Skip to content

Training Services

Security training taught by security engineers

Instructor-led courses on Kubernetes and container security, threat modelling, zero trust and incident exercises, built around hands-on labs in real clusters and taught by engineers who test and build these systems for our regulated clients.

Talk to us

Platform skills grow faster than security skills

Engineers often operate clusters they have never seen attacked. Security teams review Kubernetes without hands-on depth, and incident response teams meet the internals of a cluster for the first time mid-incident. Certification courses for Kubernetes teach the API, not the adversarial approach to security needed to defend against sophisticated cloud native attacks.

Our courses close that gap by attacking and then defending real systems, tailored to your platform and threat profile, leaving your teams with the capability to defend your platforms after the course ends.

  • Engineers operate clusters they have never seen attacked
  • Security teams review Kubernetes without hands-on depth
  • Zero trust exists as strategy but not as engineering practice
  • Incident response is rehearsed on paper, if at all

Learn by attacking and defending real systems

Slide 1 of 4

We teach Kubernetes and container security: from Linux container fundamentals to advanced cluster attacks and defence, with labs in real clusters rather than slides about them.

Threat modelling: Kubernetes-focused courses for engineers, and a governance, risk and compliance track that teaches security, risk and audit teams to read and challenge a threat model and turn it into evidence.

Zero trust: identity, network and workload trust boundaries taught as engineering practice, with a trust-boundary mapping exercise run on your own architecture.

Capture-the-flag and tabletop exercises: attack scenarios on our Kubesim platform for engineers, and facilitated incident exercises for the leaders and teams who would run the response.

What you get

  • Instructor-led sessions from fundamentals to advanced, sized to your teams

  • Hands-on labs in real clusters, attacking and then defending

  • Course materials your teams keep, tailored to your estate

  • A trust-boundary or threat-modelling exercise run on your own architecture

  • Capture-the-flag and tabletop exercises with facilitated debriefs

  • A capability view of where each cohort stands and what to build next

What good looks like

  • Engineers who think like the attacker

    Hands-on experience of how clusters are compromised, and what stops it.

  • Security teams with hands-on depth

    Reviewers who can read a cluster, a pipeline or a threat model and challenge it.

  • A shared vocabulary across teams

    Platform, security and risk teams describing the same system in the same terms.

  • Capability that compounds

    Courses are sequenced so each training session builds on the last, with materials your teams keep for future reference.

How it works

Courses are scoped to your estate and run with your teams, on site or remote.

  • Pick the teams, the courses and the real systems the labs and exercises will model in the training.

  • Adapt labs, scenarios and materials to your platform and threat profile.

  • Instructor-led sessions with hands-on labs, exercises and facilitated debriefs.

  • Take what you learned and apply it in your estate. If your teams need further training, we build on what they learned for follow-on courses.

Our reference material

Our courseware heritage includes material delivered under contract to SANS, O'Reilly and the Linux Foundation, and our founder co-wrote Hacking Kubernetes, the O'Reilly reference on Kubernetes attack and defence. Insurers, open source foundations and training providers have used our courses to build cloud native security skills in their teams.

Training scope

Our training builds skills and shared practice. It does not prove a system secure or replace testing and assurance of the estate itself. Our work is advisory and delivered with your teams. You retain full operational control.

Speak to an expert

Engage with world-leading AI and cloud security specialists