Elevating Cyber Workforce and Professional Development
Empowering individuals and organizations to fight cyber threats with indispensable cybersecurity skills and resources.
Learning with OffSec
Our learning platform and library include the most rigorous content, courses, learning paths and hands-on labs
What you'll find in our Learning Library
7,800+
Hours of written content
1,600+
Videos
5,460
Labs
*Data as of 5/16/2025
Find OffSec training that fits your cybersecurity needs
Offensive Security
Defensive Security
Secure Development
IT Team cybersecurity
Entry-level
Essentials
Intermediate
Advanced
= Course Certification
= Learning Path Badge
What cybersecurity professionals are saying
Duane LaFlotte
CTO, Pulsar Security
Emile Kok
Founder and Managing Director, TSTC Institute
Douglas Costa
Cyber Threat Intelligence & Threat Hunter
Cybersecurity talent management with OffSec
Goal of this stage
Understand skills of candidates to pick the right person for open roles.
How OffSec can help
Build tournaments to assess candidates in real-world scenarios. Renowned certifications can be used to in the application process.
Assess
Goal of this stage
Train teams to get them up to speed for their new roles and build a foundation of shared knowledge across the team.
How OffSec can help
Entry-level courses ground teams in the OffSec mindset. Job role based learning paths & courses support specific roles get up to speed faster.
Onboard
Goal of this stage
Identify skill gaps and train to fill those gaps to protect the organization.
How OffSec can help
Identify skill gaps with learning path assessments & Versus tournaments. Build custom learning paths for team members to get them the training they need to protect the organization.
Upskill
Goal of this stage
Build an engaging employee culture and career development plans that continue to challenge employees.
How OffSec can help
Build team camaraderie with Versus tournaments. Develop custom training for job roles & increase difficulty over time.
Retain
Our unique learning approach
Growth
Practicing creative applications leads to growth and knowledge expansion
Triumph
Create confidence, pattern recognition, wisdom and allow the cycle to repeat for new learnings
Trial
The trial process equips our learner to understand, learn, apply, analyze, synthesize and hypothesize
Failure
Failure is a key part of learning, how to get unstuck is a key skill. Grit is necessary to learn
Adaptation
Creative ideas and approaches will emerge through trial and failure
What's new at OffSec
Research & Tutorials
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences.
May 15, 2025
3 min read
Research & Tutorials
CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise.
May 8, 2025
2 min read
Research & Tutorials
CVE-2025-29927: Next.js Middleware Authorization Bypass
In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
May 1, 2025
3 min read
