Field manual — vol. 01

Nobody starts
as an operator.

Phoenix Academy is a hands-on cybersecurity and networking program. No lecture-hall theory — every module ends in a real lab, on a real machine, with a real outcome to show for it.

0Learners trained
0Certifications issued
0Hours of lab time
session://academy-lab-04 lab active
live session graph
Networking fundamentalsLinux administrationWireshark & packet captureNmap & reconSIEM & log analysisIncident responseFirewall configurationPython for securityThreat huntingActive Directory
§ 01

Four stages, one loop.
Repeat until it's instinct.

Every course runs the same cycle. It's slower than watching a video, and it's the only thing that actually sticks.

01

Learn

Short, focused lessons that explain the why before the how — taught by people who still work incident response.

02

Practice

A live lab environment for every concept. You're not clicking through slides, you're inside a terminal.

03

Prove

Capstone exercises graded against real objectives — capture the flag, patch the vulnerability, write the report.

04

Progress

Each capstone unlocks the next stage of your path, so you always know what's next and why it matters.

§ 02

Don't pick a category.
Pick where you're headed.

Every learner starts on the same runway. Where you go after Security Foundations depends on whether you'd rather break things or defend them — and you can switch later.

Networking The wires everything runs on Security Foundations How systems get attacked Choose a side Offensive Security Defensive Security Professional Practice Capstones & portfolio
§ 03

Try a taste of the lab.

This is a scripted preview of what a graded lab session looks like inside the platform. Pick a scenario — the terminal on the right will run it.

Scenario

Each scenario mirrors an early exercise from one of the three paths below.

Awaiting input …
§ 04

Five courses.
One clear starting point.

Start with Networking L0 — everything else in the catalogue assumes it.

§ 05

Learners are online right now.

A sample of activity across the academy — this feed is illustrative, not a live production system.

activity — sample feed
    § 06

    Taught by people still doing the work.

    Maren Solvik

    Lead, Offensive Security

    Eleven years in penetration testing before moving into teaching full time.

    Kunal Behera

    Lead, Cyber Defense

    Built and ran a SOC for a mid-size bank before joining Phoenix.

    Ines Falck

    Lead, Networking

    Former network engineer for a regional ISP; writes most of the Level 0/1 labs.

    Devon Okafor

    Career Support

    Runs mock interviews and resume review for every graduating cohort.

    § 07

    What it looks like on the other side.

    "I'd never opened a terminal before Networking L0. Fourteen months later I was doing packet analysis on my first SOC shift — and it wasn't the first time I'd seen that exact traffic pattern."

    R
    Renata KuceraSOC Analyst, formerly retail management
    § 08

    Pay for a course, or commit to a path.

    Self-paced

    $499 / course
    • Full course content & labs
    • 12 months of access
    • Certificate on completion
    • Community forum access
    Choose a course
    Most learners choose this

    Guided course

    $1,500$2,000
    • Everything in Self-paced
    • Weekly cohort check-ins
    • Instructor lab review
    • Priority Q&A access
    Start Networking L0

    Career path

    $4,200
    • Full path — 3 to 4 courses
    • Dedicated mentor
    • Mock interviews & resume review
    • Alumni network access
    Compare paths
    § 09

    Before you start.

    Do I need any experience first?
    No. Networking L0 assumes nothing beyond basic computer use. Most learners in Cohort 40 had never used a terminal before enrolling.
    What hardware do I need?
    Any laptop from the last six years. Labs run in a browser-based environment — nothing to install, nothing to break on your own machine.
    Is there job support after I finish?
    Career path enrollments include a dedicated mentor, mock interviews, and resume review. Self-paced courses include forum and alumni access.
    How long does a path actually take?
    Most learners finish a single course in 8–14 weeks at 6–8 hours a week. A full career path typically runs 9–14 months.
    Do I get an actual certificate?
    Yes — every course and path ends in a certificate tied to a graded capstone, not a quiz you can guess your way through.

    Your first lab is
    one click away.

    Courses / Networking / Level 0

    Networking Level 0

    Build the networking fundamentals you need before going deeper into cybersecurity — from core models and protocols to hands-on labs and foundational security concepts.

    Beginner300 hours5 modulesCertificate

    What you'll be able to do

    Understand networksExplain core architecture, devices, and how communication actually happens between them.
    Configure & inspectBuild and troubleshoot practical network topologies using real tools.
    Think securelyConnect networking fundamentals to firewalls and segmentation from day one.
    Apply itComplete guided exercises and a capstone that mirrors a real junior-role task.

    Curriculum

    01 Introduction to networking
    Networks, internet fundamentals, LAN/MAN/WAN/PAN, and the devices that move traffic between them.
    02 Protocols & models
    The OSI and TCP/IP models, protocol roles, TCP vs UDP, and where security fits in.
    03 Hands-on topology lab
    Build and inspect practical network topologies through guided lab exercises.
    04 Cybersecurity fundamentals
    Firewalls, segmentation, common attack concepts, and foundational controls.
    05 Capstone lab
    Bring it together in a final practical networking and security exercise, graded like a real task.