# Codelivly > Codelivly is a free online cybersecurity learning platform with hands-on rooms, learning paths, career paths, labs, CTF challenges and simulations, plus a cybersecurity blog and glossary. Everything is free, including certificates; the platform is funded by voluntary donations. Canonical: https://codelivly.com/ ## About Codelivly - Completely free: every room, learning path, career path, hands-on lab, CTF challenge, simulation and certificate. No subscription, no paywall. - Funded by voluntary donations (https://codelivly.com/support). - Rooms are short modules of lessons; learning paths order rooms into one skill area; career paths group learning paths around a security job. - Sister store: Codelivly Resources (https://resources.codelivly.com/) sells cybersecurity ebooks and playbooks as PDFs. - Contact: support@codelivly.com ## Start here - [Rooms](https://codelivly.com/rooms) - every hands-on room with level and lesson count - [Learning paths](https://codelivly.com/learning-paths) - ordered sets of rooms - [Career paths](https://codelivly.com/career-paths) - learning paths grouped by security job - [Blog](https://codelivly.com/blog) - tutorials, cheat sheets and news - [Glossary](https://codelivly.com/glossary) - cybersecurity terms - [About](https://codelivly.com/about) - what Codelivly is ## Learning paths - [Security Monitoring and Compliance Automation](https://codelivly.com/learning-paths/security-monitoring-and-compliance-automation) - Advanced. Master continuous security monitoring, compliance as code, and automated auditing to ensure persistent software supply chain integrity. - [Software Supply Chain Security](https://codelivly.com/learning-paths/software-supply-chain-security) - Advanced. Master the defense of the software supply chain. Learn to implement SBOMs, cryptographic artifact signing, and the SLSA framework. - [Secrets Management and Pipeline Hardening](https://codelivly.com/learning-paths/secrets-management-and-pipeline-hardening) - Intermediate. Master the secure lifecycle of credentials and the fortification of CI/CD pipelines against supply chain attacks and credential theft. - [Infrastructure as Code Security](https://codelivly.com/learning-paths/infrastructure-as-code-security) - Beginner. Master the principles of securing Infrastructure as Code (IaC), including static analysis, Policy as Code, and drift detection for cloud… - [Application Security Testing in Pipelines](https://codelivly.com/learning-paths/application-security-testing-in-pipelines) - Intermediate. Master the integration of SAST, SCA, DAST, and secret scanning into CI/CD pipelines to automate vulnerability detection and enforce… - [Secure SDLC and Threat Modeling](https://codelivly.com/learning-paths/secure-sdlc-and-threat-modeling) - Intermediate. Master the integration of security into the Software Development Life Cycle. - [Advanced Intelligence Analysis and Reporting](https://codelivly.com/learning-paths/cti-advanced-analysis-reporting) - Advanced. Produce decision ready threat intelligence: risk based strategic analysis, competing hypotheses and bias control, intelligence driven… - [Threat Intelligence Operations and Sharing](https://codelivly.com/learning-paths/cti-operations-and-sharing) - Intermediate. Structure, exchange, curate and disseminate threat intelligence with STIX 2.1, TAXII 2.1, MISP and OpenCTI, and make it change SOC and IR… - [Threat Actor and Campaign Investigation](https://codelivly.com/learning-paths/cti-threat-actor-investigation) - Intermediate. Investigate adversaries by their behaviour: map intrusions to MITRE ATT&CK, model them with the Diamond Model, profile actors, track… - [OSINT and Indicator Analysis](https://codelivly.com/learning-paths/cti-osint-indicator-analysis) - Beginner. Collect OSINT safely, analyse IPs, domains, DNS, URLs, hashes and certificates, pivot through infrastructure, and manage indicators in a… - [Cyber Threat Intelligence Foundations](https://codelivly.com/learning-paths/cti-foundations) - Beginner. The core of threat intelligence work: requirements, the intelligence lifecycle, threat actors, sources and collection, and disciplined… - [CI/CD Pipeline Fundamentals](https://codelivly.com/learning-paths/cicd-pipeline-fundamentals) - Intermediate. Master the principles, stages, and security best practices of Continuous Integration and Continuous Deployment to automate and secure… All learning paths: https://codelivly.com/learning-paths ## Topic guides - [Learn Cybersecurity Online — From Beginner to Job-Ready](https://codelivly.com/learn-cybersecurity) - Learn cybersecurity from scratch with hands-on labs, guided learning paths and real projects. - [SOC Analyst Course — Become a Security Operations Analyst](https://codelivly.com/soc-analyst-course) - Hands-on SOC analyst training: monitoring, triage, SIEM, incident response and threat detection. - [Cybersecurity Roadmap — Your Step-by-Step Path to a Security Career](https://codelivly.com/cybersecurity-roadmap) - A clear cybersecurity roadmap: what to learn and in what order, from fundamentals to a specialised role like SOC analyst, pentester or… - [Cybersecurity for Beginners — Start With Zero Experience](https://codelivly.com/cybersecurity-for-beginners) - Cybersecurity for beginners: learn the fundamentals from scratch with plain-English lessons and hands-on labs. - [Ethical Hacking Course — Learn Offensive Security Hands-On](https://codelivly.com/ethical-hacking-course) - Learn ethical hacking hands-on: reconnaissance, web and network exploitation, and reporting. - [Penetration Testing Course — Learn to Test Networks & Web