Cyber Security Academy logo
BeginnerDataSecurityLevels A1 → C122 languages

Cyber Security Academy

Protect digital systems and data with essential skills from Cyber Security Academy. A CoddyKit learning path of 76 short courses and 303 interactive lessons, with a 24/7 AI tutor at your side.

Courses
76
Lessons
303
Interactive steps
3,932
Free to start
Course 1
Curriculum

76 courses in this path

Every course in the Cyber Security Academy path, in learning order. The first one is free.

1

A13 lessonsFree

Learn what cybersecurity is, why it matters, the CIA triad, common threat actors, and how defenders think about protecting systems.

2

A14 lessonsPRO

Build a solid networking foundation: IP addressing, TCP/UDP, DNS, HTTP, and how packets flow through the internet.

3

A14 lessonsPRO

Survey the most prevalent cyber attacks: phishing, malware, man-in-the-middle, denial of service, and social engineering.

4

A14 lessonsPRO

Learn best practices for passwords, hashing algorithms, MFA, and how attackers crack credentials.

5

A14 lessonsPRO

Practice safe browsing, understand tracking and fingerprinting, use VPNs and Tor safely, and apply operational security.

6

A24 lessonsPRO

Social Engineering and Phishing Defense: Social Engineering Tactics, Recognizing Phishing, and more.

7

A24 lessonsPRO

Firewalls and Network Segmentation: Firewall Types, Rules and Policies, and more.

8

A24 lessonsPRO

VPNs and Secure Remote Access: How VPNs Work, VPN Protocols, and more.

9

A24 lessonsPRO

Harden Linux systems: file permissions, user management, SSH security, firewalls, and basic log analysis.

10

A24 lessonsPRO

Learn the OWASP Top 10 fundamentals: SQL injection, XSS, CSRF, insecure deserialization, and misconfiguration.

11

A24 lessonsPRO

Understand symmetric and asymmetric encryption, hashing, digital signatures, and TLS without deep mathematics.

12

A24 lessonsPRO

Learn open-source intelligence gathering: Google dorking, Shodan, WHOIS, certificate transparency, and social media OSINT.

13

A24 lessonsPRO

Multi-Factor Authentication: Authentication Factors, TOTP and HOTP, and more.

14

B14 lessonsPRO

Endpoint Detection and Response: What Is EDR, Telemetry and Detection, and more.

15

B14 lessonsPRO

Understand the incident response lifecycle, how to contain and eradicate threats, and write an incident report.

16

B14 lessonsPRO

PKI and Digital Certificates: Public Key Infrastructure, Certificate Authorities, and more.

17

B14 lessonsPRO

Identity and Access Management: IAM Fundamentals, RBAC and ABAC, and more.

18

B14 lessonsPRO

Use Nmap, Netcat, and service fingerprinting to map networks and identify attack surfaces.

19

B14 lessonsPRO

Use Nessus, OpenVAS, and Nikto to discover vulnerabilities; understand CVE, CVSS scoring, and prioritization.

20

B14 lessonsPRO

Learn Metasploit's architecture, modules, payloads, and how to exploit known vulnerabilities in lab environments.

21

B14 lessonsPRO

Understand Windows security architecture, Active Directory attacks (Pass-the-Hash, Kerberoasting), and hardening.

22

B14 lessonsPRO

Analyze 802.11 security: WEP, WPA2, WPA3, EAP protocols, evil twin attacks, and wireless hardening.

23

B14 lessonsPRO

Collect, parse, and correlate logs with a SIEM; write detection rules and investigate security alerts.

24

B14 lessonsPRO

Secure AWS, Azure, or GCP environments: IAM least privilege, misconfiguration detection, and cloud-native security.

25

B14 lessonsPRO

Collect, analyze, and operationalize threat intelligence: STIX/TAXII, threat feeds, ATT&CK mapping, and sharing.

26

B14 lessonsPRO

Database Security: SQL Injection Defense, Access Control and Encryption, and more.

27

B14 lessonsPRO

Security Auditing and Compliance: Compliance Frameworks, Security Audits, and more.

28

B14 lessonsPRO

Data Loss Prevention: What Is DLP, Classifying Data, and more.

29

B14 lessonsPRO

SOC Analyst Operations and Triage: The SOC and Its Tiers, Alert Triage Workflow, and more.

30

B14 lessonsPRO

Threat Modeling with STRIDE: Why Threat Modeling Matters, The STRIDE Framework, and more.

31

B14 lessonsPRO

Email Security: SPF, DKIM and DMARC: How Email Spoofing Works, SPF Records, and more.

32

B14 lessonsPRO

DNS Security and Attacks: How DNS Works and Its Risks, DNS Spoofing and Cache Poisoning, and more.

33

B14 lessonsPRO

Vulnerability Management Programs: The Vulnerability Management Lifecycle, Scanning and Asset Inventory, and more.

