The DevSecOps stack, taught hands-on.
58 command-first courses across 15 tracks — from your first Linux shell to Kubernetes hardening, supply-chain security, and the cloud. Every command is shown in full, and every course ends in a self-test.
58courses
15learning tracks
900+hands-on lessons
Linux
4 coursesBeginner → Advanced
01Beginner25 lessons · ~7hLinux essentialsPermissions, processes, systemd, journals — everyday fluency.self-test at the end02Intermediate16 lessons · ~5hLinux hardeningHarden a default install — SSH, nftables, SELinux, auditd, CIS.self-test at the end03Advanced17 lessons · ~8hAdvanced Linux securityAttacker tradecraft on the host, then detection and response.self-test at the end04Advanced17 lessons · ~7hAdvanced Linux internals & toolingPerformance, systemd internals, storage, and the kernel.self-test at the end
Scripting
3 coursesBeginner → Advanced
01Beginner14 lessons · ~4hBash for ops, done safelyLearn Bash from your first script to production — the language, then the safety that keeps scripts from causing outages.self-test at the end02Intermediate14 lessons · ~4.5hPython for security automationFrom running commands and parsing logs to shipping small, safe tools your team can run.self-test at the end03Advanced15 lessons · ~9hAdvanced scripting for DevSecOpsBeyond-expert Bash and Python — resilient, secure, production-grade automation.self-test at the end
Docker & containers
3 coursesBeginner → Advanced
01Beginner16 lessons · ~4hDocker for beginnersRun containers and build your own images, step by step.self-test at the end02Intermediate30 lessons · ~11hDocker in depthImages, the engine, storage, networking, and Swarm.self-test at the end03Advanced25 lessons · ~11hAdvanced container securityMinimal images, runtime hardening, and the escapes they stop.self-test at the end
CI/CD pipelines
4 coursesBeginner → Advanced
01Beginner16 lessons · ~4hJenkins foundations, done rightControllers, agents, and pipelines-as-code, done right.self-test at the end02Intermediate17 lessons · ~7hSecure CI/CD with GitLabBuild GitLab pipelines, then harden them with scanning and gates.self-test at the end03Advanced18 lessons · ~9hSoftware supply chain securityMake every artifact verifiable, from commit to cluster.self-test at the end04Advanced15 lessons · ~9hSoftware supply chain in depthDeep supply-chain security — SLSA, in-toto, Sigstore, SBOMs, and admission.self-test at the end
Kubernetes
4 coursesBeginner → Advanced
01Beginner24 lessons · ~5hKubernetes fundamentalsWhat Kubernetes is and how to run your first app.self-test at the end02Intermediate65 lessons · ~16hKubernetes administrationOperating Kubernetes end to end — the admin’s working knowledge.self-test at the end03Advanced24 lessons · ~7hKubernetes security & hardeningSecure a cluster across all six CKS domains.self-test at the end04Advanced15 lessons · ~9hKubernetes attack & defenseThe attacker's playbook and the defenses — ATT&CK, RBAC, admission, control plane.self-test at the end
K8s manifests & templating
2 coursesIntermediate
GitOps for infra
3 coursesAdvanced
01Advanced12 lessons · ~5hAtlantisTerraform plan and apply from pull requests, safely.self-test at the end02Advanced12 lessons · ~6hArgo CDDeclarative GitOps CD for Kubernetes — sync, health, drift.self-test at the end03Advanced12 lessons · ~6hFluxComposable GitOps for Kubernetes, reconciled from Git.self-test at the end
Cloud & DevOps certifications
4 coursesBeginner → Advanced
01Beginner15 lessons · ~10hAWS Solutions Architect AssociateArchitect on AWS — compute, storage, networking, databases, resilience, cost.self-test at the end02Advanced15 lessons · ~10hAWS DevOps Engineer ProfessionalAutomate delivery on AWS — CI/CD, IaC, config, monitoring, resilience.self-test at the end03Beginner15 lessons · ~10hAzure Administrator AssociateAdminister Azure — identity, governance, compute, storage, networking, monitoring.self-test at the end04Advanced15 lessons · ~10hAzure DevOps Engineer ProfessionalDevOps on Azure — pipelines, repos, IaC, continuous delivery, secure delivery.self-test at the end
