A little learning. A little more confidence.Your next step starts here

YOUR FIRST SMALL WIN STARTS HERE

Cyber skills.
Real confidence.

Help Leo spot the clues in a suspicious store, or try five everyday cyber decisions. You can start without any experience.

Free to learn No account needed
Prefer to start with a lesson?
FROM THE REEL TO REAL UNDERSTANDING Leo, our curious lion, beside a phone with a short video.
SMALL LESSONS · LASTING HABITS

A little practice.
More confidence.

Pause, verify, and keep learning.

BIG TOPICS.
CLEAR EXPLANATIONS.
Identity & access Networks Cloud security Cyber defense

FROM CURIOUS TO CAREER-FOCUSED

Find work you want to learn.

Three career tracks for U.S. beginners and career changers. Explore a role, practice its decisions, and build a work sample.

INVESTIGATE THE SIGNAL

SOC Analyst

Investigate alerts, connect evidence, and write a clear incident handoff.

You enjoy puzzles, technical detail, and explaining what happened.

YOUR WORK SAMPLEHarbor Books incident handoff

10 lessons · 3 exercises · 1 project

Start with 6 shared foundation lessons

Explore this career

MAKE RISK UNDERSTANDABLE

GRC & Audit Support

Assess risks, collect useful evidence, and help teams follow through on controls.

You enjoy organized work, writing, asking questions, and connecting business needs to security.

YOUR WORK SAMPLEHarbor Books risk and evidence pack

10 lessons · 3 exercises · 1 project

Start with 6 shared foundation lessons

Explore this career

THE RIGHT ACCESS, FOR THE RIGHT REASON

Identity & Access Management

Manage account lifecycles, review permissions, and document access decisions.

You like careful processes, troubleshooting, and helping people get appropriate access.

YOUR WORK SAMPLEHarbor Books access lifecycle plan

10 lessons · 3 exercises · 1 project

Start with 6 shared foundation lessons

Explore this career
A shared starting point.

6 foundation lessons cover security goals, identity, phishing, DNS, HTTPS, and least privilege. Your completed lessons count across all three tracks.

See the foundation

These introductory tracks support further practice and career exploration. Completion is a learning milestone, not a professional credential or a guarantee of employment.

A LITTLE STRUCTURE. A LOT OF POSSIBILITY.

Build your foundation.

Six topic-based paths to build the basics. Start here or use them alongside a career track.

Browse all 85 lessons

Cybersecurity essentials

  1. What are we actually protecting?
  2. Free lesson: passwords & 2FA
  3. Pause before the click
  4. Updates are part of your defenses
  5. Free lesson: backups that restore
  6. Free lesson: Sign in with a passkey
  7. Give browser extensions a smaller reach
  8. Keep a way back into your account
  9. Sign a lost device out of your account
  10. Caller ID can lie
  11. Free lesson: impostor scams
  12. The raise is automatic
  13. Think before you paste into AI
  14. Lock your number against SIM swaps
  15. Free lesson: location privacy
  16. Free lesson: secure home Wi-Fi
  17. Free lesson: charge safely
  18. Free lesson: fake virus alerts
  19. Free lesson: freeze your credit
  20. Free lesson: avoid phishing
  21. Free lesson: gift card safety
  22. Free lesson: spot shopping scams
  23. Free lesson: app permissions

Computer & command-line foundations

  1. What an operating system does
  2. Files, folders, and paths
  3. Users, groups, and administrator access
  4. Processes and background services
  5. Your first terminal commands
  6. Finding clues in a log file

Network foundations

  1. From a name to a destination
  2. Give your network some boundaries
  3. What HTTPS does, and does not, mean
  4. Read a firewall rule as a sentence
  5. Know where your VPN tunnel ends
  6. Follow a TCP connection
  7. Hashing is not encryption

Web & application security foundations

  1. Follow a request from browser to server
  2. Read URLs, headers, and status codes
  3. Cookies, sessions, and staying signed in
  4. How applications communicate through APIs
  5. Logging in does not grant every permission
  6. Treat application input as untrusted

Cloud security basics

  1. Who secures what in the cloud?
  2. Small permissions, smaller blast radius
  3. Keep secrets out of your code
  4. Keep cloud files private on purpose
  5. Give applications their own identity
  6. Protect the keys behind encrypted data
  7. Share with the right people and permissions

SOC & incident response

  1. Read a log like an investigator
  2. An alert is a starting point
  3. Respond with a plan, not a panic
  4. Build a timeline you can explain
  5. Decide what needs fixing first
  6. Treat an indicator as a lead

