Zero experience required. Train with industry mentors on real attack scenarios, master the tools global SOC teams use, and graduate with a portfolio that gets you hired — locally or remotely worldwide.
৳5,990
Batch 1Regular ৳9,490 Save ৳3,500
Batch starts: To be announced
In this course you get:
Our graduates work at leading companies
bKash
Grameenphone
Robi Axiata
BBBRAC Bank
Pathao
BLBanglalink
CBCity Bank
AXAugmedix
BSBrain Station 23
KZKaz Software
ENEnosis
SESelise
bKash
Grameenphone
Robi Axiata
BBBRAC Bank
Pathao
BLBanglalink
CBCity Bank
AXAugmedix
BSBrain Station 23
KZKaz Software
ENEnosis
SESelise
0+
Students Trained
0%
Course Success Rate
0+
Career Placements
0
Countries with Alumni
An international-standard curriculum mapped to CompTIA Security+, CEH, and real SOC analyst job descriptions — with AI woven into every unit, not boxed into one.
Kickoff Sprint — Python & AI Automation Primer (self-paced)
A self-paced video sprint for early enrollees, released before the live batch begins. Covers Python programming basics and shows how a handful of short scripts, combined with AI coding assistants, can take the grunt work out of routine security tasks — a running start before Day 1.
Unit 1 — Security Mindset, Cyber Law & the AI Toolbelt
Session A: Building a Security Mindset
Focus: what cybersecurity actually protects against, the CIA triad in plain terms, the asset-threat-vulnerability-risk vocabulary every analyst uses, layered (defense-in-depth) thinking, and standing up your personal lab — Kali Linux, Docker, Burp Suite, Postman — plus registering on HackTheBox, TryHackMe and PortSwigger Labs
Session B: Law, Ethics & Working with AI Tools
Focus: Bangladesh's Cyber Security Act and how digital-crime clauses apply in practice, who is liable when AI generates harmful content, writing a Rules of Engagement and scope document, the ethical lines around offensive AI tooling, a plain-language tour of LLMs and AI categories (ML/DL/GenAI), and where AI already quietly shows up in a hacker's daily workflow
Unit 2 — Linux Command Line for Security Professionals
Session A: Finding Your Way Around Kali
Focus: what Linux is and why pentesters live in it, the Kali directory layout, everyday file and folder operations, the permission model, sensitive files worth knowing (/etc/passwd, /etc/shadow), and managing packages and environments
Session B: Administration & Your First Scripts
Focus: creating and managing users/groups, networking commands you'll use constantly (ifconfig, netstat, ping, traceroute, ss), and writing your first Bash script to automate a repetitive task
Unit 3 — Network Architecture & Addressing Bootcamp
Session A: How Data Actually Moves
Focus: LAN/MAN/WAN/PAN and common topologies, OSI vs TCP/IP side by side, PDUs, protocols and ports, how a DNS lookup resolves step by step, and using AI to map a network's topology and visualize its attack surface
Session B: Addressing Schemes & the Hardware Behind Them
Focus: IP addressing, subnetting and CIDR math, public vs private IP, IPv4 and ARP, the devices that make up a network (switches, routers, firewalls, L2/L3 gear, access points, bandwidth managers), and an introduction to AI-flagged network anomalies
Unit 4 — Active Scanning with Nmap & Traffic Analysis
Session A: Mastering Nmap
Focus: SYN, TCP, UDP and stealth scan types, service/version detection, writing and using NSE scripts, host discovery, OS fingerprinting and port enumeration — cross-checked with AI-assisted result interpretation
Session B: Reading the Wire
Focus: capturing live traffic in Wireshark, dissecting saved capture files, and working from the command line with TShark and TCPDump
Unit 5 — Exploit Tooling & Applied Cryptography
Session A: Your First Exploit Toolkit
Focus: setting up Burp Suite (Proxy, Repeater, Intruder), intercepting and rewriting HTTP requests on the fly, an orientation to the Metasploit Framework, and standing up a Metasploitable box as your practice target for the modules ahead
Session B: Cryptography a Pentester Actually Needs
Focus: symmetric encryption (AES, DES) vs asymmetric (RSA), how hashing and salting protect — or fail to protect — stored passwords, a first look at post-quantum cryptography, and watching SSL/TLS negotiate a connection live in Wireshark
Unit 6 — OSINT & Digital Footprinting
Session A: Building an OSINT Toolkit
Focus: OSINT frameworks and a repeatable methodology, tracing people/images/emails/phone numbers, Google dorking, mining social media, and Whois lookups
Session B: Going Deeper
Focus: dark web and deep web orientation, geolocating and fingerprinting a website, DNS reconnaissance tools (nslookup, dig, zone transfers), spotting deepfakes with AI during an OSINT investigation, and chaining AI agents into an automated recon pipeline