Provisioning (IaC)
8 coursesBeginner → Advanced
01Beginner23 lessons · ~11hInfrastructure as Code & automationEvery IaC & automation tool in one leveled path.self-test at the end02Beginner15 lessons · ~7hTerraformThe industry-standard IaC tool, from first resource to CI/CD.self-test at the end03Intermediate12 lessons · ~4.5hTerraform security and complianceState and credentials, scanning code and plans, policy as code, drift, and module supply chain.self-test at the end04Advanced12 lessons · ~5hTerragruntA thin wrapper over Terraform for DRY config at scale.self-test at the end05Beginner12 lessons · ~5hOpenTofuThe open-source Terraform fork — same HCL, plus more.self-test at the end06Beginner12 lessons · ~6hPulumiIaC in real languages — TypeScript, Python, Go, and C#.self-test at the end07Beginner12 lessons · ~6hAWS CloudFormationAWS-native IaC — templates, stacks, change sets, drift.self-test at the end08Intermediate12 lessons · ~6hCrossplaneKubernetes-native IaC — providers, resources, compositions.self-test at the end
Configuration management
5 coursesBeginner → Intermediate
01Beginner12 lessons · ~6hAnsibleAgentless automation over SSH — playbooks, roles, Vault.self-test at the end02Intermediate12 lessons · ~5hAnsible for secure automationVaulted vars, scoped escalation, idempotency — auditable.self-test at the end03Intermediate12 lessons · ~6hChefAgent-based configuration management in Ruby.self-test at the end04Intermediate12 lessons · ~6hPuppetDeclarative, model-driven configuration management.self-test at the end05Intermediate12 lessons · ~6hSaltEvent-driven config management and remote execution at scale.self-test at the end
Testing & secrets
3 coursesIntermediate → Advanced
01Advanced12 lessons · ~5hTerratestAutomated infra testing in Go — real deploys and assertions.self-test at the end02Intermediate12 lessons · ~5hInSpecCompliance as code — executable controls tested on real systems.self-test at the end03Intermediate12 lessons · ~4hSOPSEncrypt secrets in Git with SOPS, age, and KMS.self-test at the end
Policy-as-code & scanning
4 coursesIntermediate → Advanced
01Advanced12 lessons · ~6hOPA & RegoPolicy-as-code with OPA — Rego, Conftest, and Gatekeeper.self-test at the end02Advanced13 lessons · ~7hPolicy-as-code at scaleRego and Kyverno beyond hello-world — org-wide guardrails.self-test at the end03Intermediate12 lessons · ~5hCheckov & IaC scanningStatic analysis for IaC — catch misconfig before it ships.self-test at the end04Advanced15 lessons · ~9hCompliance as codeControls as tested policy that enforce and evidence themselves — SOC 2, PCI, CIS.self-test at the end
Secrets management
3 coursesBeginner → Advanced
01Beginner13 lessons · ~6.5hSecrets management foundationsWhy env vars leak and where secrets actually belong.self-test at the end02Intermediate13 lessons · ~7hVault from dev to productionDev server to HA cluster — auth, dynamic secrets, PKI.self-test at the end03Advanced15 lessons · ~8hAdvanced secrets managementBeyond Vault basics — secret-zero, dynamic engines, and audit-proof rotation.self-test at the end
Cloud security
6 coursesIntermediate → Advanced
01Intermediate13 lessons · ~7hAWS security for DevOps engineersIAM that scales, OIDC federation, and org guardrails.self-test at the end02Advanced15 lessons · ~9hAdvanced cloud securityBeyond-expert multi-cloud security — identity, network, keys, detection, and posture.self-test at the end03Advanced15 lessons · ~9hAWS security engineeringDeep AWS security — IAM escalation, detection, KMS, network, and IR.self-test at the end04Advanced15 lessons · ~9hGCP securityDeep Google Cloud security — hierarchy, IAM, VPC-SC, CMEK, SCC, and IR.self-test at the end05Advanced15 lessons · ~9hAzure securityDeep Azure security — Entra ID, RBAC, network, Key Vault, Defender, and IR.self-test at the end06Advanced15 lessons · ~9hZero-trust & workload identityIdentity as the perimeter — SPIFFE/SPIRE, mesh mTLS, authz, and federation.self-test at the end
Runtime & detection
2 coursesAdvanced