Cloud-Agnostic Courses

Build real authentication for a SaaS backend across five paired lessons: Argon2id password hashing, OAuth2 with Google and GitHub, email verification over Resend, TOTP MFA with backup codes, and role-based route authorization. Hand-rolled Hono + Postgres (no abstractions to hide the mechanics). Each lesson pairs a short teaching segment with a hands-on in the claude-saas-stack VS Code container. Closes with Better Auth + passkey pointers as the production upgrade path.

Add Redis to your SaaS stack across five paired lessons: your first SET/GET, cache-aside, Redis-backed sessions, rate limiting, and pub/sub. Each lesson pairs a short teaching lesson with a hands-on in the claude-saas-stack VS Code container. Uses the officially-maintained node-redis v4 client (Redis's 2026 recommendation). By the end you'll know which Redis data model fits each use case and when to graduate from pub/sub to Streams.

Build your first backend API with Claude Code. 5 hands-on labs covering what an API is, routing + validation, error handling, OpenAPI documentation, and testing — Claude Code writes the code; you learn what to ask for and how to read what comes back.

Learn the shape of a modern SaaS application and the components every one is built from, so you can decide which to build first and which to skip. The orientation course for the SaaS Foundations path.

The Cybersecurity Professional capstone. Run a full-scale incident response from detection through forensics through executive briefing with real SIEM data plus a full IR-team role-play. Demonstrates mastery of every skill in the path - SOC triage, forensics, communication, and executive storytelling.

Learn the governance, risk, and compliance discipline that frames every security program at scale - NIST CSF, ISO 27001, SOC 2, policy writing, audit preparation, and executive reporting. Finish able to structure, measure, and communicate a security program to boards, auditors, and regulators.

Integrate security into the software development lifecycle - security requirements, STRIDE threat modeling, static + dynamic + composition analysis, and secure coding. Hands-on Node.js labs refactor vulnerable code into secure code so you can threat-model a service and read SAST results effectively.

Learn the offensive security mindset - how attackers think, recon, exploit, and move laterally - through the full pentest lifecycle. Hands-on CTF challenges against intentionally-vulnerable systems let you run a basic pentest, communicate findings to defenders, and understand why offensive knowledge makes better defenders.

Prioritize vulnerability remediation with CVSS + EPSS + asset-criticality context (not just severity score) and run hypothesis-driven threat hunting that finds the activity the automated detections missed. Triage a scan, build three hunting queries from threat-intel hypotheses, and measure hunt-program maturity.

Run an incident response from first-minute detection through forensic root-cause analysis and executive after-action reporting. Walk the PICERL lifecycle, use Volatility for memory forensics and Autopsy for disk forensics, reconstruct attack timelines, and run a ransomware tabletop plus an end-to-end IR capstone.

Learn how a modern Security Operations Center actually works, from the 2 AM alert through triage. Build SIEM data pipelines, map behaviour with MITRE ATT&CK, write and tune Elasticsearch detection rules, author KQL queries for threat hunting, and finish with a full-day end-to-end SOC capstone.

Build the identity vocabulary every modern security practitioner shares - authentication factors, phishing-resistant MFA, SAML / OAuth / OIDC, authorization models from RBAC through ReBAC, Zero Trust architecture, privileged access management, and the identity-governance lifecycle.

Build the vocabulary every security practitioner shares - the modern threat landscape, CIA + AAA, risk-management thinking, defense in depth with MITRE ATT&CK, essential networking and OS knowledge, cryptography primitives, and the NIST Cybersecurity Framework.