SOC Analyst

  1. Working an alert queue
  2. Searching security events
  3. Comparing authentication signals
  4. Investigating a reported message
  5. Reading endpoint evidence
  6. Building an evidence timeline
  7. Escalating with a clear handoff
  8. Closing an alert responsibly
  9. Follow a suspicious process
  10. Spot unusual outbound traffic

GRC & Audit Support

  1. What GRC support actually does
  2. Writing a useful risk statement
  3. Scoring and tracking risk
  4. From requirements to controls
  5. Collecting audit evidence
  6. Reviewing a vendor
  7. Writing findings and exceptions
  8. Reporting progress clearly
  9. Test a security control
  10. Handle a security exception

Identity & Access Management

  1. Identity, accounts, and directories
  2. Authentication, sessions, and recovery
  3. Designing roles and permissions
  4. Onboarding with an approval trail
  5. Handling role changes
  6. Offboarding beyond the directory
  7. Running an access review
  8. Privileged and service access
  9. Understand single sign-on
  10. Stop an MFA fatigue attack
6 foundation paths. 3 career tracks. 85 focused lessons. Every lesson ends with a small check-in.
Your pace is the right pace.

THE SMALL-WINS METHOD

Learn it.
Try it.
Make it stick.

No endless video queues.
No pressure to know it all.

01

One concept at a time.

Short explanations, everyday examples, and a clear takeaway. Understand the why, not just the vocabulary.

02

Put yourself in the scenario.

Spot a suspicious email. Make sense of an alert. Practice decisions in a safe, simulated setting.

03

Come back a little stronger.

Check your understanding, revisit a flashcard, and pick up where you left off. Small wins add up.

LESS MEMORIZING. MORE FIGURING IT OUT.

Your practice ground.

Room to think, make mistakes, and try again.

Simulated scenarios. Real learning.

NEW · AN INTERACTIVE NETWORK LAB

One click. A whole journey.

Follow a request through a tiny 3D network. Inspect the devices, find the snag, and get the page home.

Packet Journey · About 10 minutes · Five investigations
Play Packet Journey →

Take the analyst desk.

A working SOC dashboard with five investigations. Claim alerts, query events, build a timeline, and hand your findings to the next analyst.

Beginner friendly · 30–45 minutes · Save and resume
Play SOC Shift
CYBER ADVENTURES · TWO PLAYABLE LEVELS

Sam takes the lead.

Ride the lifts. Recover the backup. Help Sam bring the archive home in Data Rescue.

Start with Leo’s Signal Run · Level 01 →
Play level 02 with Sam

CYBER SKILLS FOR EVERY DAY

Keep your small wins going.

Build useful cybersecurity habits one small lesson at a time. Explore passwords, privacy, scam awareness, and the decisions people make in cybersecurity careers.

Try a short lesson, revisit a tricky topic, or take the analyst desk in SOC Shift. Your progress stays in this browser.

Explore the free lessons

DAY 04 · ONE-MINUTE CHALLENGE

Could you spot the fake recruiter?

Inspect Leo’s offer, find the warning signs, and choose how to verify it.

Check the offer

KEEP YOUR CURIOSITY GOING

Good things to have on hand.

Your next explanation is never far away.

Independent learning, with links to original sources. No affiliation or endorsement is implied.

TECHNICAL SUBJECT. HUMAN APPROACH.

You don’t need to
know everything.
Just where to begin.

Cybersecurity can feel like a conversation everyone else already understands. The acronyms. The tools. The never-ending list of things to learn.

MyCyberTutor is a place to start making sense of it. Clear explanations, practical examples, and space to learn without feeling behind.

Bring your curiosity. We’ll start there.

A FEW THINGS YOU MIGHT BE WONDERING

Before you jump in.

Do I need any cybersecurity experience?

No. Start with Cybersecurity essentials, or use the informal starting-point check to choose a path. Computer & command-line foundations, Network foundations, and Web & application security foundations are also designed for beginners.

Is this free? Do I need an account?

All lessons and practice activities in this version are free to use. There is no registration, payment, or subscription.

How is my progress saved?

Progress is saved in this browser on this device when local storage is available. It does not automatically sync across devices. Use My progress to export or import a backup. Clearing site data removes the saved record.

Is this an official certification course?

No. MyCyberTutor provides independent foundational learning. It is not an accredited program or an official exam-preparation course, and completion is not a professional credential.

Will the labs access real systems?

No. The scenarios use fictional, built-in evidence and run in your browser. They do not connect to email accounts, scan networks, or interact with real targets.

YOUR NEXT SMALL WIN IS WAITING

Start curious.
Leave more confident.

One decision. A little more confidence.

YOUR LEARNING SPACE