How you'll learn
You're hired. Now learn the job.
Sudo Arena teaches through scenarios. You join a simulated security firm, take real-looking tickets from clients and your team lead, and learn each skill the moment the job calls for it. By the end of a path, you've already done the work.
- job-shaped paths
- 31
- job-shaped paths
- lessons
- 1,656
- lessons
- lesson formats
- 113
- lesson formats
Scenario-based learning
Every lesson starts with a job to do.
You don't study topics in a vacuum. Each path is a run of scenarios at SableShield Security, a simulated firm, and every skill arrives the moment a case needs it. This is what one week looks like.
“Customers can see other customers' invoices.”
Several customers say they saw invoices from other accounts after logging in. Find out how, and how bad it is.
Welcome to your lab. Type a command or follow the objectives.
you@sudo-lab:~$
The loop
Four steps behind every scenario.
Whatever the case, you move through the same loop: see the idea, try it safely, use it on the job, then prove it.
Lessons you can see and hear.
Every concept is an animated scene with voice narration. Instead of reading about a TCP handshake, you watch it happen. Short chapters keep each idea small enough to stick.
517 visual lessons in the curriculum
- Narration you can pause, replay and speed up
- Visual scenes for networks, attacks and defences
- Ask a question inside the lesson when you get stuck
- 22sshopen
- 80httpopen
- 443httpsopen
- 3306mysqlfiltered
- 8080http-altclosed
Three ports answered. -sV shows what's listening.
Chapters
- What is a port?
- 2Scanning a network
- 3Reading the results
- 4Quick check
Teaching formats
A format built for every lesson.
No two topics are taught the same way. A protocol is easiest to see in a packet explorer; a SOC shift makes sense in a live alert queue. Each lesson gets the format that fits it.
113lesson formats across the curriculum
- See it33
- Do it41
- Talk it through20
- Own it19
SOC & detection engineering
Interactive alert queue
Triage a live queue of alerts, the way a SOC analyst works a shift.
15 lessons in this format
Reverse engineering & malware
Annotated disassembly
Read real assembly with notes on what each block of code is doing.
15 lessons in this format
Cloud security
Guided cloud sandbox
Find and fix misconfigurations in an isolated cloud account.
14 lessons in this format
AI, agent & model security
Agent decision simulator
Watch an AI agent pick its tools, and find where it can be misled.
16 lessons in this format
DFIR & incident response
Chain of custody board
Track evidence from collection to report without breaking the chain.
13 lessons in this format
Identity & Active Directory
Permission graph
Follow how one weak permission leads all the way to domain admin.
12 lessons in this format
Inside a module
Every module runs the loop.
Three chapters, from the first concept to work you could hand to a client. Pick a module to see its real lessons.
Understand the concept
- Host discovery strategies and constraintsVisual · Interactive topology
- TCP and UDP service probingVisual · Packet or config explorer
Observe and practise
- Service banners and version validationHands-on · Guided network lab
- Nmap result formats and noise filteringHands-on · Scope aware validation
Deliver the work
- Rate limits and scan impact controlMentor · Mentor decision review
- Explain a misleading service fingerprintIndependent · Independent network case
Our approach
Built around how people actually learn.
Four rules shape every path, module and scenario on Sudo Arena.
Ethics first
Every path opens with roles, ethics and authorisation. Rules come before tools.
Foundations open with Security roles, ethics and authorisation
Beginner-friendly
No experience needed. The foundations start from what a terminal is.
The first modules are Linux and Windows fundamentals
Bite-sized
Short chapters that fit around a job or classes, at your own pace.
1,656 lessons split into 801 short chapters
Job-shaped
Paths map to real roles, and every scenario mirrors work that role really does.
31 career paths, each ending in a capstone
Start your first lab today.
Pick a path, open the first lesson and run your first command on a lab machine in your browser. Nothing to install.