Cybersecurity, learned like a practitioner.
24 learning paths · 398 modules live · every lesson written by someone who has shipped the control or run the engagement. Free to start.
Advanced · modules
Modules tagged Advanced. Use the sidebar to narrow by track or topic.
Zero Standing Privilege and Just-in-Time Access
The principle Traditional model: 100 admins, each with persistent admin rights. Attacker compromise of any admin = persistent privileged access. Insider threat = persistent abuse capability. Zero standing privilege: 100 named eligible admins, 0 hold standing privilege. Elevation granted on request, time-bounded, audited. Attacker compromise of an admin = no standing access to abuse. Insider […]
Customer Identity (CIAM) — Scale, Fraud, KYC
CIAM vs workforce IAM — the differences Dimension Workforce IAM CIAM Scale Thousands Millions to hundreds of millions Onboarding HR-provisioned Self-service registration MFA tolerance Mandatory; users accept UX-sensitive; abandonment risk Account recovery Help-desk-mediated Self-service required Risk posture Trusted users; insider risk Account takeover, fraud, abuse Identity proofing In-person at HR Online; KYC for regulated CIAM […]
Privileged Access Management — PAM Architecture and Operations
What privileged accounts cover Domain Admin / Enterprise Admin (Windows AD). Root / sudo on Linux servers. Database admin (DBA) for production databases. Cloud root accounts and cloud admin IAM roles. Network device admin (firewall, switch, router). SaaS admin accounts (Okta admin, Workspace super-admin). Application admin accounts (Veeam, vCenter, etc.). Inventory these. The list is […]
Data Masking, Tokenisation, Pseudonymisation
Why this module exists. “Use real production data in development” is the line that produces audit findings and breaches. The alternatives — masking, tokenisation, pseudonymisation, synthetic data — each have tradeoffs. This module is the practitioner reference. The four techniques compared Technique Reversible? Use cases Static masking No Test / dev datasets; analytical exports Dynamic […]
Privacy Engineering Beyond Compliance
Why this module exists. “Privacy by design” is a phrase in every privacy framework and a practice in few organisations. The shift from “comply at audit time” to “design for privacy upfront” is what distinguishes mature programmes. This module covers the design patterns. The seven principles (Cavoukian) Proactive not reactive; preventative not remedial. Privacy as […]
Encryption Strategy — At Rest, In Transit, In Use
Why this module exists. “We encrypt everything” usually means “we encrypt some things at some layer, with key management we haven’t audited.” This module is the structured framework for an encryption strategy that survives both audit and operational reality. The three layers Layer Protects against Primitives At rest Stolen disk, exfiltrated backup, lost laptop AES-256 […]
Application-Level Cryptography — Avoiding the Common Mistakes
Why this module exists. Cryptographic primitives have safe defaults that produce safe outcomes if used correctly. Developers who deviate — even with good intentions — introduce subtle but catastrophic bugs. This module is the practitioner safety pattern. The cardinal rule — use high-level APIs Cryptographic library design has converged on high-level APIs that hide the […]
Continuous Control Testing and Automation
Why this module exists. Manual quarterly access reviews break the moment the security team is busy with anything else. Continuous control testing — automated evidence collection — solves this for the controls that can be automated. This module is the operational pattern. Which controls automate well Control class Automation Configuration settings High — cloud APIs, […]
Cloud-Native Security Architecture — Kubernetes, Service Mesh, Serverless
Why this module exists. Cloud-native architecture moves so much of the trust boundary into automation that the security architecture must shift correspondingly. This module is the cloud-native-specific architectural reference. The cloud-native trust model Three observations that drive cloud-native security architecture: Workloads are ephemeral — pods come and go in seconds. Static-IP-based controls do not apply. […]
Service Mesh Security — Istio, Linkerd, mTLS-Everywhere
Why this module exists. Microservices security cannot be solved at the firewall — there are too many internal calls, the topology changes constantly, and “inside the network” is too permissive. Service meshes are how mature programmes address this. This module is the practitioner pattern. What a service mesh does A service mesh deploys a sidecar […]
Practitioners who've
shipped the controls.
Every module is written by someone who has built the defence or run the engagement. No repackaged tutorials, no generic theory.
Why learn here
Practitioner-written.
Each lesson is authored by someone who has shipped the control or run the engagement in production.
Quiz after every module.
20+ questions with explanations. 70%+ to mark complete. Unlimited retries.
Progress tracked.
Completions, scores and streaks saved automatically. Resume exactly where you left off.
India-priced.
Start free. ₹499/mo for intermediate. ₹4,999/yr for advanced. No hidden fees, ever.