Should your team understand attacks on their own architecture rather than on textbook examples?
As in-house IT security training, we conduct each of our courses as a closed group for your team. Your domain structure, tenant, or network segmentation serves as a case study, and the exercises take place in our lab. We jointly determine the date, location, and focus areas, based on a confidentiality agreement.
Open courses teach methods using neutral examples. The team is then left to apply these methods to their own systems, and people are reluctant to discuss their own architecture in a mixed group.
At the same time, the pressure is growing to integrate the attacker perspective in-house: skilled personnel are scarce, and the NIS2 directive explicitly includes cybersecurity training among the risk management measures of affected organizations. In-house training brings the entire team up to the same level and builds directly on your environment and your latest penetration test findings.
As an in-house format, we primarily offer our existing courses: Junior and Professional Penetration Tester, Identity Attack & Defense Specialist, and BloodHound Workshop are available as in-house training, as are defensive courses. We will assess the feasibility of offering other topics. We will tailor the content and focus to your team's specific needs in advance.
We'll use your domain structure, tenant, or network segmentation as an example and demonstrate what typical attack paths would look like. The exercises themselves will take place in our lab.
Upon request, we can analyze data you have collected yourself beforehand during the training, such as... blood hound-Collection of your domain or your conditional access policies. The data remains under your control.
The findings from your last report become learning material: your team understands how a path came about and checks the solution themselves.
At your location, remotely or in our premises.
Based on course and objectives. We will jointly determine the scope and focus areas in a preliminary discussion.
Maximum 12 participants
The information you provide about your environment will be treated as assessment data. We will sign a confidentiality agreement beforehand.
Our in-house training delivers the content of our open courses to a closed group, tailored to your specific architecture. It's designed for IT and security teams who want to reach a common understanding or comprehend the findings of a penetration test. Depending on your prior knowledge, you can choose a level within the Penetration Testing career path, a specialized workshop, or a defensive course on incident response and network defense. If your team needs to replicate and resolve specific findings in real-world scenarios, the Technical Workshop is the appropriate option.
You tell us about your team, prior knowledge, and goal. We suggest a course, focus areas, and format, and together we determine the scope.
We will sign a confidentiality agreement beforehand. If you wish, you can collect data yourself, such as a BloodHound survey, and incorporate it into the training.
On-site at your location, remotely, or in our facilities. Your environment serves as a case study; exercises in attack techniques take place in our lab.
Junior and Professional Penetration Tester courses, as well as Network Defense Specialist courses, conclude with a certificate from ProSec GmbH; all other courses conclude with a certificate of participation.
Your team independently verifies the resolution of its own findings. You can commission a separate assessment of your systems as needed.
"Another important point for me is knowledge transfer. Through close collaboration, our own employees are also further developed professionally and sensitized to cybersecurity issues."
Example statement. The wording will be agreed upon with the speaker.
In-house training is particularly effective when it is based on real-world findings. These findings provide the material or reinforce what has been learned.
An internal penetration test reveals the attack paths of your domain, which become part of the training curriculum.
The Technical Workshop recreates the findings of your penetration test live and resolves them together with your team.
A Purple Team exercise shows your team, for each technique, what its own recognition system sees and what it doesn't.
Briefly describe which course or topic you are planning, how many people will participate, and what time period is suitable.
We will then coordinate the content, format and date with you.
We will personally answer your inquiries about courses, dates and in-house formats, providing you with the information you need to make your decision.
These are the questions we receive most frequently regarding this training course. We'd be happy to clarify anything that's missing in a personal consultation.
No. Attack technique exercises take place in our lab environment. Your environment is used as an example and through data that you provide. You commission a separate assessment of your systems for testing.
This depends less on team size than on the objective. If your team is to understand findings and evaluate their own environment, then a connection to their own architecture is beneficial. We will advise you on this in a preliminary consultation.
Yes, provided the team's prior knowledge is suitable. For teams with hybrid identities, for example, the combination of the BloodHound workshop and Identity Attack & Defense Specialist is useful.
All our courses include Junior and Professional Penetration Tester, Identity Attack & Defense Specialist, and the BloodHound workshop, as well as the defensive courses from ProSec Defense. We can also consider other topics upon request. We will tailor the content and focus to your team's specific needs in advance.
At your location, remotely, or in our offices. We will determine the date, duration, and scope together in a preliminary consultation.
We treat everything you show us about your environment as information from an assessment and conclude a confidentiality agreement beforehand. Data that you collect yourself remains under your control.