34

B14 lessonsPRO

Risk Frameworks: NIST CSF and ISO 27001: Why Security Frameworks Exist, The NIST Cybersecurity Framework, and more.

35

B14 lessonsPRO

Privacy and Data Protection: Why Data Privacy Matters, GDPR and KVKK Essentials, and more.

36

B14 lessonsPRO

Steganography and Data Hiding: What Steganography Is, Image and Audio Steganography, and more.

37

B14 lessonsPRO

CTF and Practical Hacking Skills: CTF Categories and Mindset, Web and Crypto Challenges, and more.

38

B24 lessonsPRO

TLS and SSL Deep Dive: The TLS Handshake, Cipher Suites, and more.

39

B24 lessonsPRO

Container Security: Container Threats, Image Scanning, and more.

40

B24 lessonsPRO

API Security and OWASP API Top 10: API Attack Surface, Broken Authorization, and more.

41

B24 lessonsPRO

Perform a structured web app pentest: intercept traffic with Burp Suite, exploit injection flaws, and test auth.

42

B24 lessonsPRO

Perform static and dynamic malware analysis: PE structure, strings, sandbox behavior, and YARA rules.

43

B24 lessonsPRO

Mobile Application Security: Mobile Threat Landscape, Insecure Data Storage, and more.

44

B24 lessonsPRO

IoT and Embedded Security: IoT Attack Surface, Firmware Analysis, and more.

45

B24 lessonsPRO

Honeypots and Deception: Deception Technology, Types of Honeypots, and more.

46

B24 lessonsPRO

Integrate security into CI/CD pipelines: SAST, DAST, SCA, secrets scanning, container security, and security champions.

47

B24 lessonsPRO

Design Zero Trust networks: identity verification, microsegmentation, BeyondCorp model, and continuous validation.

48

B24 lessonsPRO

Write secure code: input validation, output encoding, secure dependency management, OWASP ASVS, and code review.

49

B24 lessonsPRO

Participate effectively in bug bounty programs: scope analysis, reporting quality, vulnerability chaining, and ethics.

50

B24 lessonsPRO

Penetration Test Reporting: Report Structure, Risk Scoring, and more.

51

B24 lessonsPRO

Burp Suite Mastery: Proxy and Interception, Repeater and Intruder, and more.

52

B24 lessonsPRO

Network Traffic Analysis: Capturing Packets, Reading Protocols, and more.

53

B24 lessonsPRO

Detection Engineering with Sigma: Detection-as-Code Principles, Writing Sigma Rules, and more.

54

B24 lessonsPRO

Network Security Monitoring with IDS/IPS: IDS vs IPS Concepts, Signature Rules with Snort and Suricata, and more.

55

B24 lessonsPRO

YARA Rules for Malware Detection: What YARA Is For, YARA Rule Syntax, and more.

56

B24 lessonsPRO

Security Automation with SOAR: Why SOAR Matters, Playbook Design, and more.

57

B24 lessonsPRO

Kubernetes Security: Kubernetes Threat Model, RBAC and Service Accounts, and more.

58

B24 lessonsPRO

Software Supply Chain Security and SBOM: Supply Chain Threats, Software Bill of Materials (SBOM), and more.

59

B24 lessonsPRO

Ransomware Defense and Response: How Ransomware Works, Prevention and Hardening, and more.

60

B24 lessonsPRO

Secrets Management and Key Rotation: The Secrets Sprawl Problem, Vaults and Secret Stores, and more.

61

B24 lessonsPRO

AI and LLM Security: Prompt Injection and Jailbreaks, The OWASP LLM Top 10, and more.

62

B24 lessonsPRO

Authentication Protocols: OAuth, OIDC and SAML: OAuth 2.0 Flows, OpenID Connect (OIDC), and more.

63

C14 lessonsPRO

Master buffer overflows, ROP chains, format string vulnerabilities, and heap exploitation in a lab setting.

64

C14 lessonsPRO

Reverse engineer binaries with Ghidra and GDB: control flow, data structures, calling conventions, and deobfuscation.

65

C14 lessonsPRO

Plan and execute red team engagements: C2 infrastructure, living-off-the-land techniques, and evasion.

66

C14 lessonsPRO

Perform digital forensics: disk imaging, file carving, memory analysis with Volatility, and timeline reconstruction.

67

C14 lessonsPRO

Design secure architectures: threat modeling, risk frameworks (NIST, ISO 27001), control selection, and audit.

68

C14 lessonsPRO

Analyze advanced persistent threat campaigns: multi-stage loaders, fileless malware, C2 over HTTPS, and TTPs.

69

C14 lessonsPRO

Cyber Threat Hunting: Threat Hunting Mindset, Hypothesis-Driven Hunting, and more.

70

C14 lessonsPRO

Active Directory and Kerberos Attacks: Active Directory Attack Surface, Kerberos and Kerberoasting, and more.

71

C14 lessonsPRO

Cloud Penetration Testing: Cloud Attack Surface, Enumerating Cloud Resources, and more.

