Security courses
Defensive work with a shift pattern: alerts, incidents, vulnerabilities and the cloud estate they land in.
8 free security courses, each ending in a live simulation week and a portfolio of artifacts you keep.
Cloud Security Engineer
Own an insurer's cloud security posture for a fortnight: prioritise by exposure not score, move admins to just-in-time access, roll out conditional access safely, get secrets out of code, close public endpoints, find what Copilot can see, tune Sentinel and report risk.
20 lessons·4 artifacts·Pairs with Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500)
GRC / IT Audit (Governance, Risk, Compliance)
Learn to do the GRC and IT audit job: map controls, run a walkthrough, rate a risk, sample and test evidence, and write a finding a busy executive can act on.
28 lessons·5 artifacts·Pairs with ISACA CISA
Identity & Access Management (IAM) Analyst
Learn to run identity as a job: read a SAML assertion and a token payload, move joiners, movers and leavers through the lifecycle without leaving access behind, design roles that survive real people, run an access review that means something, and keep privileged accounts under control.
28 lessons·6 artifacts·Pairs with Microsoft SC-300, or Okta Certified Professional
Network Security Administration
Learn to own the controls on a real network: segmentation, firewall rule bases, ACLs, VPNs, IDS and IPS, NAC and device hardening, and leave holding a change request, a rule base audit, a segmentation design and a hardening checklist.
28 lessons·6 artifacts·Pairs with Cisco CCNA, then CompTIA Security+
SOC Analyst Tier 2 / Incident Responder
Own a real intrusion from a wrongly closed alert to the review: reopen Tier 1's call, contain within your authority, scope and time-line the attack, preserve evidence in order, brief the data protection officer, recover cleanly and fix the detection that missed it.
20 lessons·4 artifacts·Pairs with CompTIA CySA+
Vulnerability Management Analyst
Turn thousands of scan findings into this week's few: prioritise by exploitation and exposure, write a risk exception someone can sign, verify fixes instead of trusting tickets, respond when a flaw is exploited before a patch exists, and report risk that really fell.
20 lessons·4 artifacts·Pairs with CompTIA CySA+
SOC Analyst / Cybersecurity Analyst
Learn to do the analyst job: work an alert queue without drowning, tell a real attack from a noisy rule, build a timeline from logs, escalate with evidence, and write the incident up so somebody else can act on it.
28 lessons·6 artifacts·Pairs with CompTIA Security+, then CySA+
Cloud Security Foundations
Learn to secure a cloud environment the way the job actually goes: review who can do what, find the configuration that leaks, decide what to contain first, preserve the evidence, and refuse a bad request in a way that gets you invited back.
30 lessons·5 artifacts·Pairs with CompTIA Security+, then AWS Certified Security Specialty
Questions about security courses
Yes. Every course on CertClue is free, with no card and no trial period. You need an account to track progress and collect your artifacts, and that is the only gate.
8 live right now, holding 202 lessons and 40 portfolio artifacts between them. New courses are added regularly and appear here automatically.
No. Each course states its own level, and most of this catalogue starts at entry or beginner. A course assumes you can use a computer and read carefully, not that you have done the job before.
A completion certificate with a public verification link, and the artifacts you produced during the simulation week. The artifacts are the part worth showing an interviewer: they are the work, not a score.