Unit 7 — Enumeration & Content Discovery
Session A: Enumerating Live Services
Focus: scanning web servers for known issues with Nikto, pulling SMB/NetBIOS details with enum4linux, letting AI rank findings by priority, and reading output from AI-assisted analysis tools such as Burp AI and Penligent
Session B: Uncovering Hidden Content
Focus: fuzzing directories and content with Gobuster (with ffuf as a faster alternative), fingerprinting the tech stack with Wappalyzer, and generating sharper, context-aware wordlists with AI
Unit 8 — Vulnerability Assessment & the Human Layer
Session A: Running a Proper Vulnerability Assessment
Focus: VA concepts and how findings get classified, assessment types and a repeatable methodology, working with VA tooling (Nessus, Acunetix, Burp Suite, Nmap Automator, Nikto), writing a report a client can actually act on, and scoring risk with CVE/CVSS
Session B: Exploiting the Human Layer
Focus: what social engineering covers — phishing, spear-phishing, vishing, pretexting — running campaigns with the Social-Engineer Toolkit (SET), how AI-generated phishing and deepfakes are changing the game, and building awareness and defenses against it
Unit 9 — Web Mechanics, OWASP Top 10 & LLM Risk
Session A: How the Web Actually Works
Focus: the technologies behind a modern web app, HTTP methods/headers/cookies and session handling, cookie attributes and session flow, and poking at requests/responses live with browser DevTools
Session B: OWASP Top 10 — Classic and AI-Era
Focus: a working walkthrough of every OWASP Top 10 category, the OWASP Top 10 for LLM Applications (prompt injection, insecure output handling, training data poisoning), and AI-assisted ways to detect each category
Unit 10 — Injection Point Exploitation — Files & Uploads
Session A: From File Inclusion to Code Execution
Focus: spotting LFI and crafting directory traversal payloads, escalating LFI to RCE via log poisoning and PHP wrappers, Remote File Inclusion (RFI) in practice, and using AI to generate traversal payloads and dodge filters
Session B: Weaponizing File Uploads
Focus: recognizing an unsafe upload handler, getting past extension and MIME-type checks, and turning a file upload into full Remote Code Execution
Unit 11 — SQL Injection, Start to Finish
Session A: SQLi from the Ground Up
Focus: enough SQL to be dangerous (queries, tables, common statements), the three SQLi families — in-band, error-based, blind — hunting for injectable parameters, and a live walkthrough of pulling real data out of a vulnerable app
Session B: Advanced SQLi & Getting Past a WAF
Focus: UNION-based and stacked queries, blind extraction with Boolean and time-based techniques, running sqlmap with AI-augmented tuning alongside manual verification, and common WAF-evasion tricks
Unit 12 — Client-Side Exploits — XSS & CSRF
Session A: Cross-Site Scripting End to End
Focus: enough JavaScript and DOM knowledge to exploit it, the three XSS flavors (reflected, stored, DOM-based), finding and weaponizing an XSS with a basic payload, and a hands-on lab hijacking a session via stolen cookies
Session B: CSRF & Chaining Client-Side Bugs
Focus: how Cross-Site Request Forgery works, defeating CSRF tokens and abusing same-site cookie rules, the basics of getting around a Content Security Policy, and a hands-on CSRF exploit-and-patch lab
Unit 13 — Server-Side Abuse — SSRF, XXE, DoS & Brute Force
Session A: SSRF Chained into XXE
Focus: the different classes of SSRF and what internal services they expose, chaining an SSRF into XXE or full RCE, and detecting/exploiting XML External Entity injection
Session B: Denial of Service & Credential Brute Forcing
Focus: DoS/DDoS concepts and the tools behind them, brute-forcing logins with Hydra, Medusa and Burp Intruder, and building and managing wordlists (Crunch, CeWL, rockyou)
Unit 14 — API Security End to End
Session A: How Modern APIs Are Built — and Broken
Focus: REST vs GraphQL architecture, authentication schemes (API keys, JWT, OAuth 2.0), how rate limiting and versioning change your testing approach, and mapping out an API's full attack surface
Session B: Exploiting API Vulnerabilities
Focus: BOLA and IDOR exploitation, breaking authentication and manipulating tokens, spotting excessive data exposure, and automating API tests with Postman and Burp AI
Unit 15 — Mobile & Cloud Attack Surfaces
Session A: Breaking Mobile Apps
Focus: the OWASP Mobile Top 10, Android architecture and how an APK is put together, reading AndroidManifest.xml and its permissions, mapping the mobile attack surface (storage, APIs, auth), and static analysis with MobSF
Session B: Cloud Security Fundamentals
