Certification programme
Defensive security aimed where the attacks now are: cloud infrastructure and AI systems. Everything is practised in an isolated lab we provide.
What you will be able to do
At a glance
Full syllabus
8 modules · 40 topics · 165 concepts
Core principles
Threat modelling
The attack lifecycle
Cryptography in use
Law and ethics in India
You can reason about a system in terms of threats rather than features.
Lab architecture
Attacker tooling
Target systems
Working method
You can build and safely operate an isolated attack and defence lab.
Protocol fundamentals
Traffic analysis
Scanning and enumeration
Network attacks
Network defence
You can capture, read and interpret network traffic and scan a network responsibly.
Operating system security
Privilege escalation
Credentials
Authentication
Endpoint defence
You can harden a system and explain how a credential attack unfolds.
How web applications break
Injection
Cross-site scripting
Broken access control
Other Top Ten classes
Testing tools
You can find and explain the OWASP Top Ten classes of flaw.
The shared responsibility model
Identity in the cloud
Storage exposure
Network and workload
Cloud detection
You can audit a cloud account and find the exposures that matter.
Why AI systems are different
Prompt injection
Data risks
Agent and tool risk
Supply chain
You can assess an AI-enabled application for the attacks specific to it.
Logging and monitoring
Incident response
Digital forensics basics
Reporting
Career paths
You can investigate an incident and write a report someone can act on.
5 builds you keep
Work through a small isolated network from reconnaissance to domain-level access, then switch sides: add the logging and controls that would have caught each step you took.
A deliberately vulnerable application tested end to end, with findings written up properly: reproduction steps, evidence, business impact and a remediation a developer could act on.
Public buckets, over-permissive roles, open security groups and a key in an environment variable. Find them, rank them by real risk, and write the remediation plan.
Make a retrieval-backed assistant follow instructions hidden in a document it retrieves, get it to reveal something it should not, then implement and re-test the defences.
Logs, a compromised host and no explanation. Build the timeline, identify the entry point and what was taken, and produce an incident report with recommendations.
Hands on with
Before you enrol
It teaches defensive security, which requires understanding attacks. Everything is practised in an isolated lab we provide, against systems built to be attacked. The first module covers the IT Act and why written authorisation is what separates this work from a criminal offence.
Helpful, not required. The networking and systems modules build what you need. If you are starting from nothing technical at all, our Linux and Operating Systems course first will make this considerably easier.
It depends on direction. Defensive and SOC roles tend to ask for CompTIA Security+ early on; offensive roles look at OSCP, which is demanding and best attempted after real lab hours. We cover what each is worth in the Indian market rather than recommending one blindly.
Yes, concentrated in banking, financial services and the large IT services firms, with SOC analyst being the most common entry point. It is a field where demonstrable lab work and a home lab carry unusual weight compared with a certificate alone.
Because companies here are deploying AI features now and very few people can assess them. Prompt injection has no complete fix, and being one of the people who can explain that to a business is currently a genuine advantage.
Where this leads
One skill on a CV is a hobby. These are the courses students take alongside this one, in the order that builds an actual role.
Deploying is the easy part. This is the course about what happens afterwards: Kubernetes in depth, GitOps, observability you can debug with, and the reliability practices that decide whether a system stays up at three in the morning.
Run real campaigns with real budgets, with AI doing the production work. SEO, paid ads, content and analytics, measured properly so you can prove what worked.
Cloud and DevOps together, because employers hire for the combination. You build real infrastructure, containerise applications and ship them through a pipeline you wrote.