Start Here
Guided learning paths — pick the one that matches you and follow the steps in order.
Guided
Pick your path
The site has 30+ explainers and a half-dozen tools. Without a path, that's a maze. These four routes are sequenced for a specific kind of reader. Pick the closest match — you can switch later.
New to Cybersecurity
For curious beginners with no prior background.
Build a working mental model of how attacks happen and how defenders respond. No tools, no jargon — start here, then branch into a role.
Start →Blue Team Analyst
For aspiring SOC analysts or working defenders.
Move from concepts to daily operations: vulnerability triage, IOC research, log review, and incident response.
Start →IT Leader
For directors, managers, and architects shaping security strategy.
Frameworks and architectural primitives for building a defensible program. Light on tools, heavy on principles and tradeoffs.
Start →Small Business Owner
For owners and operators of teams under ~50 people.
Get the highest-leverage controls in place without a full-time security team. Focused on email, accounts, and recovery.
Start →For curious beginners with no prior background.
New to Cybersecurity
Goal: Understand the basics; protect your own accounts and devices.
Time: ~45 min reading
Checkpoint
Personal Hardening Checklist
Pick a password manager, turn on MFA on email + bank + work, set up backups for one important folder. Then continue.
For aspiring SOC analysts or working defenders.
Blue Team Analyst
Goal: Be able to triage a CVE, look up an IP, and read a hash result.
Time: ~90 min + tool practice
Explained
Incident Response
The PICERL lifecycle — Prepare, Identify, Contain, Eradicate, Recover, Lessons.
For directors, managers, and architects shaping security strategy.
IT Leader
Goal: Speak fluently about zero trust, segmentation, and supply chain risk.
Time: ~70 min reading
Checkpoint
Strategy Review
Map each principle to one control already in place and one gap. That is your next quarter's roadmap.
For owners and operators of teams under ~50 people.
Small Business Owner
Goal: Reach a defensible baseline you can re-audit annually.
Time: ~50 min reading + 1 hour setup
Explained
Multi-Factor Authentication (App-Based)
Free, fast, blocks ~99% of credential-stuffing attempts.
Explained
Business Email Compromise
Wire-fraud loss vector — train staff and add an out-of-band check.
Checkpoint
Annual Re-Audit
Schedule the next review for one year out. The threat landscape moves; your baseline must too.