Training Services
Security training taught by security engineers
Instructor-led courses on Kubernetes and container security, threat modelling, zero trust and incident exercises, built around hands-on labs in real clusters and taught by engineers who test and build these systems for our regulated clients.
Talk to usPlatform skills grow faster than security skills
Engineers often operate clusters they have never seen attacked. Security teams review Kubernetes without hands-on depth, and incident response teams meet the internals of a cluster for the first time mid-incident. Certification courses for Kubernetes teach the API, not the adversarial approach to security needed to defend against sophisticated cloud native attacks.
Our courses close that gap by attacking and then defending real systems, tailored to your platform and threat profile, leaving your teams with the capability to defend your platforms after the course ends.
- Engineers operate clusters they have never seen attacked
- Security teams review Kubernetes without hands-on depth
- Zero trust exists as strategy but not as engineering practice
- Incident response is rehearsed on paper, if at all

Learn by attacking and defending real systems
Slide 1 of 4
What you get
Instructor-led sessions from fundamentals to advanced, sized to your teams
Hands-on labs in real clusters, attacking and then defending
Course materials your teams keep, tailored to your estate
A trust-boundary or threat-modelling exercise run on your own architecture
Capture-the-flag and tabletop exercises with facilitated debriefs
A capability view of where each cohort stands and what to build next
What good looks like
Engineers who think like the attacker
Hands-on experience of how clusters are compromised, and what stops it.
Security teams with hands-on depth
Reviewers who can read a cluster, a pipeline or a threat model and challenge it.
A shared vocabulary across teams
Platform, security and risk teams describing the same system in the same terms.
Capability that compounds
Courses are sequenced so each training session builds on the last, with materials your teams keep for future reference.
How it works
Courses are scoped to your estate and run with your teams, on site or remote.
Pick the teams, the courses and the real systems the labs and exercises will model in the training.
Adapt labs, scenarios and materials to your platform and threat profile.
Instructor-led sessions with hands-on labs, exercises and facilitated debriefs.
Take what you learned and apply it in your estate. If your teams need further training, we build on what they learned for follow-on courses.
Our reference material
Our courseware heritage includes material delivered under contract to SANS, O'Reilly and the Linux Foundation, and our founder co-wrote Hacking Kubernetes, the O'Reilly reference on Kubernetes attack and defence. Insurers, open source foundations and training providers have used our courses to build cloud native security skills in their teams.
Admiral: Kubernetes Defensive and Offensive Security Training
How Admiral empowered their security teams through in-person threat modelling and penetration testing training

Training scope
Our training builds skills and shared practice. It does not prove a system secure or replace testing and assurance of the estate itself. Our work is advisory and delivered with your teams. You retain full operational control.
Speak to an expert
Engage with world-leading AI and cloud security specialists