Focus: a working orientation to AWS/Azure/GCP, IaaS vs PaaS vs SaaS, the shared responsibility model, core services worth knowing (IAM, S3, EC2, VPC, Security Groups), and the misconfigurations attackers look for first
Unit 16 — Active Directory Attacks I — Enumeration & Credentials
Session A: Mapping an AD Environment
Focus: why Active Directory matters so much in real-world pentests, its building blocks (Domain, Forest, OU, GPO, Trusts), enumerating it with BloodHound plus AI-driven attack-path analysis, and tools that automate AD recon
Session B: Going After Credentials
Focus: password spraying and brute-forcing inside AD, AS-REP Roasting and Kerberoasting, Pass-the-Hash and Pass-the-Ticket attacks, and letting AI automate parts of a credential-attack chain
Unit 17 — Active Directory Attacks II — Lateral Movement & Escalation
Session A: Moving Sideways Through a Domain
Focus: Golden Ticket and Silver Ticket attacks, DCSync and dumping credentials, lateral movement via WMI, PSExec and Evil-WinRM, and coordinating an AI agent across multiple compromised hosts
Session B: Escalating and Staying In
Focus: abusing ACLs (WriteDACL, GenericAll, ForceChangePassword), domain-level privilege escalation paths, using BloodHound AI to surface attack paths automatically, and persistence tricks (backdoors, scheduled tasks, AD object abuse)
Unit 18 — Privilege Escalation — Windows & Linux
Session A: Escalating on Windows
Focus: token impersonation and SeImpersonatePrivilege abuse, unquoted service paths, weak permissions and DLL hijacking, AlwaysInstallElevated and registry abuse, and reading a WinPEAS report with AI assistance
Session B: Escalating on Linux
Focus: SUID/SGID abuse and sudo misconfigurations, cron job exploitation and writable /etc/passwd tricks, kernel exploits and capability abuse, and an AI-assisted read of LinPEAS output
Unit 19 — Post-Exploitation, Pivoting & Tunneling
Session A: Staying In and Staying Quiet
Focus: AI-assisted persistence mechanisms, harvesting credentials with Mimikatz and LaZagne, evading detection through log tampering and EDR bypass, and the basic concepts behind payload obfuscation
Session B: Reaching Deeper into the Network
Focus: pivoting through Metasploit and Chisel, SSH tunneling and port forwarding, coordinating attacks across multiple hosts with AI assistance, and using a compromised host as a foothold into internal networks
Unit 20 — Blue Team Operations — SOC, Threat Intel & GRC
Session A: Running a SOC with Wazuh
Focus: SOC fundamentals, analyst tiers and responsibilities, core SIEM concepts, standing up a SOC with Wazuh, triaging alerts with AI assistance, and applying MITRE frameworks day to day
Session B: Governance, Risk & Compliance
Focus: the core pillars of GRC, the frameworks that matter (ISO 27001, NIST CSF, SOC 2, PCI DSS, SWIFT, Bangladesh Bank's ICT Security Guideline 4.0), and the role BD CERT plays nationally
Unit 21 — Malware Analysis, Threat Hunting & Digital Forensics
Session A: Understanding Malware & Hunting Threats
Focus: common malware types and behaviors, static vs dynamic analysis, sandboxing with Cuckoo, VirusTotal AI and ANY.RUN, hypothesis-driven threat hunting using MITRE ATT&CK, and AI-assisted IOC extraction
Session B: Digital Forensics Fundamentals
Focus: disk analysis with Autopsy, memory analysis with Volatility, pulling evidence from Windows Event Logs, email and network traffic, building a timeline, and preserving a proper chain of custody
Unit 22 — Incident Response & Capstone Red Team Simulation
Session A: Responding to a Live Incident
Focus: the IR lifecycle (prepare, detect, contain, eradicate, recover), ML-based anomaly detection, LLM-assisted IOC extraction and threat attribution, and a walkthrough of a real-world breach case
Session B: Capstone — Full AI-Augmented Red Team Simulation
Focus: teams run an end-to-end engagement against a purpose-built vulnerable environment — recon through post-exploitation — using the AI-assisted workflow built across the course, then deliver a professional pentest report for review and feedback
Unit 23 — Bug Bounty, Freelancing & Certification Roadmap
Session A: Bug Bounty & AI-Assisted Reporting
Focus: strategy and platform rules on HackerOne, Bugcrowd and Intigriti, writing sharper bug reports with AI assistance, an AI-augmented hunting methodology, and using AI to spot high-value targets inside a program
Session B: Building a Career in the AI Era
Focus: freelancing on Upwork, LinkedIn and Fiverr from scratch, building a portfolio out of labs, CTFs and write-ups with AI assistance, career paths worth targeting (AI Security Researcher, AI Red Teamer, SOC AI Analyst, Bug Hunter), a certification roadmap (eJPT → OSCP → CRTE → CAIPT, plus CEH AI and CPENT AI), and a closing Q&A
Want the complete week-by-week syllabus as a PDF?
