The course
Cybersecurity, module by module.
Start with any module: read the lessons, test yourself at the checkpoints, then sit the module exam. Pass it and you earn that module's certificate. Your progress is saved on this device.
Begin the courseModules
- Module 0 · Start here2 lessons
Course Orientation
How the course is structured and how you earn each certificate.
- Module 1 · Practical9 lessons
Recon & OSINT
Open-source intelligence end to end: domains and infrastructure, people, search, geolocation and breach data, then a practical exam.
- Module 2 · Core9 lessons
Cryptography
Symmetric and asymmetric encryption, hashing and password storage, digital signatures, certificates and TLS, and the ways real crypto fails, then a practical exam.
- Module 3 · Offensive7 lessons
Web Exploitation
How the web breaks: HTTP and sessions, the OWASP Top 10:2025, injection and XSS, broken authentication and access control, then a practical exam.
- Module 4 · Defensive6 lessons
Forensics & Incident Response
Defensive forensics and incident response: the IR lifecycle, evidence handling and the order of volatility, disk, memory and network forensics, and how a SOC detects and responds at scale. Ends in a practical exam.
- Module 5 · Core8 lessons
Fundamentals
The bedrock concepts: the CIA triad and its extensions, who attacks and why, how security controls are classified and layered, threat modelling with STRIDE and the kill chain, and the secure design principles that decide whether a system ages well. Ends in a practical exam.
- Module 6 · Core6 lessons
Networking
How networks are built and broken: the OSI and TCP/IP models and core protocols, the local-network and denial-of-service attacks that exploit trusting protocols, and the firewalls, IDS/IPS, VPNs and segmentation that defend them. Ends in a practical exam.
- Module 7 · Core6 lessons
OS Security
Securing the systems attacks actually land on: the Linux permission and privilege model, Windows and Active Directory with the credential attacks that dominate enterprise compromise, and authentication, MFA and access-control models. Ends in a practical exam.
- Module 8 · Core6 lessons
Threats & Malware
The threat side end to end: classifying malware by how it spreads and what it does, the social engineering that delivers it, and mapping real adversary behaviour with MITRE ATT&CK and the Pyramid of Pain.
- Module 9 · Core6 lessons
GRC
Governance, risk and compliance: how organisations assess and treat risk, the frameworks and standards that structure security, and the law and ethics that separate the work from a crime. Ends in a practical exam.
- Module 10 · Practical7 lessons
CTF
Putting the whole course to work on a target: engagement methodology and authorisation, reconnaissance and nmap scanning, the offensive toolset, and Linux and Windows privilege escalation, then a practical exam.