Phoenix Academy is a hands-on cybersecurity and networking program. No lecture-hall theory — every module ends in a real lab, on a real machine, with a real outcome to show for it.
Every course runs the same cycle. It's slower than watching a video, and it's the only thing that actually sticks.
Short, focused lessons that explain the why before the how — taught by people who still work incident response.
A live lab environment for every concept. You're not clicking through slides, you're inside a terminal.
Capstone exercises graded against real objectives — capture the flag, patch the vulnerability, write the report.
Each capstone unlocks the next stage of your path, so you always know what's next and why it matters.
Every learner starts on the same runway. Where you go after Security Foundations depends on whether you'd rather break things or defend them — and you can switch later.
This is a scripted preview of what a graded lab session looks like inside the platform. Pick a scenario — the terminal on the right will run it.
Each scenario mirrors an early exercise from one of the three paths below.
Start with Networking L0 — everything else in the catalogue assumes it.
Build the networking foundation every other course depends on — devices, addressing, and how traffic actually moves.
Routing, VLANs, ACLs, NAT/PAT, and the monitoring tools that keep a network honest.
SOC operations, incident response, and threat hunting — for learners headed toward the blue team.
Reconnaissance, exploitation basics, and reporting — written for red-team beginners, not future criminals.
An intensive, cohort-based sprint through log analysis, alert triage, and escalation — built for a first SOC job.
A sample of activity across the academy — this feed is illustrative, not a live production system.
Eleven years in penetration testing before moving into teaching full time.
Built and ran a SOC for a mid-size bank before joining Phoenix.
Former network engineer for a regional ISP; writes most of the Level 0/1 labs.
Runs mock interviews and resume review for every graduating cohort.
"I'd never opened a terminal before Networking L0. Fourteen months later I was doing packet analysis on my first SOC shift — and it wasn't the first time I'd seen that exact traffic pattern."
Build the networking fundamentals you need before going deeper into cybersecurity — from core models and protocols to hands-on labs and foundational security concepts.