Step 01 of 03
We review your CV and portfolio and share practical feedback to help you present your skills more effectively.
Step 02 of 03
Practice with individual technical and HR mock interviews to prepare for real hiring conversations.
Step 03 of 03
Receive referral support for relevant opportunities based on your skills and suitability.
Swipe or tap a step to explore
Bonus Internship Opportunities
Relevant internship opportunities may also be available through our sister concerns.
Every element is engineered for one outcome — turning complete beginners into hired cybersecurity professionals.
Learn to defend with AI — threat detection, automation, and AI-assisted analysis built into every module.
Learn directly from working security professionals with certifications like CISSP, OSCP, and CEH.
47 live sessions with real-time Q&A, hands-on labs, and instant feedback — never just recordings.
Build 8 portfolio-grade projects on real attack scenarios, from SIEM dashboards to pentest reports.
Every class recording, lab file, and resource stays yours forever — including future updates.
Dedicated career team guiding you from first lab to first offer letter — local and international.
Graduate with a recruiter-ready portfolio and GitHub profile that proves your skills.
Mock interviews, technical screens, and salary negotiation practice with industry insiders.
Direct referrals to 50+ hiring partners in Bangladesh and remote-first global companies.
Curriculum mapped to CompTIA Security+, CEH, and SOC analyst job frameworks worldwide.
A proven, structured path — you always know exactly where you are and what comes next.
Month 1
Beginner
Month 2
Intermediate
Month 3
Advanced
Month 4
Job Ready
A weekly live session: how the program works, what the career path looks like, and which track fits your experience. Ask anything — no cost, no obligation.
What you'll get on the call
Next session starts in
00
Days
00
Hours
00
Minutes
00
Seconds
Sessions repeat weekly — register once and we'll send you the link for the next available session.
We'll only message you about this webinar & the program.
Employers don't hire certificates — they hire proof. Every project simulates a real-world security engagement.
Train and deploy an anomaly-detection model that flags suspicious network behavior in real time.
Build a full Splunk dashboard that ingests live logs and surfaces prioritized security alerts.
Design a mini Security Operations Center with alerting, triage workflow, and escalation runbooks.
Audit and lock down a deliberately misconfigured AWS environment to production standard.
Respond to a simulated ransomware breach — contain, eradicate, recover, and report.
Execute a scoped pentest on a vulnerable web application and deliver a professional report.
Script an AI-powered assistant that auto-triages phishing emails and enriches alerts.
A complete end-to-end security engagement — the centerpiece of your hiring portfolio.
Hands-on labs in every tool — not slideshows. You'll be operating these from week one.
Kali Linux
Wireshark
Splunk
Burp Suite
Metasploit
Nmap
MS Sentinel
AWS Security
Azure Security
Nessus
MITRE ATT&CK
Python
Not full-time trainers — working security professionals teaching what they do every day, on both sides of the fight.
IT Security Analyst | Portwest Ltd.
A cybersecurity professional specializing in SOC operations, defensive security, and incident response. Iftakharul brings frontline experience detecting, analyzing, and responding to real-world threats, turning that hands-on expertise into practical, career-ready skills students use from day one.
Principal Officer, Information Security — Sonali Bank PLC
A cybersecurity professional with over a decade of experience defending critical financial infrastructure — from both sides of the fight. Rezaul leads incident response, threat hunting, and digital forensics as a core member of his bank's CIRT, while also running web and mobile application penetration tests that expose weaknesses before attackers find them. He teaches students to think like an attacker and defend like an analyst, using the same workflows he applies against real-world threats every day.
