T Academy
Everyone teaches you one niche. No one teaches you all of it. We do.
Build it, run it at scale, secure it, and attack it the way an adversary would. The best way to defend a system is to know how to attack it. Few engineers can do all four. T Academy trains you in all of it, on real machines, and you finish with a credential an employer can verify.
The jobs
Six engineering jobs. The whole T trains you for all of them.
Platform / DevOps engineer
Runs the servers, clusters and pipelines a company lives on.
Trained in Secure Platform EngineeringApplication security engineer
Finds and fixes the flaws in the code a company ships, before attackers do.
Trained in Secure Software EngineeringDetection engineer
Turns what happens on hosts and networks into alerts that catch real attacks.
Trained in Runtime Detection and ResponseDevSecOps engineer
Builds pipelines where every change is tested, signed and safe to ship.
Trained in DevSecOps and Supply ChainPenetration tester
Breaks in the way an adversary would, before a real one does.
Trained in Offensive SecurityIdentity and access engineer
Runs sign-in, permissions and secrets so only the right people get in.
Trained in Identity and Access EngineeringThe T
Learn the whole stack. Then learn to run it at scale and keep it secure.
The crossbar is Foundation: Linux, your first programs, networking, cloud, containers, delivery pipelines, observability, data and security. Everyone takes it, left to right, and it ends with a certificate of completion.
The stem is the seven core paths: platform, edge, identity, DevSecOps, detection, offensive and secure software. Each ends in a practical exam on a live range. Finish all seven and you hold the whole T. Industry paths come after.
Foundation · the crossbar · everyone, in this order
- Immutable OS and cluster hardening
- Cluster networking and policy
- Service mesh and gateways
- Storage and databases
- Streaming platform operations
- Autoscaling and platform as a product
- The practical, on a live range
A core path · Secure Platform Engineering, for example
Four steps, from your first command to a credential.
- 01
Foundation
Eleven courses across the whole stack, in order, every lab on a real host. It ends with a certificate of completion, the door to every path.
- 02
The seven core paths
Platform, edge, identity, DevSecOps, detection, offensive and secure software. You build, scale and secure real systems, and attack them the way an adversary would.
- 03
The practical
One timed exam on a live range for each path. The machines check what you did.
- 04
The whole T
Hold all seven core credentials and you earn the T-Shaped Security Expert credential, free, with the T ring sent to you.
Your own idea
Have an idea you’d rather keep to yourself? Build it yourself.
Learn every layer it needs, from scratch: the code, the servers, the network, the pipeline and the security. Vibe coding gets you a demo. The whole stack gets you a product you own.
The paths
Foundation first. Then the seven core paths. Then an industry.
Foundation
Everything you need before any path, starting from nothing: three Linux courses, your first programs, networks, cloud, containers, delivery pipelines, observability, data and security fundamentals.
11 courses · 158 lessonsSecure Platform Engineering
Build the platform other teams ship on, hardened from the metal up: an immutable OS, a policy-enforced network, a service mesh that survives a gateway failure.
6 courses · 27 lessonsEdge and Post-Quantum Networking
Multi-region edge points of presence, hybrid post-quantum TLS terminated at each one, DNSSEC end to end, and the WAF and rate limits that keep it standing.
6 courses · 22 lessonsIdentity and Access Engineering
Who is who, and what they may do, for people and machines: OIDC and OAuth to spec, passkeys, workload identity, secrets with a real vault, authorization as code.
6 courses · 21 lessonsDevSecOps and Supply Chain
Ship securely and prove where every artifact came from: no Docker daemon, images built with Kaniko, dependencies vendored and verified, a self-hosted forge, the whole chain signed.
5 courses · 21 lessonsRuntime Detection and Response
See what a workload actually does at runtime and act on it: eBPF detection in the kernel, detections written as code, a pipeline to a SIEM, alerting that reaches a human.
5 courses · 19 lessonsOffensive Security
Break what the other paths build, on live ranges: recon, web and API attacks, network exploitation, Active Directory, and the cloud, container and mesh attacks.
6 courses · 21 lessonsSecure Software Engineering
Code that is secure by construction, not patched after a pentest: secure design, language-level pitfalls, cryptography used correctly, authorization in the code.
7 courses · 28 lessonsFintech
A bank-grade payment stack kept running through an audit, an attack, a fraud campaign and an outage: tokenized checkout, a ledger that proves it was never rewritten, KYC and fraud.
6 courses · 39 lessonsHealthcare
Patient data handled the way the law and the harm both demand: HIPAA and GDPR special categories by design, interoperability without leaks, consent, audit, breach response.
6 courses · 19 lessonsDigital Sovereignty
A stack that answers to no one else: self-hosted from the metal, data resident where the law requires, keys you alone hold, an exit from every dependency.
6 courses · 22 lessonsStreaming and Data Platforms
Kafka in depth, as the backbone a company runs on: internals and tuning, change data capture, schema governance, exactly-once at scale, multi-region recovery.
7 courses · 23 lessonsAI Security Engineering
Secure the AI systems everyone is now shipping: LLM application security, prompt injection and tool sandboxing, agent security, adversarial machine learning, the model supply chain.
6 courses · 19 lessonsCompliance Engineering
Frameworks turned into running code: SOC 2, ISO 27001 and CIS as controls as code, evidence collected automatically, continuous compliance instead of an annual scramble.
5 courses · 15 lessonsWho It's For
Training That Meets You Where You Are
Engineers
Start from nothing and finish able to run a Linux server on your own. Then the seven core paths: build it, scale it, secure it and break into it, on hosts that check what you actually did.
Teams
Put a whole team through the T, together. Tell us what you need.
Schools and bootcamps
Add the academy to your program. We run the hosts and the checks; you run the class.
The method
How it works
A real host, in the browser
Every lab is a Linux machine of your own. You get a shell, not a simulator, and you can break it.
Verified on the host
Objectives are checked on the machine, from what you did, not from what you typed, with a message that says what is missing.
Wargame levels
Between tasks, levels you solve in a real shell to unlock the next account, the way the classic wargames do.
Recall cards
Every lesson ends with cards that come back when you are about to forget them.
The practical
A misconfigured host with twenty things wrong, three hours, and a re-scan that checks your work.
Foundation first
The certificate of completion is the door to every path, and every path ends in a practical exam.
Build it. Scale it. Secure it. Break it.
The first two lessons of Linux 1 and their labs are free. You need a free account, no card.