Pricing
From beginner to SOC analyst. One guided programme.
Start with no practical experience. Learn the core work of an L1 SOC analyst with personal teaching, hands-on investigations and feedback on your progress.
Personal teaching + practical labs
Complete SOC Investigation Programme
Your goal is to become a SOC analyst. We take you from your first log and Splunk search to investigating alerts, making response decisions and writing clear incident reports, with personal teaching and feedback from your instructor.
US$300
One payment · 5 weeks · 9 live lessons · included lab access
Enroll NowJoin the US$300 programme
The standard programme runs over 5 weeks: two one-hour live lessons per week for weeks 1–4, followed by a final investigation and report review in week 5. Practise independently between lessons. Enrol and pay first, then agree your start date, exact lesson times and timezone with your instructor. The five weeks begin on your agreed start date; any change to this pace is agreed together.
Have questions or unsure if this programme is right for you? Speak with your instructor about your goals, the lessons and how it all works.
Ask before deciding
Try a free live lesson
Your journey from beginner to SOC analyst
Learn the fundamentals together, work through investigations yourself and use feedback to improve your next attempt.
- One-to-one time with your instructor, with help and questions during your booked lessons.
- 9 one-hour live lessons, from your first Splunk search to investigation review.
- Eight solo investigations covering Windows logs, malicious execution, phishing C2 and more.
- Feedback on your investigations and incident reports, plus practice explaining your work in interviews.
- Lifetime access to the included solo labs, with 12 launches per UTC calendar month.
- CymBytes SOC L1 Certificate when you meet the assessment requirements.
One fee, clear inclusions
Your one-time fee covers the included teaching, lab environments and software, assessment and CymBytes certificate when you meet its requirements. No separate lab, software or certificate fee for the included programme.
Base price in USD. Indian buyers pay the quoted INR equivalent by UPI or card; overseas buyers pay USD by card. Your bank may apply its own currency-conversion charges.
Teaching and continued practice
Live teaching covers nine booked one-hour lessons. Lifetime access applies to the included solo labs, with the monthly launch allowance above.
You may request a full refund before your first agreed live class starts. Once that class starts, we do not offer discretionary change-of-mind refunds. If we cannot agree a suitable timetable, we will refund your payment in full. Your statutory cancellation rights and remedies if we fail to deliver as promised are unaffected. Read the refund policy.
How the certificate is assessed
Submit an incident report and earn a final score of 70 or more in each of the five required foundation labs, with a plan that includes the certificate. Issued by CymBytes for assessed lab performance. Its public verification link records the completed labs and scores.
Already enrolled in Foundations or the Investigation Course? Contact us about continuing your training.
Training a SOC team?
Team exercises, instructor analytics and audit-ready readiness reports are sold separately.