72

C14 lessonsPRO

Disk and Network Forensics: Forensic Fundamentals and Chain of Custody, Disk Imaging and File System Analysis, and more.

73

C14 lessonsPRO

OT, ICS and SCADA Security: Industrial Control Systems Basics, OT vs IT Security Differences, and more.

74

C14 lessonsPRO

Purple Teaming: Why Purple Teaming, Mapping Attacks to Detections, and more.

75

C14 lessonsPRO

RF and Wireless Hacking: RF and SDR Fundamentals, Bluetooth and BLE Attacks, and more.

76

C14 lessonsPRO

Mobile Forensics: Mobile Forensics Fundamentals, Android Acquisition and Analysis, and more.

CoddyKit PRO

Unlock all 76 courses in this path, and every other path

AI tutor, certification exam and certificate. Works on web, iOS and Android.

See all plans
Yearly$29.90 / yearAbout $2.49 a monthPay onceLifetime$69.99 onceNo renewals. PRO forever.
Course Overview

The Complete Cybersecurity Curriculum — From Foundations to Red Team

Cybersecurity is the discipline of protecting systems, networks, and data from unauthorized access, exploitation, and disruption. This track covers the full spectrum: from understanding how attacks work to actively hunting threats, auditing infrastructure, and running penetration tests against real targets. Seventy-six courses built for practitioners, not checkbox compliance.

What You Will Learn

You will start with networking fundamentals, password security, OPSEC, and common attack types, then advance through cryptography, PKI, Identity and Access Management, and SIEM log analysis. Offensive skills include reconnaissance and OSINT, exploitation with Metasploit, Burp Suite mastery, web application pentesting, and API security against the OWASP API Top 10. Defensive skills span Endpoint Detection and Response, threat intelligence, SOC analyst triage, Detection Engineering with Sigma, YARA rules for malware detection, and Security Automation with SOAR. Cloud, container, and Kubernetes security are covered alongside Software Supply Chain Security, Secrets Management, and AI and LLM Security.

The Learning Path

The curriculum spans A1 through C1 across 76 courses. The A1 foundation establishes networking, authentication, and secure browsing. A2 moves into Linux security, web security, cryptography, and OSINT. B1 covers the broad practitioner layer: vulnerability assessment, Active Directory, wireless security, compliance frameworks like NIST CSF and ISO 27001, threat modeling with STRIDE, and CTF skills. B2 deepens offensive and defensive work with TLS internals, container and Kubernetes security, malware analysis, Zero Trust Architecture, and penetration test reporting. The C1 tier closes with Advanced Exploitation Techniques, Reverse Engineering, Red Team Operations, Active Directory and Kerberos Attacks, Cloud Penetration Testing, OT/ICS/SCADA Security, Purple Teaming, RF and Wireless Hacking, and Mobile Forensics.

How It Works

Each course is divided into short, focused lessons you complete in the built-in code editor with real-time feedback. An AI tutor is available whenever you get stuck, so you can work through hands-on exercises at your own pace without waiting for office hours or a forum reply.

How You'll Learn

  1. 01

    Interactive Lessons

    Hands-on coding exercises with real-time feedback

  2. 02

    AI Tutor

    Get instant help from our AI when you're stuck

  3. 03

    Built-in Editor

    Write and run code directly in your browser

  4. 04

    Certificate

    Earn a certificate when you complete the course

FAQ

Frequently Asked Questions

Is the Cyber Security Academy course free?

Yes. You can start the Cyber Security Academy course for free and complete its interactive lessons at no cost. An optional PRO subscription unlocks advanced AI tools and a shareable certificate.

Do I need prior experience to learn Cyber Security Academy?

No. The course begins with the fundamentals and gradually moves to more advanced topics, so you can start even with no prior Cyber Security Academy experience.

How will I learn Cyber Security Academy on CoddyKit?

You learn by doing. Short interactive lessons pair a clear explanation with a hands-on coding exercise that runs in real time, and a 24/7 AI tutor gives personalized help whenever you get stuck.

Do I get a certificate for completing Cyber Security Academy?

Yes. PRO learners can take an exam and earn a shareable certificate of completion with a verifiable code for the Cyber Security Academy course.

Can I learn Cyber Security Academy on my phone?

Yes. CoddyKit is available on the web and as native iOS and Android apps, so you can learn Cyber Security Academy on any device and your progress syncs across them.

How much does CoddyKit PRO cost?

The first course of Cyber Security Academy is free. CoddyKit PRO unlocks every course: $5.90 per week, $7.90 per month, $29.90 per year, or $69.99 once for lifetime access with no renewals.

How long does it take to complete Cyber Security Academy?

Cyber Security Academy has 76 courses and 303 lessons. Most lessons take about 5–10 minutes, so the whole path is roughly 35 hours of hands-on practice, at your own pace.

Start Cyber Security Academy Now

Join thousands of learners mastering programming with AI-powered lessons.