Zenaro Academy
Learn cybersecurity step by step: a six-level roadmap, a field manual, video lessons and tests with XP and daily streaks.
Six clearance levels, from zero to pro
Each level has 5 topics. Open a topic to see its videos and its manual chapter. Mark the topic as learned, then pass the level test to unlock the next one. Already know a level? Take its test straight away.
CLR-1 · IT & Linux Foundations
Learn how computers, operating systems and networks work before you try to secure them.
- How computers & operating systems work
- Linux command line
- Windows basics & internals
- Networking: OSI, TCP/IP, subnetting
- Scripting basics: Python
Labs
- Linux: the hidden files (Easy · about 20 min)
CLR-2 · Security Fundamentals
Core security concepts at Security+ level: CIA, cryptography, identity, threats and network controls.
- CIA triad, risk & security controls
- Cryptography: hashing, encryption, PKI
- Identity & access: AuthN, AuthZ, MFA, SSO
- Malware, phishing & social engineering
- Network security: firewalls, IDS/IPS, VPN
Labs
- Phishing: what the headers say (Easy · about 25 min)
CLR-3 · Blue Team & SOC Analyst
Work like a SOC analyst: logs, SIEM detections, packet analysis and incident response.
- Windows events, Sysmon & log sources
- SIEM detection & triage (Elastic)
- Packet analysis with Wireshark
- Incident response lifecycle
- MITRE ATT&CK & threat intel
Labs
- Windows logs: the night shift (Easy · about 25 min)
CLR-4 · Ethical Hacking Foundations
Think like an attacker, legally: methodology, web vulnerabilities and vulnerability management, so you defend better.
- Pentest methodology & rules of engagement
- Reconnaissance & scanning concepts
- Web vulnerabilities (OWASP Top 10)
- Vulnerability management: CVE, CVSS, KEV
- Legal practice: CTFs & labs
Labs
- A web server under probe (Easy · about 25 min)
CLR-5 · AD, Cloud & Threat Hunting
Specialize: defend Active Directory and AD CS, secure cloud, hunt proactively and handle forensics.
- Active Directory security & Kerberos
- PKI & AD CS hardening
- Cloud security (AWS / Azure)
- Hypothesis-driven threat hunting
- Digital forensics & timelines
Labs
- Threat hunting: the steady heartbeat (Hardcore · about 35 min)
CLR-6 · Detection Engineering & Career
Professional level: detection-as-code, Zero Trust architecture, GRC, automation and a portfolio that gets you hired.
- Detection engineering: Sigma & detection-as-code
- Security architecture & Zero Trust
- Governance, risk & compliance
- Automation & SOAR
- Home lab, portfolio & career
Labs
- Build your own practice range (Easy · about 40 min)