From IT support desks and non-CS degrees to SOC floors and remote international teams.
"I came from a non-CS background. Six months later I cleared the BRAC Bank SOC interview on my first attempt. The live labs made all the difference."
Tanvir Hasan
SOC Analyst @ BRAC Bank
৳35K → ৳95K/mo
"The AI security module set me apart in every interview. I now work remotely for a US company — from Dhaka. This course changed my family's future."
Nusrat Jahan
Security Engineer @ Remote (US Startup)
$0 → $72K/yr
"The capstone pentest project became my entire interview. I walked recruiters through my own report and got two offers in the same week."
Sabbir Rahman
Penetration Tester @ Enosis
৳28K → ৳110K/mo
"Mock interviews were brutal — in the best way. By the real interview, nothing surprised me. Placed within 5 weeks of graduating."
Farhana Akter
Cloud Security Associate @ Augmedix
Fresh grad → ৳65K/mo
"I was stuck in IT support for 4 years. The mentors didn't just teach — they rebuilt my confidence. Best investment I have ever made."
Mahmudul Karim
Incident Responder @ Robi Axiata
৳40K → ৳120K/mo
"I enrolled in my final semester. Graduated university and this course in the same month — with a job offer already signed."
Sadia Islam
Junior Security Consultant @ Kaz Software
Student → ৳55K/mo
Cybersecurity has a 0% unemployment problem — 3.5 million roles sit unfilled worldwide. Here's where our graduates land.
Become a job-ready cybersecurity professional through live, mentor-led, AI-integrated training — with SOC simulation labs, real-world case studies and career support built in.
Limited-Time Offer — Ends In
Live · Mentor-Led · AI-Integrated
Regular Fee৳9,490Save ৳3,500
Flexible payment — two easy installments
What’s Included
Flexible Payment Options
Choose the payment option that works best for you.
Still unsure about something? Message us on WhatsApp — a real counselor replies within minutes.
No. The program starts from absolute fundamentals. Around 60% of our successful graduates came from non-CS backgrounds — business, pharmacy, even arts. What you need is consistency and 8–10 hours per week.
The program runs for 4 months with 47 live sessions, held 3 evenings per week (Sun, Tue, Thu, 9–10:30 PM Bangladesh time) so working professionals and students can attend comfortably. Every class is recorded.
Every session is recorded and uploaded within 24 hours, with lifetime access. You can also bring questions from missed classes to weekly support sessions with mentors.
Any laptop with 8GB RAM (16GB recommended) and 100GB free storage works. We provide cloud lab environments for heavier workloads, so you don't need an expensive machine.
Yes. You receive a verifiable digital certificate from Transfotech Global Bangladesh, and more importantly, a portfolio of 8 real projects — which is what employers actually evaluate in interviews.
From month 4, our career team works with you on resume, LinkedIn, portfolio, and mock interviews. We refer qualified graduates directly to 50+ hiring partners and share vetted remote opportunities.
No honest academy can guarantee a job — but our numbers speak: 94% course completion rate and 800+ placements. Graduates who complete all projects and career sprints typically receive offers within 2–3 months.
The first-batch program fee is ৳5,990 (regular fee ৳9,490), and it can be paid in two easy installments. bKash, Nagad, bank transfer, and cards are all accepted.
Both. AI isn't boxed into one module — it's woven into all 24 units, from AI-assisted recon and OWASP Top 10 for LLM Applications to AI-driven threat hunting and a fully AI-augmented capstone red team simulation. Traditional security fundamentals plus AI fluency, not one instead of the other.
Many of our alumni work remotely for companies in the US, UK, UAE, and Singapore. The curriculum follows international frameworks (CompTIA Security+, MITRE ATT&CK) and includes interview prep for global roles.
Structure, accountability, and feedback. You get a guided path, live mentor support, graded projects, a community, and career services — the things that turn scattered knowledge into an actual job.
Yes. The curriculum is mapped to CompTIA Security+ and CEH objectives, and month 6 includes dedicated exam preparation guidance for whichever certification fits your career goal.
Classes are taught in a comfortable mix of Bangla and English, while all materials, labs, and reports are in English — preparing you for international workplaces.
Fill out the form on this page or message us on WhatsApp. A career counselor will call you within 24 hours to assess your background and answer every question — completely free, no obligation.
Seats are limited and this discounted price won't wait — the next intake is months away. Book your free consultation now; decide after you have every answer.