Learn cyber security online, hands-on

Start here if you're new

1. Take the free 5-minute Cyber Readiness Test.
2. Begin with Security Foundations & GRC and Network Security.
3. Practise with the free tools and the Cyber Range.
4. Pick a career path and earn certificates as you go.

Career paths

• All-Staff Awareness Programme: Annual compliance-ready training for every employee. Certifications to aim for: Evidence for ISO 27001 A.6.3 / PCI DSS 12.6.
• School Cyber Safety: Online safety and digital citizenship for students aged 10–17. Certifications to aim for: Digital citizenship certificate.
• University Cyber Foundations: A first-year course across the core disciplines. Certifications to aim for: Security+ preparation.
• SOC Analyst: Detect and respond to threats in a security operations center. Certifications to aim for: Security+ → CySA+ → BTL1/GCIH.
• Cloud Security Engineer: Secure Azure, AWS and GCP workloads and identities. Certifications to aim for: AZ-500 → CCSP.
• Penetration Tester: Run authorized assessments and write fix-focused reports. Certifications to aim for: PenTest+ → OSCP.
• GRC & Security Manager: Lead risk, compliance and security programs. Certifications to aim for: CISSP → CISM → ISO 27001 LA.
• OT Security Specialist: Protect plants, utilities and critical infrastructure. Certifications to aim for: GICSP → ISA/IEC 62443.
• AI Security Engineer: Secure LLM apps, agents and the AI supply chain. Certifications to aim for: OWASP LLM / NIST AI RMF.
• Security Architect: Design secure systems and zero trust programs. Certifications to aim for: CISSP-ISSAP → SABSA.
• Incident Responder & Forensics: Investigate breaches and preserve evidence. Certifications to aim for: GCIH → GCFA.

All courses

• Security Foundations & GRC: CIA triad, risk management, frameworks and the controls that hold a security program together.
• Network Security: Protocols, segmentation, firewalls, IDS/IPS and how to read traffic like an analyst.
• Identity & Access Management: Authentication, MFA, SSO, privileged access and the identity attacks defenders see most.
• Cloud Security: Shared responsibility, cloud identity, misconfigurations, CSPM and workload protection on Azure, AWS and GCP.
• Application Security: OWASP Top 10, secure SDLC, code review, SAST/DAST/SCA and software supply chain.
• Cryptography & PKI: Symmetric vs asymmetric crypto, hashing, TLS, certificates and the move to post-quantum.
• Security Operations & Incident Response: SIEM, detection engineering, triage, the IR lifecycle and writing a useful post-incident review.
• Threat Intelligence & MITRE ATT&CK: Intelligence lifecycle, ATT&CK mapping, IOCs vs TTPs and turning news into defensive action.
• Ethical Hacking & Pentesting: Rules of engagement, methodology and reporting for authorized testing in lab environments.
• Endpoint Security & Malware Analysis: Hardening, EDR, forensics basics and safe static triage of suspicious files.
• OT, ICS & IoT Security: Purdue model, ICS protocols, IEC 62443 zones and conduits, and securing connected devices.
• AI & LLM Security: Prompt injection, agent security, model supply chain and governance for AI systems.
• Security Architecture & Zero Trust: Designing secure systems: trust boundaries, zero trust architecture, reference models and design reviews.
• DevSecOps & Secure CI/CD: Building security into pipelines: secrets, scanning gates, IaC security, signed artifacts and SLSA.
• Digital Forensics: Evidence handling, Windows and Linux artifacts, memory forensics and building timelines.
• Data Security & Privacy: Data classification, DLP, encryption and key management, plus GDPR and India's DPDP Act.
• Mobile & Endpoint Device Security: iOS and Android security models, MDM, app security (OWASP MASVS) and mobile threats.
• Social Engineering & Security Awareness: How people are manipulated, how to spot it, and how to build a security culture that works.
• Security Awareness for Employees: Short, practical training every employee needs: data handling, phishing, remote work, AI at work and reporting incidents.
• Cyber Safety for Students: Age-appropriate online safety: strong passwords, spotting scams, privacy, kindness online and where to get help.

Frequently asked questions