Elevating Cyber Workforce and Professional Development
Empowering individuals and organizations to fight cyber threats with indispensable cybersecurity skills and resources.
Learning with OffSec
Our learning platform and library include the most rigorous content, courses, learning paths and hands-on labs
What you'll find in our Learning Library
7,800+
Hours of written content
1,600+
Videos
5,460
Labs
*Data as of 7/25/2025
What cybersecurity professionals are saying

Duane LaFlotte
CTO, Pulsar Security

Emile Kok
Founder and Managing Director, TSTC Institute

Douglas Costa
Cyber Threat Intelligence & Threat Hunter
Cybersecurity talent management with OffSec
Goal of this stage
Understand skills of candidates to pick the right person for open roles.
How OffSec can help
Build tournaments to assess candidates in real-world scenarios. Renowned certifications can be used to in the application process.
Assess
Goal of this stage
Train teams to get them up to speed for their new roles and build a foundation of shared knowledge across the team.
How OffSec can help
Entry-level courses ground teams in the OffSec mindset. Job role based learning paths & courses support specific roles get up to speed faster.
Onboard
Goal of this stage
Identify skill gaps and train to fill those gaps to protect the organization.
How OffSec can help
Identify skill gaps with learning path assessments & Versus tournaments. Build custom learning paths for team members to get them the training they need to protect the organization.
Upskill
Goal of this stage
Build an engaging employee culture and career development plans that continue to challenge employees.
How OffSec can help
Build team camaraderie with Versus tournaments. Develop custom training for job roles & increase difficulty over time.
Retain
Our unique learning approach
Growth
Practicing creative applications leads to growth and knowledge expansion
Triumph
Create confidence, pattern recognition, wisdom and allow the cycle to repeat for new learnings
Trial
The trial process equips our learner to understand, learn, apply, analyze, synthesize and hypothesize
Failure
Failure is a key part of learning, how to get unstuck is a key skill. Grit is necessary to learn
Adaptation
Creative ideas and approaches will emerge through trial and failure
What's new at OffSec

Research & Tutorials
CVE-2025-27136 – LocalS3 CreateBucketConfiguration Endpoint XXE Injection
Discover how CVE-2025-27136, a critical XXE vulnerability in LocalS3’s CreateBucketConfiguration endpoint, can be exploited to access sensitive files. Learn how the flaw works and how to mitigate it.
Jul 24, 2025
2 min read

Enterprise Security
How OffSec Certifications Help You Hire With Confidence
Hire cyber talent with confidence: OffSec certifications prove candidates can perform under pressure, not just talk the talk.
Jul 21, 2025
5 min read

Research & Tutorials
CVE-2024-12029 – InvokeAI Deserialization of Untrusted Data vulnerability
CVE-2024-12029: A critical deserialization vulnerability in InvokeAI’s /api/v2/models/install endpoint allows remote code execution via malicious model files. Exploit risk for AI art servers.
Jul 17, 2025
3 min read