Paths
Choose a role. Follow the route.
31 career paths and 68 skill paths, built from 267 modules and 1,656 lessons. Every path mixes visual lessons, browser labs and client missions.
Everything one role needs, in order, ending in a capstone project that mirrors the job.
Offensive security7
Test networks, web apps and identity systems with permission, and report what you find.
Junior Penetration Tester
An authorised test of a corporate network, with a full report
Start pathWeb Application Penetration Tester
A web application assessment and a secure retest
Start pathActive Directory Security Specialist
Test and fix a chain of identity misconfigurations
Start pathBug Bounty Hunter and Vulnerability Researcher
A verified, in-scope finding and a responsible disclosure
Start pathRed Team Operations Specialist
Authorised adversary emulation and a defence assessment
Start pathSenior Infrastructure Penetration Tester
An evidence-based assessment across several network segments
Start pathSenior Web and API Security Researcher
A whitebox review and complex business-logic testing
Start pathDefensive security7
Watch, detect, investigate and respond, from the SOC to digital forensics.
Junior Cybersecurity Analyst
First alert triage, security controls and a written report
Start pathSOC Analyst Level 1
Realistic alert triage during a live SOC shift
Start pathIncident Responder
Contain an incident, recover and communicate
Start pathSOC Analyst Level 2
Resolve a chained incident with evidence and escalate it
Start pathDetection Engineer
A tested detection rule pack with metrics
Start pathDigital Forensics Investigator
Verifiable evidence and an incident timeline
Start pathThreat Hunter and CTI Specialist
A hunt hypothesis and an intelligence brief
Start pathCloud and application security4
Secure the code, pipelines and cloud platforms that products run on.
Application Security Engineer
A fix pull request for developers and a security gate
Start pathCloud Security Engineer
Fix cloud risks and prove the fix
Start pathDevSecOps and Supply Chain Engineer
An SBOM and a security-gated delivery pipeline
Start pathCloud Offensive Security Specialist
Assess a cloud sandbox environment
Start pathReverse engineering and research4
Take malware and software apart, and build the tools that stop it.
Endpoint Security and EDR Engineer
A working endpoint security prototype
Start pathReverse Engineer and Malware Analyst
Analyse a malware sample and write a detection rule
Start pathSecurity Researcher and Fuzzing Engineer
Fuzz a target, find the root cause and verify a safe patch
Start pathSoftware Reverse Engineering Specialist
Map unknown native software and report its compatibility and security impact
Start pathAI security2
Attack and defend AI agents, models and the applications built on them.
Devices and industrial systems4
Mobile, IoT, wireless and industrial systems, where software meets hardware.
IoT and Firmware Security Engineer
Firmware security for a simulated device
Start pathMobile Application Security Specialist
An Android and iOS assessment with a report
Start pathOT and ICS Security Specialist
Safety-first security for a simulated industrial plant
Start pathWireless Security Specialist
An authorised RF and wireless assessment
Start pathGovernance and architecture3
Design secure systems and manage risk, privacy and compliance.
GRC and Cybersecurity Auditor
An ISMS and an independently evidenced audit pack
Start pathCyber Risk and Privacy Engineer
Risk and privacy-by-design remediations
Start pathSecurity Architect and Zero Trust Engineer
A practical enterprise security architecture
Start pathNot sure where to start?
Begin with the foundations: roles, ethics and authorisation come before any tooling. Pick a role once you've had a taste.