red Team

Vulnerability Researcher

Bug Bounty Hunter

What is

Offensive security training from basic exploitation to full enterprise compromise. Practitioners don't run scripted walkthroughs — they compromise Active Directory domains, exploit real cloud misconfigurations, attack AI/ML pipelines, and reverse engineer malware in live environments that behave like production systems.

MITRE ATT & CK Coverage

Reconnaissance · Resource Development · Initial Access · Execution · Persistence · Privilege Escalation · Defense Evasion · Credential Access · Discovery · Lateral Movement · Collection · Command and Control · Exfiltration · Impact

Components

Show

Foundation & Entry-Level Operations — A beginner-level track focused on basic penetration testing, reconnaissance, internal infrastructure testing, and foundational exploitation skills.
Web Application Security & Static Analysis — A basic-to-intermediate track focused on web vulnerability discovery, static code analysis, exploitation tooling, and manual verification.
Service Exploitation & Privilege Escalation — An intermediate track focused on service exploitation, privilege escalation, lateral movement, and chained attack scenarios.
Advanced Chaining & Infrastructure Compromise — An advanced track focused on full-chain enterprise attacks, Active Directory compromise, lateral movement, and domain takeover scenarios.
Advanced & Emerging Attack Surfaces — An expert-level track focused on cloud compromise, AI/ML exploitation, CI/CD attacks, and emerging cyber-physical threats.
Specialized Malware & Advanced Persistence — An expert-level track focused on malware reverse engineering, ransomware forensics, stealth techniques, and advanced persistence.

SOC L1 Analyst Training Program

HR/L&D

SOC Analyst

Switchers

Security Operations Team

SOC from scratch

What is

A complete 170+ hour curriculum that takes a person with general IT knowledge and produces a production-ready Tier 1 SOC analyst. Combines structured theory, video content, knowledge checks, and hands-on simulations — graduates don't just know concepts, they've already worked through real incidents before their first shift.

MITRE ATT & CK Coverage

Components

Show

Introduction to SOC and Core Concepts — Introduces SOC L1 responsibilities, alert triage, incident workflow, reporting standards, and shift handover practices.
Network Technologies and Operating Systems Fundamentals — Covers essential networking and operating system concepts required for effective security monitoring.
Windows Event Logs and Threat Detection — Focuses on Windows event log analysis and detection of common Windows-based attack patterns.
Linux Event Logs and Threat Detection — Explores Linux log analysis, PAM-based access monitoring, auditd telemetry, and POSIX-based attack detection.
Network Traffic Analysis & Security Monitoring — Develops practical expertise in packet analysis, network forensics, IDS/IPS signatures, and traffic-based threat detection.
Email Security and Phishing Analysis — Covers email threat investigation, header analysis, authentication checks, phishing detection, and response to email-based attacks.
Malware Analysis for SOC Analysts — Teaches malware triage, behavioral analysis, threat classification, and IOC extraction for SOC operations.
Endpoint Security and EDR — Focuses on EDR telemetry analysis, endpoint threat hunting, forensic alert investigation, and host-based threat remediation.
Communication and Operational Processes — Strengthens SOC documentation, escalation, stakeholder communication, handovers, and investigation continuity.

Cybersecurity Training Program
for Technical Specialists

System Administrator

Network Engineer

Infrastructure Specialist

DevOps

Team Lead

Switchers

What is

A two-module sequential program that builds a complete understanding of modern cyber defense for IT and technical professionals who work with infrastructure, systems, and network environments daily. Theory first, then hands-on practice — applied directly in live virtual lab environments.

MITRE ATT & CK Coverage

Initial Access · Credential Access · Privilege Escalation · Lateral Movement · Defense Evasion · Persistence · Detection and Response

Components

Show

Cybersecurity Foundations (Theory) — Eight topics delivered via video lecture, structured reading, and knowledge check quizzes: Cybersecurity Basics, Authentication and Access Management, Network Security, System and Server Management, Data Protection, Incident Detection and Response, Cloud Security, Zero Trust Security
Hands-On Simulations — Four live virtual lab simulations applying Module 1 concepts in real corporate infrastructure scenarios

Cybersecurity for Everyone

Everyone

What is

Essential security knowledge covering threats, safe behaviors, and incident reporting for all staff. Aligned with NIS2, GDPR, ISO 27001, and DORA — completion data and quiz results serve as documented evidence of staff awareness training during audits.

