Every vendor is a region of the quarry, and every credential is a stone to cut. Lit stones are live capstones you can start now; the rough rock is on the map and coming.
13 live · 29 on the map · 7 regions
Broad, practical ground — hardware, networks, security and operations.
Entry
Build and document a working endpoint from bare hardware.
Entry
Stand up and map a small multi-subnet network.
Professional
Operate a SOC on a live Wazuh stack — monitor, hunt, respond.
Professional
Run a scoped engagement end to end and write the report.
Professional
Secure an AI product: attack it, defend it, watch it, govern it, release it.
Expert
Architect and defend an enterprise security programme.
Deep network canyons — routing, switching and network security.
Entry
Wire up and verify your first switched network.
Professional
Deploy firewalls, VPNs and segmentation across the canyon.
Expert
Design and defend a full enterprise security fabric.
The security vault — risk, governance and the defender’s body of knowledge.
Entry
Apply the core controls to a small environment.
Expert
Build a security programme across all eight domains, six releases to federal-ready.
Expert
Design and govern a secure cloud platform.
The Azure basin — identity, cloud and hybrid enterprise defence.
Entry
Build a small company in Azure: network, VM, website, serverless counter. Start here.
Entry
Tour identity, compliance and security across Microsoft 365 + Azure.
Associate
Run it like production: identity, networking, server admin, backup.
Associate
Run detection and response in Microsoft Sentinel + Defender.
Professional
Harden identity, network and data across an Azure estate.
The cloud range — distributed systems that survive losing a zone.
Professional
Codify it, deploy it from a pipeline, check it with Config, hand it over.
Professional
Lock down IAM, logging and data protection across accounts.
The system caverns — the shell, services and automation everything runs on.
Entry
Live in the shell — files, permissions and processes.
Associate
Administer and automate a real Linux server.
Professional
Automate a fleet with Ansible and prove it converges.
Client-side work — compliance, audit and evidence you can hand over.