
Pricing
Stop watching tutorials. Start closing tickets.
Free gets you inside a real SOC console. Practitioner gives you the live queue, the containment calls and the case evidence hiring managers actually ask about — for less than one hour of tutoring a month.
The free tier teaches you phishing. Practitioner makes you employable.
Every case you close is logged as evidence: headers pulled, IOCs enriched, containment decided, report written. By your tenth ticket you have an analyst résumé built from work you actually did.
- Unlimited AI Email Check
Triage any suspicious email you receive, not five a month.
- Live SLA queue
Work tickets under a clock, like a real shift.
- Containment decisions
Identity, endpoint and blast-radius workspaces.
- Résumé + interview mode
Exportable case experience and drilled answers.

Cancel anytime · No live malicious content · Training mode only
Free
For anyone curious about SOC work.
- 4 beginner cases
- AI Email Check (5 / month)
- Header, URL and IOC workspaces
- Beginner Guided Training
- Terminology library and Academy previews
- Basic debrief score
Practitioner
For career changers and junior analysts.
- Full case library
- Daily SOC queue with SLA pressure
- Identity, endpoint and containment workspaces
- Attachment detonation and MITRE mapping
- Career mode + Interview mode
- Exportable analyst résumé and reports
- Unlimited AI Email Check
All plans run in training mode. No live malicious content is ever served.
One suspicious email a day is all it takes.
Practitioner costs less than a takeaway a week and gives you the case history, evidence trail and interview answers that turn "I did a course" into "here are the tickets I closed."
