Cybersecurity Learning Platforms

Cybrary is a cybersecurity and IT workforce development platform. It provides a catalog of online courses and experiential tools that provide IT and cybersecurity learning opportunities to anyone, anywhere, anytime. (https://www.cybrary.it/)

HTB Academy is cybersecurity learning where users can learn step-by-step the cybersecurity theory and get ready for the training playground of HTB. HTB Academy's goal is to provide a highly interactive and streamlined learning process to allow users to have fun while learning. There are hands-on exercises that serve as "checkpoints", and skills assessments to test students' understanding of the Module content. (https://academy.hackthebox.com/)

Tenable University provides a guided tour of technical concepts required to implement and operate Tenable products through on-demand demonstrations and short-form video lectures. The courses are available at no charge. Tenable University offers foundational courses to more advanced courses on Tenable products. (https://university.tenable.com/)

INE is a IT training platform that includes a suite of Networking, Cyber Security, Data Science, and Cloud learning content that offers the opportunity to perfect your skills or practice some new ones. INE offers both free and paid courses. (https://ine.com/)

Qualys Learning provides foundational to advanced concept training courses required to implement and operate Qualys products. Qualys offers on-demand demonstrations, short-form video lectures, and downloadable training material. The courses are available at no charge. (https://www.qualys.com/training/)

SANS Cyber Aces is a free course that teaches core concepts needed to assess and protect information security systems. (https://www.sans.org/cyberaces/)

TCM Security is a veteran-owned cybersecurity company that provides top of the line training content on penetration testing, malware analysis, and windows forensics. Although the courses are not free, the pricing seems reasonable for the quality of the content you receive. (https://academy.tcm-sec.com/)

Defend the Web is an interactive security platform where users can learn and challenge their skills. There are over 60+ hacking levels to complete. Learn from a series of articles covering all aspects of security. Articles will guide users through the essentials to get started. Users will progress to more complex topics that will help build up their knowledge. (https://defendtheweb.net/)

The Palo Alto Cybersecurity Academy offers a comprehensive set of courses covering cybersecurity fundamentals, cloud and network security, and operating a security operations center. All courses are aligned with the US National Initiative for Cybersecurity Education (NICE) framework for cybersecurity work roles. (https://paloaltonetworksacademy.net/)

HackerSploit provided free Infosec and cybersecurity training. Their goal is to make cybersecurity training more effective and accessible to students and professionals. Hackersploit provides essential training on how to attack and defend systems with virtual labs and real-world scenarios on specialties such as, Penetration Testing & Red Team Operations, Web application penetration testing, and cybersecurity awareness training. (https://hackersploit.org/)

The Web Security Academy is a free online training center for web application security. It includes content from PortSwigger's in-house research team, experienced academics, and our Chief Swig Dafydd Stuttard - author of The Web Application Hacker's Handbook. (https://portswigger.net/web-security)

The Rapid7 Academy provides educational materials for cybersecurity professionals using Rapid7 solutions to run their Security Operations Center (SOC). They offer foundational training courses focused on their products suchs as Metasploit, Insight, and Nexpose. (https://academy.rapid7.com/)

Hacksplaining is a web site that encourages hacking in order to learn and protect against it. Everyone in the web development business knows achieving a secure web site, to the degree that is possible, is difficult.
(https://www.hacksplaining.com/)

IBM Training provides a free Cybersecurity Threat Intelligence course. Providing training on the different threat intelligence sources, understanding data protection risks, and exploring mobile endpoint protection. The course provides insight on scanning technologies, application security vulnerabilities and threat intelligence platforms.
(https://www.ibm.com/training/badge/cybersecurity-threat-intelligence)

Security Blue Team provides cybersecurity training revolving around a variety of blue team specialties such as, threat intelligence, digital forensics, incident response, threat hunting, malware analysis, and SIEM. They provide free courses that created for a variety of levels, from entry-level to senior-level. (https://securityblue.team/courses/)

Evovle Academy provides foundational cybersecurity training revolving around introductions to cybersecurity, networking, linux, home lab setu. They provide this free course to provide foundational knowledge to entry-level personnel. (https://www.academy.evolvesecurity.com/cybersecurity-fundamentals)

Hacker Highschool (HHS) was created for teaching teens problem solving, resourcefulness, and empathy through hacking. The Institute for Security and Open Methodologies (ISECOM) created this project to use hands-on, challenging exercises for teens to learn cybersafety. The material provides great foundational knowledge needed for entering the cybersecurity field and it is free. (https://hackerhighschool.org/lessons.html)

Picus Purple Academy provides a variety of free self-paced micro-courses that cover different topics such as, ransomware attacks, security operations center (SOC), and MITRE ATT&CK Framework. (https://academy.picussecurity.com/courses)

LetsDefend provides practical training for anyone interested in becoming a SOC analyst. LetsDefend provides hands-on experience by investigating real cyber attacks inside a simulated SOC. (https://letsdefend.io/)

DFIRDiva is a site that provides free or affordable access to DFIR and Cybersecurity training. The site was created to help people find quality free and low cost training across the various platforms. The main focus is on Digital Forensics & Incident Response. (https://training.dfirdiva.com/free-affordable-training-categories)

CSI Linux is a group of developers that created a Linux distribution for digital forensics. The site also provides the a great report at least monthly called "The OSINT Cyber War" The site itself contains severl cybersecurity courses, some are free of charge.  (https://training.csilinux.com/)

Splunk provides a library of free, self-paced courses that cover the fundamentals of Splunk, including Splunk Enterprise, Splunk Cloud, security, and observability.  (https://www.splunk.com/en_us/training/free-courses/overview.html)

OffSec Metasploitable Unleashed (MSFU) is a free online course offered by Offensive Security that teaches you how to use the Metasploit Framework for ethical hacking.  (https://www.offsec.com/metasploit-unleashed/introduction/)

PentesterLab Bootcamp is a free resource designed to introduce you to the fundamentals of web application security and penetration testing. It's a good option for beginners with little to no prior experience.  (https://pentesterlab.com/bootcamp)