Security labs
Read the evidence: phishing emails, sign-in logs and server logs. Decide what is an attack and respond without overreacting. Practice in your browser, with nothing to install and nothing to break. Finish a lab to earn a badge and points in the community.
5 labsAll 40 labsLearning pathsFree to start
Showing 5 of 5 labs
- Securityintermediate
Read a Linux auth log
Read the authentication log of a Linux server: spot the password-guessing run, find the account an attacker created after getting in, and tell it from the nightly backup that only looks alarming.
25 min3 steps50 points
- Securityadvanced
Respond to a compromised account
A phishing click became a stolen session and a quiet forwarding rule. Read the timeline, contain the account in the right order without overreacting, and write the handover note.
25 min3 steps75 points
- Securityintermediate
Review sign-in logs
Read a sign-in report and tell an attack from an ordinary day: impossible travel, a flood of approval requests, an old protocol that skips multifactor, and a trip that only looks suspicious.
25 min4 steps50 points
- Securitybeginner
Spot the phishing email
Read the headers and the message the way a security analyst does: check who really sent it, find the lines that give a scam away, leave the real mail alone and respond to the bad ones.
20 min4 steps50 points
- Securitybeginner
What not to paste into an AI tool
Check what staff are about to send to an AI chat: flag the passwords, tokens and personal details, leave the harmless lines, let clean text through and respond properly when a secret has already gone out.
20 min5 steps50 points
Real terminal labs are coming
Tell us which ones you want most, and we will let you know when they open.
Sign in to join the waitlist.