Apps](https://codelivly.com/penetration-testing-course) - Learn penetration testing online with hands-on labs: scoping, recon, exploitation, privilege escalation and reporting across networks and… - [Blue Team Training — Defend, Detect and Respond](https://codelivly.com/blue-team-training) - Blue team training in defensive cybersecurity: detection, monitoring, incident response and threat hunting. - [Red Team Training — Adversary Simulation & Offensive Security](https://codelivly.com/red-team-training) - Red team training: think like an adversary. Learn reconnaissance, exploitation, privilege escalation and lateral movement hands-on, toward… - [Cloud Security Course — Secure AWS, Azure and Cloud Workloads](https://codelivly.com/cloud-security-course) - Learn cloud security hands-on: identity and access, misconfigurations, network controls and monitoring across modern cloud platforms. - [Malware Analysis Course — Analyse and Understand Malicious Code](https://codelivly.com/malware-analysis-course) - Learn malware analysis hands-on: static and dynamic analysis, behaviour, and indicators of compromise. - [Digital Forensics Course — Investigate Incidents and Evidence](https://codelivly.com/digital-forensics-course) - Learn digital forensics hands-on: evidence handling, disk and memory analysis, timelines and reporting. - [Incident Response Course — Detect, Contain and Recover](https://codelivly.com/incident-response-course) - Learn incident response hands-on: the IR lifecycle, triage, containment, eradication and recovery. - [Threat Hunting Course — Proactively Find Hidden Threats](https://codelivly.com/threat-hunting-course) - Learn threat hunting hands-on: hypotheses, hunting across logs and telemetry, and finding threats that evade automated detection. - [Cybersecurity Certification — Earn Verifiable, Skills-Based Credentials](https://codelivly.com/cybersecurity-certification) - Earn a verifiable cybersecurity certification by completing hands-on learning paths. - [Networking for Cybersecurity — The Foundation Every Hacker Needs](https://codelivly.com/networking) - Learn networking for cybersecurity: TCP/IP, protocols, ports, packets and how data really moves. - [Linux for Cybersecurity — Master the Command Line](https://codelivly.com/linux) - Learn Linux for cybersecurity: the command line, file system, permissions and scripting. - [Python for Cybersecurity — Automate, Script and Build Tools](https://codelivly.com/python-for-cybersecurity) - Learn Python for cybersecurity: automate tasks, parse data, interact with networks and build your own security tools. - [Bug Bounty — Find Real Vulnerabilities and Get Rewarded](https://codelivly.com/bug-bounty) - Learn bug bounty hunting: recon, finding web vulnerabilities, responsible disclosure and clear reporting. - [CTF — Learn Cybersecurity by Solving Capture the Flag Challenges](https://codelivly.com/ctf) - Learn cybersecurity through CTF (Capture the Flag) challenges: web, crypto, forensics and more. ## Latest articles - [How to Test an AI Application for Prompt Injection](https://codelivly.com/how-to-test-an-ai-application-for-prompt-injection) - Learn how to test an AI application for prompt injection using practical techniques, security tools, and best practices to identify… - [Digital Forensics: A Complete Guide to Tools, Techniques, and Investigation](https://codelivly.com/digital-forensics-a-complete-guide) - Learn digital forensics, including investigation processes, digital evidence, forensic tools, techniques, challenges, reporting, and career… - [How to Become a SOC Analyst Without a Degree (2026 Guide)](https://codelivly.com/how-to-become-a-soc-analyst-without-a-degree) - Learn how to become a SOC Analyst without a degree. A practical guide covering the skills, tools, and steps hiring managers actually look… - [Social Engineering Attack Life Cycle: The Art of Human Hacking](https://codelivly.com/social-engineering-attack-life-cycle-the-art-of-human-hacking) - In the beginning, social engineering was an art of social science. It is used to change people’s behaviour and make changes in society. - [Best Beginner JavaScript Projects for Hacking (2026 Guide)](https://codelivly.com/best-beginner-javascript-projects-for-hacking) - If you want to break into web security, building the best beginner JavaScript projects for hacking is the most effective way to learn. - [What Is a Security Operations Center (SOC)?](https://codelivly.com/what-is-a-security-operations-center) - Introduction to SOC analyst work: monitoring, SIEM alerts, incident triage, and career paths on the blue team. - [OWASP Top 10 Explained for Beginners](https://codelivly.com/owasp-top-10-explained-beginners) - Plain-English overview of the OWASP Top 10 web risks — injection, broken access control, misconfiguration, and how to test for them. - [Learn Cybersecurity: Essential Skills for Beginners](https://codelivly.com/learn-cybersecurity) - In today's digital age, cybersecurity is more important than ever. With increasing cyber threats, the demand for skilled professionals is… - [Pentesting Is Decision-Making, Not Scanning](https://codelivly.com/pentesting-is-decision-making-not-scanning) - Most newcomers to cybersecurity, and even some seasoned professionals, fundamentally misunderstand what a penetration test actually is. - [How to Get Into Cybersecurity and Carve a Career Path (Without Lying to Yourself)](https://codelivly.com/how-to-get-into-cybersecurity-and-carve-a-career-path) - Let’s start with the hard truth you already suspect: most advice about starting a cybersecurity career is garbage. ## Related - [Store: Codelivly Resources (books)](https://resources.codelivly.com/)