Components

Show

Cyber Attackers and Threat Landscape — Explores attacker types, motivations, capabilities, attack planning, and concealment methods in the modern threat landscape.
Password Security — Introduces secure password practices, password managers, multi-factor authentication, and safe credential handling.
Email Security — Examines BEC attacks, phishing indicators, impersonation tactics, least privilege, and email permission risks.
Phishing and Social Engineering — Develops awareness of phishing, impersonation, voice scams, manipulation techniques, and message verification practices.
Messenger Security — Focuses on secure messenger use, privacy settings, account protection, backup management, and safe corporate file sharing.
Device Security — Strengthens everyday cyber hygiene across computers, mobile devices, software updates, USB media, and secure device use.
Data Protection — Covers encryption, secure file sharing, proper data storage, and practical methods for protecting confidential information.
Access Control — Explains least privilege, role-based access, privilege escalation risks, and the consequences of poor access management.
Malware and Ransomware Protection — Teaches how malware and ransomware operate, how to reduce infection risks, and how to limit potential impact.
Remote Work Security — Addresses secure remote access, home office protection, personal device risks, unsafe networks, and insider threat prevention.
Corporate Espionage and Insider Threats — Highlights corporate espionage methods, insider threat indicators, suspicious behavior, and protection of sensitive assets.
Social Media Security — Examines social media risks, social engineering threats, account protection, MFA, and the security impact of online activity.
Artificial Intelligence Security — Introduces secure AI use, data confidentiality, intellectual property protection, model risks, and responsible AI practices.
GDPR and Data Protection — Explains GDPR principles, privacy rights, compliance requirements, enforcement mechanisms, and personal data protection practices.
Incident Response — Guides learners through incident classification, prioritization, containment, team coordination, and stakeholder communication.
Third-Party Software Security — Analyzes supply chain risks, installer verification, pirated software threats, sandbox testing, and endpoint recovery after risky installations.

Role-based Awareness

Finance

Executives

Procurement

PR/Marketing

What is

Targeted security training for specific business functions — building on general awareness with role-specific risks, scenarios, and responsibilities. Different roles face different threats. Every track reflects the exact attack patterns that function actually faces.

Components

Show

Cybersecurity for HR — Employee data protection, secure recruitment, background checks, onboarding/offboarding security, payroll fraud, HR-targeted phishing.
Cybersecurity for Finance — BEC and invoice fraud, wire transfer verification, deepfake voice/video fraud, banking data protection, cryptocurrency risk, financial system access controls.
Cybersecurity for Executives — Whaling and CEO fraud, travel security, secure communication, governance responsibilities, incident decision-making, media handling during a breach.
Cybersecurity for Procurement — Vendor assessment, invoice fraud detection, secure contracts, supplier incident response, third-party access management
Cybersecurity for PR/Marketing — Social media account security, brand impersonation, breach communication protocols, campaign data protection, influencer risk.

Security Awareness Kits

Everyone

What is

A library of 46 standalone security awareness modules grouped into 10 thematic kits. Each kit covers one specific risk area — practical, checklist-based, designed for non-technical employees. Deploy individual kits by role or risk area, or roll out the full library as a company-wide program.

Components

Show

Messenger Security Kit — Secure configuration of Telegram, WhatsApp, Signal, Facebook Messenger Social Media
Social Media Security Kit — Instagram, Facebook, LinkedIn account protection and impersonation prevention
Device Security Kit — Smartphones, Laptops and PCs, Corporate Devices, macOS, Windows, iOS, Android
Remote Work Security Kit — Secure Remote Access, Home Wi-Fi, Public Wi-Fi, IoT Devices, Coworking Security
Cloud and Data Security Kit — Google Drive, Dropbox, OneDrive, Secure Backups, Data Deletion
Threat and Malware Kit — Viruses, Trojans, Ransomware, Spyware
Phishing and Email Security Kit — Corporate Email Protection, Spam, Classic Phishing, Vishing, Post-Phishing Actions
Cyber Hygiene Kit — Safe Browsing, Strong Passwords, MFA/2FA, Security Mistakes by New Employees, Responding to Suspicious Activity
Workplace Security Kit — Office Security, Company Security Policies, Working with Confidential Information
Financial Security Kit — Online Payments, Banking Data Protection, Cryptocurrency Security

Post-Quantum Cybersecurity Awareness

Executives

What is

This comprehensive executive certification track is designed to guide corporate leadership, board members, and senior management through the monumental business transition to Post-Quantum Cryptography (PQC). As Cryptographically Relevant Quantum Computers (CRQCs) threaten the structural foundation of global digital trust, this program translates complex mathematical risks into definitive business, financial, and legal strategies.

Components

Show

Post-Quantum Cryptography Standards and Global Compliance — NIST standards (FIPS 203, 204, 205), CNSA 2.0 mandates, GDPR and DORA exposure, cyber insurance requirements, and Cryptographic Agility with Zero Trust
Quantum Risk in the Supply Chain and Third-Party Vendors — Cloud Shared Responsibility, Shadow SaaS, orphaned open-source risk, M&A cryptographic due diligence, and enforcing standards via RFPs and SLAs
Cryptographic Discovery and Post-Quantum Cryptography Readiness — Automated discovery of legacy crypto, dynamic Cryptographic Bill of Materials, asset triage via Mosca's Theorem, CapEx funding, and governance KPIs
The Quantum Threat Landscape and Corporate Liability — Quantum threat to RSA and ECC, Shor's Algorithm, Harvest Now Decrypt Later, economic espionage, and Mosca's Theorem for migration timing
Strategic Governance and Long-Term Execution — Quantum Steering Committee, migration funding, Cryptographic Center of Excellence, compensation-linked KPIs, and Q-Day crisis and SEC disclosure readiness

Universal

CISO

CIO

IT Director

CFO

HR Director

General Counsel

Department Heads

What is

Survival Essentials For any company 50+ employees, any industry, no CISO required.

