Cloud-native security
Start broad with Kubernetes and runtime security, then go deep on workload identity.
Open security pathFree production curriculum
Learn production engineering through practical courses
Structured, hands-on courses for engineers building secure cloud-native systems, analyzing malware defensively, operating distributed platforms, centralizing authentication, and building production AI and trusted analytics.
FreeAd-freeProduction-focused98 modules
Course library
Choose the system you need to understand
Every track keeps the same shape: learn the architecture, practice the failure mode, then keep the production checklist close.
Free
devops
Mastering SPIFFE & SPIRE: Zero Trust for Cloud Native Systems
Learn modern cloud-native identity security and become the engineer who secures production Kubernetes clusters - for free.
13 modules30 labsIntermediate to Advanced
SPIFFESPIREZero TrustKubernetesmTLS
Open curriculum Free
devops
Cloud Native Security Engineering: Securing Kubernetes, Workloads, APIs & Zero Trust Systems
From passwords and perimeter trust to workload identity, Zero Trust, runtime protection, and production cloud-native security architecture
16 modules32 labsBeginner to Advanced
Cloud Native SecurityKubernetes SecurityZero TrustWorkload IdentitySPIFFE
Open curriculum Free
ai
Production-Grade RAG Systems Engineering
Build scalable, reliable, observable, and secure Retrieval-Augmented Generation systems - not another chatbot tutorial
16 modules31 labsBeginner to Advanced
RAGLLMVector DatabaseEmbeddingsSemantic Search
Open curriculum Free
backend
Distributed Systems Engineering: Building Scalable, Reliable & Secure Systems
A production-grade, beginner-friendly but deeply practical course on how real distributed systems actually work - from foundations through Kubernetes, observability, Zero Trust, and real-world failure recovery.
12 modules36 labsBeginner to Advanced
Distributed SystemsCloud NativeKubernetesArchitectureScalability
Open curriculum Free
security
Centralized Authentication and Authorization with Envoy
Build a Google-style one-login platform for Kubernetes products using plain Envoy, JWT/JWKS, external authorization, SSO, service tokens, and federated credentials.
8 modules8 exercisesBeginner to Production Grade
EnvoyAuthenticationAuthorizationSSOOIDC
Open curriculum Free
data-engineering
Production Analytics Engineering with dbt: Metrics, Semantic Layers & Lineage
From raw tables to trusted business metrics, step by step. Beginner-friendly, interactive, and built for freshers learning production data work.
16 modules16 exercisesBeginner to Intermediate
Analytics EngineeringdbtSemantic LayerMetricFlowMetrics Layer
Open curriculum Free
Security Engineering
Malware Analysis and Defense for Developers
Analyze evidence safely, engineer useful detections, contain incidents, and build software that is harder to compromise.
17 modules17 exercisesBeginner bridge to intermediate
Malware analysisDetection engineeringYARASigmaIncident response
Open curriculum Learning paths
Pick a path based on the work you own
These paths link courses with the labs, cheatsheets, and guides that make the concepts stick.
Distributed systems
Build the operational mental model behind consensus, scaling, reliability, and Zero Trust.
Open systems pathProduction AI infrastructure
Connect RAG architecture with retrieval quality, observability, deployment, and security.
Open AI pathCentralized platform auth
Design one Envoy enforcement point for SSO, JWTs, service tokens, federated credentials, and product boundaries.
Open auth pathAnalytics engineering
Turn raw warehouse tables into tested dbt models, governed metrics, and trusted dashboards.
Open data pathMalware analysis and defense
Study inert evidence, build tested detections, contain incidents, and harden software delivery without using live malware.
Open malware defense pathKeep practicing
Courses are only one part of the learning loop
Use labs for decisions, cheatsheets for operations, glossary terms for vocabulary, and blog guides for deeper architecture.