FREE
Foundations
Recognize a phishing attempt
Learn a repeatable way to assess a suspicious message without opening its links or trusting its urgency.
FREE FOUNDATIONS
One useful lesson
at a time.
Forty concise lessons, including 20 micro-lessons. Build understanding before moving into deeper professional practice.
AVAILABLE NOW
Everyday security
FREE
Identity
Long, unique passwords and safe recovery
Build account resilience with unique credentials, a password manager and a recovery plan.
FREE
Identity
Make multi-factor authentication useful
Understand what MFA protects, where it can fail, and how to avoid approving an attacker’s sign-in.
FREE
Incident response
The first actions after a suspected incident
Respond calmly, preserve useful evidence and get the right people involved.
FREE
Foundations
Secure your everyday devices
Reduce common endpoint risks through updates, sensible installation choices and protected storage.
FREE
Foundations
Physical security is information security
Protect workspaces, documents and devices without making everyday work unnecessarily difficult.
FREE
Foundations
Recognize social engineering and insider risk
Understand how attackers exploit normal helpful behaviour and how a consistent process reduces that pressure.
FREE
Privacy
Secure your digital life
Understand what you share, who can access it and what happens when a device or account is lost.
FREE
Foundations
Seven security mistakes small teams can avoid
Use a short review to find preventable gaps before adding more security products.
FREE
Foundations
Work securely from anywhere
Set up remote work around protected devices, approved services and clear reporting.
AVAILABLE NOW
Professional module bases
FREE
Incident response
Ransomware defense and response
Connect prevention, containment and recovery into a practical ransomware response sequence.
FREE
Cloud security
Cloud security essentials
Secure collaboration services by controlling identity, application permissions, sharing and administrative activity.
FREE
Cloud security
Investigate phishing beyond the message
Move from spotting suspicious wording to understanding account compromise, OAuth abuse and payment-process risk.
FREE
Endpoint security
Mobile security at work
Define appropriate controls for personally owned and organisation-owned devices without assuming they have identical needs.
FREE
Identity
Passkeys, privileges and access control
Reduce account takeover and excessive privilege with strong authentication and deliberate access design.
FREE
Incident response
Backups that support recovery
Move from “we have backups” to evidence that important services can be restored within an acceptable window.
FREE
Network security
Network segmentation and Zero Trust
Limit unnecessary communication and make access decisions explicit across identities, devices and services.
AVAILABLE NOW
Security+ introduction
FREE
Security+ preparation
Security foundations: CIA, controls and risk
Build the vocabulary needed to reason about security scenarios without reducing them to memorised acronyms.
FREE
Security+ preparation
Threats, vulnerabilities and attack paths
Connect threats to weaknesses and consequences, then choose a proportionate response.
FREE
Security+ preparation
Architecture, segmentation and resilience
Understand how architecture shapes failure, trust and recovery before selecting individual products.
AVAILABLE NOW
Twenty small steps
FREE
Identity
What is MFA?
MFA combines independent kinds of proof. It reduces many password-only risks, but users still need to recognise unexpected prompts and protect recovery access.
FREE
Foundations
Spotting phishing emails
Focus on the action requested, not only spelling or visual design. A familiar sender can be compromised, and a professional message can still ask you to bypass a sensible process.
FREE
Identity
Creating strong passwords
Use a long, unique credential for each service. A password manager can generate unpredictable passwords so one compromised service does not expose a reused credential elsewhere.
FREE
Incident response
What is ransomware?
Ransomware incidents can involve encryption, data theft and operational disruption. Prepared response contacts and tested recovery reduce confusion when a warning appears.
FREE
Foundations
What is social engineering?
Social engineering uses pressure, authority or helpfulness to influence a decision. A consistent verification process makes it easier to refuse an unsafe exception without personal conflict.
FREE
Privacy
How public information can be misused
Public profiles can reveal roles, suppliers, travel and working patterns. This can make deceptive messages more convincing. Review what your posts disclose without assuming that obscurity alone provides security.
FREE
Endpoint security
Safe use of USB drives
Unknown removable media may contain unwanted software or present other device risks. Use approved transfer methods and let the responsible team handle found media.
FREE
Foundations
Recognizing tech-support scams
An unexpected call or browser message may pretend to be support. Do not install remote-access software, share codes or pay a fee because an unsolicited message demands it.
FREE
Network security
Securing your home Wi-Fi
Use supported router software, a unique administrator credential and an appropriate wireless security configuration. Keep guest and work access separated where supported and review connected devices.
FREE
Incident response
What to do after a data breach
A breach notice needs context: what information was involved, which account is affected and what protective actions are recommended. Use the service’s known address to verify the notice.
FREE
Identity
Are password managers safe?
A password manager helps maintain unique credentials, but its own access and recovery need protection. Understand vault locking, MFA, device security and the risk of unprotected exports.
FREE
Career awareness
Spotting fake job offers
Check the employer, recruitment channel and requested action. Requests for upfront payment, sensitive documents too early or installing unusual software deserve independent verification.
FREE
Foundations
QR codes can hide destinations
A QR code is another way to carry a link. A sticker can replace a legitimate code. Check the destination and avoid entering credentials or payment details into an unexpected page.
FREE
Privacy
Device tracking and location privacy
Review which applications can access location and when. Public posts, shared maps and account access can also disclose whereabouts. Use permissions that match a real need.
FREE
Identity
Avoiding SIM-swap account risk
A phone number can be an account-recovery channel. Protect mobile-provider account access and prefer stronger supported authentication for important services. Unexpected loss of service deserves prompt investigation.
FREE
Identity
Two-factor authentication in practice
Turning on 2FA is the beginning, not the end. Know which method is enrolled, how prompts appear and how to recover after losing the device. Keep recovery information secure.
FREE
Endpoint security
Recognizing risky browser extensions
Extensions can have broad access to web pages. Review the publisher, purpose and requested permissions. Remove extensions you no longer need and use organisational approvals at work.
FREE
Foundations
Secure online payments
Verify the merchant and the destination before entering payment information. Use known services and review unusual urgency, payment methods or changed bank details. HTTPS protects a connection, not the honesty of the seller.
FREE
Endpoint security
Avoiding fake-antivirus scams
A browser page claiming to have scanned your whole device may be misleading. Do not install software or pay because a pop-up pressures you. Use your known security application or support team.
FREE
Network security
Understanding a man-in-the-middle attack
An intermediary may try to observe or alter communication. Correctly validated encrypted connections help protect against some forms of interception. Do not ignore certificate warnings or assume a familiar network name proves trust.