Key scenarios

Ransomware Crisis: 48 Hours to Decide · Phishing Breach: The CEO's Inbox · Business Email Compromise: The Fake Invoice · MFA Fatigue: The 3AM Attack · Stolen Laptop · Fake Job Applicant: The Malware Resume · GDPR 72-Hour Countdown

Executive

C-Level

CEO

Board

CFO

COO

General Counsel

What is

C-Level/CEO/Board For CEOs, board members, business owners, executive directors.

Key scenarios

Ransomware Crisis · Phishing Breach: The CEO's Inbox · Deepfake Video Call · Voice Clone Fraud · Hospital Ransomware: Lives at Stake · Acquisition Due Diligence Failure · NotPetya · Competitor Espionage · Whistleblower Leak · ChatGPT Data Leak

Small & Medium Business

CEO

CISO

CIO

IT Director

CFO

HR Director

General Counsel

What is

For companies 10–500 employees, limited IT staff, no dedicated security team.

Key scenarios

Ransomware Crisis · BEC: The Fake Invoice · Stolen Laptop · Fake Job Applicant · MFA Fatigue · GDPR Countdown · ChatGPT Data Leak · Social Engineering: The Fake IT Support

Technical

DevOps

Security

SOC Analytics

Security Engineers

What is

IT/DevOps/Security For SOC analysts, DevOps, sysadmins, security engineers, cloud teams.

Key scenarios

AWS Keys in GitHub · Kubernetes Takeover · CI/CD Pipeline Poisoning · SolarWinds Backdoored Update · API Breach: Broken Authentication · AI Model Poisoning · Golden Ticket AD Attack · Password Manager Breach · Log Tampering · SCADA Compromise

Financial

CFO

Finance

Banks

FinTech

CCO

What is

CFO/Finance/Banks/FinTech For CFOs, accounting, banks, insurance, fintech, payment processors.

Key scenarios

BEC: The Fake Invoice · PCI DSS Nightmare · Deepfake Video Call · Voice Clone Fraud · Trading Platform Down · Password Manager Breach · Log Tampering · SCADA Compromise

Critical Infrastructure / Energy / Telecom

CISO

CIO

IT Director

CFO

HR Director

General Counsel

Department Heads

What is

For energy, gas, water operators, telecom carriers, railways, defense manufacturers.

Key scenarios

Telecom Blackout (Kyivstar 2023) · Satellite Down: First Hour of War (Viasat 2022) · SCADA Compromise: Water Treatment Attack · NotPetya · Competitor Espionage · Whistleblower Leak

Government & Defense

CISO

CIO

IT Director

CFO

HR Director

General Counsel

Department Heads

What is

Survival Essentials For any company 50+ employees, any industry, no CISO required.

Key scenarios

Compliance Pack

CISO

CIO

IT Director

CFO

HR Director

General Counsel

Department Heads

What is

Survival Essentials For any company 50+ employees, any industry, no CISO required.

Key scenarios

Quantum & Post-Quantum

CEO

Board of Directors

CISO

CIO

Chief Risk Officer

General Counsel

Chief Communications Officer

What is

For banks, fintech, payment processors, tech manufacturers, defense, and critical infrastructure whose data must outlive today's encryption.

Key scenarios

The Q-Day Black Swan · The "Quantum-Safe" Supply Chain Betrayal · The Post-Quantum Rollout Disaster · Harvest Now, Decrypt Later

Audit ISO/IEC 27001:2022

93 Controls

What is

Assessment against the ISO/IEC 27000 family governing ISMS. Verifies how effectively an organization protects its information assets across all control domains.

Audit NIST SP 800-53

325 Controls

What is

Systematic assessment of core security and privacy controls per NIST SP 800-53 for federal information systems and organizations.

Audit CIS Controls v8 IG1

56 Safeguards

What is

Basic Security Level Entry-level IS maturity assessment covering 56 baseline CIS controls. For organizations beginning their security program.

Audit CIS Controls v8 IG2

130 Controls

What is

Intermediate Security Level Comprehensive assessment for mid-maturity organizations with partial to full IS departments. Covers 130 CIS controls applicable to IG2 organizations.

Audit ISO/IEC 27001:2022

153 Safeguard

What is

Advanced Security Level Full-spectrum cybersecurity audit for high-maturity organizations with specialized IS teams. Covers all 153 CIS controls across all implementation groups.

Content

Need something Unique?