Training
Pick a team. Pick a level.
Structured paths from Beginner to Advanced, using free, reputable resources plus CyberClaw guides. New lessons are added as each monthly issue goes out.
Blue Team
Blue lane →Beginner
- How patching and vulnerability scoring (CVSS, KEV) work
- Windows and Linux hardening basics
- MFA, passwords and least privilege
Intermediate
- Active Directory hardening
- Email and endpoint protection tuning
- Backup and recovery testing
Advanced
- Zero-trust architecture
- Incident response leadership
- Measuring defensive coverage
Red Team
Red lane →Beginner
- What authorized testing is (and isn't)
- Networking and Linux for testers
- Recon basics
Intermediate
- Web and API testing (OWASP Top 10)
- Active Directory attack paths
- Rules of engagement and reporting
Advanced
- Adversary emulation with ATT&CK
- Cloud and identity attacks
- Testing AI apps and agents
Purple Team
Purple lane →Beginner
- What a SIEM does
- Reading Windows and Linux logs
- Set up Wazuh in a home lab
Advanced
- Run attack simulations and confirm alerts fire
- Coverage mapping to ATT&CK
- Building your own detection pipeline
Compliance
Compliance lane →Beginner
- Laws vs. frameworks vs. certifications
- Which rules apply to your business
- What auditors ask for
Intermediate
- Control mapping
- Evidence collection that doesn't hurt
- Incident-reporting clocks
AI Security
AI lane →Beginner
- How LLMs, agents and MCP work
- Safe use of AI at work
- What prompt injection is
Intermediate
- Securing AI agents and tool access
- AI supply chain: plugins, models, MCP servers
- Logging AI activity
Prefer guided help?
Our Learn library covers pen-test preparation and a compliance directory by region and industry.
Open the Learn libraryFree · once a month
Get the monthly CyberClaw issue
One email a month with the curated picks for Blue, Red, Purple, Compliance and AI, each with a "do this now" step.