OPEN LEARNING · LEARN AT YOUR OWN PACE

A clear path into
cybersecurity.

Start with the fundamentals, follow the areas that interest you, and connect each concept to responsible defensive practice. Every path here is free to explore.

Open access Ethics first Learn by doing
FOUNDATIONS → CONTEXT → CONFIDENCELearn what matters.
Use it thoughtfully.
THE ROADMAP

Follow your
own route.

There’s no single right way to learn security. These paths give you a useful map, not a checklist to rush through.

01Understand the systemsNetworks · Linux · identity
02Learn the signalsLogs · threats · context
03Practice responsiblyPermission · process · care
SIX AREAS TO EXPLORE

Choose a path.
Take your time.

01
START HERE

Network security foundations

FOUNDATIONAL

Understand the plumbing before you defend the building. Learn how data moves, what each network layer does, and how to think about boundaries and visibility.

  • Map a connection from source to destination
  • Get familiar with DNS, TCP/IP, and common services
  • Understand segmentation, NAT, and trust zones
  • Read basic firewall and network logs
A helpful first read: Five network basics every security learner needs.Explore related notes
02
INFRASTRUCTURE

Firewalls & FortiGate

FOUNDATIONAL → INTERMEDIATE

Build a mental model of perimeter and internal controls. Explore policy order, least privilege, routing, VPNs, change discipline, and how to troubleshoot with evidence.

  • Translate a security need into a policy
  • Trace a packet through interfaces and routes
  • Review VPN concepts and secure access
  • Use logs to investigate and validate changes
Focus: document the intended flow before changing a production rule.Explore related notes
03
RESPONSIBLE PRACTICE

Ethical security testing

FOUNDATIONAL → INTERMEDIATE

Learn security assessment as a permission-based discipline: scoped, careful, and always aimed at reducing risk—not causing harm.

  • Understand authorization, scope, and rules of engagement
  • Create an isolated learning environment
  • Observe systems without exceeding your permission
  • Write clear, actionable remediation notes
A safer way to build your first security lab explains the ground rules.Explore related notes
04
DEFENSIVE OPERATIONS

SOC & incident response

FOUNDATIONAL → INTERMEDIATE

Develop a repeatable way to triage alerts, build timelines, preserve evidence, and communicate a decision clearly under pressure.

  • Separate an alert from a confirmed incident
  • Correlate endpoint, identity, and network context
  • Document a short, evidence-based timeline
  • Escalate with clear facts and next steps
A calm first pass beats a fast guess. Start with the first 15 minutes of a security alert.Explore related notes
05
MODERN INFRASTRUCTURE

Cloud security & identity

FOUNDATIONAL → ADVANCED

Explore shared responsibility, identity-first controls, least privilege, secure configuration, logging, and recovery planning in cloud environments.

  • Learn the shared responsibility model
  • Review identities, roles, and least privilege
  • Look for exposed secrets and configuration drift
  • Plan useful logging, backups, and recovery
Make identity and recoverability part of every cloud security conversation.Explore related notes
06
EVERYDAY DEFENSE

Cyber hygiene & resilience

ALL LEVELS

Small, repeatable practices make systems and teams more resilient. Strengthen account security, patch habits, backups, and the way security decisions are shared.

  • Use unique credentials and strong multifactor authentication
  • Patch deliberately and track what remains exposed
  • Keep tested, isolated backups of critical data
  • Make it easy to report a concern early
Good security is a habit shared by people, process, and technology.Explore related notes
THE SEC CYBER PRINCIPLE

Curiosity is powerful.
Use it with care.

Only test systems you own or have explicit permission to assess. Practice in isolated labs, follow your organization’s policies, and treat security as a way to protect people and the work they depend on.

Read the lab safety note