Is this offensive security?

No. It is defence: architecture, standards, detection, risk and response.

Where should I start?

Cybersecurity Fundamentals if you are new to the field. Engineers who work with PLCs, SCADA or building systems can go straight to the OT courses, which are written for them.

Is OT cybersecurity a job for network engineers or automation engineers?

Both, and the shortage is on the automation side: people who know what a PLC does and can read IEC 62443.

Category · Free · No card

Free cyber security courses with certificate

Defensive cybersecurity for IT and OT, free and complete: security fundamentals, Security+ exam preparation, SOC work with Splunk, cloud security, and ISA/IEC 62443 for plants, PLCs and building systems, with notes, quizzes, projects and an optional verifiable certificate.

Browse all free courses

20 courses · 238 modules · 213h 28m of video · Updated 27 September 2026

FreeCybersecurityIntermediate

OT Security Assessment: Testing a Plant Without Stopping It

The assessment half of OT security, for engineers who have to do it on a plant that is running. Rules of engagement first, then passive capture, careful enumeration, what an attacker does with a protocol that has no authentication, the Windows machines nobody mentions, the logging that would have caught it, and a report written in the language of consequence.

Write rules of engagement with a window, a named owner and an abort condition, for a plant that cannot stop
Draw the zones yourself and test each conduit from the side it is meant to protect
Capture and read ICS traffic in Wireshark, tshark and Zeek before sending a single packet

12 modules 8h 50mView course

FreeCybersecurityBeginner

ICS Security Foundations: Control Systems, Defence in Depth and the 62443 Requirements

The ground floor of industrial cyber security, taught through the systems themselves: what a DCS, PLC, SCADA, BACS and safety system actually do, the Purdue model, why OT is not IT, how industrial attacks unfold, defence in depth and a layered architecture, then the seven ISA/IEC 62443 foundational requirements one at a time, asset registers, segmentation, discovery, IDS and IPS, secure remote access, SIEM and endpoint protection.

Tell a DCS, PLC, SCADA, BACS and safety system apart
Place any device on a Purdue level and defend the choice
Explain why an IT security policy cannot be applied to a plant

11 modules 4h 46mView course

FreeCybersecurityIntermediate

OT and ICS Cybersecurity with ISA/IEC 62443

Free OT security course for automation and IT staff: Purdue zones, ISA/IEC 62443 security levels, risk assessment. The certificate is optional and paid.

Explain OT versus IT security and the threat landscape
Map plants with the Purdue model into zones and conduits
Apply ISA/IEC 62443 parts, roles and security levels

16 modules 43h 50mView course

FreeCybersecurityIntermediate

Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers

Harden the PLCs you already program: Siemens access levels, know-how, copy and project protection, secure communication and users, Rockwell source protection, CIP Security and zones, and the Top 20 Secure PLC Coding Practices, from the people who wrote them.

Explain how controllers are attacked and which controls break each step
Set Siemens access levels and use the TIA Portal security wizard
Apply know-how, write, copy and project protection

9 modules 4h 51mView course

FreeCybersecurityBeginner

CompTIA Security+ (SY0-701) Exam Prep

Prepare for CompTIA Security+ SY0-701 with Professor Messer's complete free video course: every exam objective across the five domains, with EDWartens notes, worked calculations, practice questions and an optional security project. Exam preparation only: the EDWartens certificate is not the CompTIA Security+ certification, which is earned only by passing CompTIA's exam.

Classify security controls and explain CIA, AAA and zero trust
Explain PKI, encryption, hashing and digital signatures
Recognise threat actors, vectors, social engineering and attacks

13 modules 15h 11mView course

FreeCybersecurityBeginner

Cybersecurity Fundamentals for Beginners

Start in cybersecurity from zero: the eight security domains, the CIA triad, risk and the NIST frameworks, networks and firewalls, Linux and access control, malware, incident response, and how to communicate as an analyst, with honest advice on landing a first job. Built on Google's public Cybersecurity Certificate lessons.

Explain the eight security domains and where an analyst fits
Describe incidents using the CIA triad
Score risks and use NIST CSF 2.0 and the NIST RMF

9 modules 5h 57mView course

FreeCybersecurityBeginner

SOC Analyst Level 1 with Splunk

Train for a Level 1 SOC analyst role: what the job is really like, the incident response process, the Windows event IDs you read every shift, Splunk search and SPL, hunting through Boss of the SOC v1, Wireshark traffic analysis, phishing email analysis, and MITRE ATT&CK with free threat intelligence.

Describe the SOC analyst's job, tools, verdicts and metrics
Follow the incident response process and contain without losing evidence
Read Windows logon, account and process event IDs

9 modules 4h 47mView course

FreeCybersecurityBeginner

Cloud Security Fundamentals: AWS and Azure

Secure what you run in AWS and Azure: the shared responsibility model, AWS IAM and Microsoft Entra ID with Conditional Access, zero trust, network security groups and private endpoints, encryption and key management, and posture management with Defender for Cloud and Sentinel.

Explain what cloud security covers and how it differs from on-premises
Apply the shared responsibility model to IaaS, PaaS and SaaS
Write least-privilege AWS IAM policies and predict how they are evaluated

9 modules 5h 43mView course

FreeCybersecurityIntermediate

Cybersecurity for Building Automation: BMS and BACnet

Secure the building management systems you design, install or run: real building hacks, BMS network architecture and its weak points, hardening controllers and front ends, secure design with zones and conduits, BACnet Secure Connect, defence in depth for BACnet/IP, secure vendor remote access and zero trust.

Explain how buildings have been hacked and why a BMS can be a way into the business
Describe BMS architecture and find the weak points in BACnet, Modbus and MS/TP networks
Harden controllers, servers and accounts in the building's priorities

9 modules 5h 12mView course

FreeCybersecurityBeginner

Cybersecurity for Healthcare and Medical Devices

How hospitals are attacked and how they recover: WannaCry, AIIMS and Ascension, ransomware and double extortion, the HHS 405(d) practices, phishing aimed at clinical staff, connected medical devices and FDA Section 524B, patient data under India's DPDP Act, backups that survive ransomware, and incident response when patients are on the wards.

Explain why hospitals are targeted, using WannaCry, AIIMS and Ascension
Describe modern ransomware and double extortion
Apply the five HICP threats and ten practices

9 modules 3h 20mView course

FreeCybersecurityBeginner

Cyber Fraud and Security for Finance Teams

Stop the frauds aimed at finance teams: business email compromise, vendor bank-change and invoice fraud, fictitious vendors, the Arup deepfake video call, accounts payable controls that work, scam messages, passwords and MFA, data breach response, and audits, third parties and agreements.

Explain business email compromise and recognise its forms
Verify vendor bank-detail changes independently
Detect invoice fraud and fictitious vendors with simple analytics

9 modules 2h 19mView course

FreeCybersecurityBeginner

Cybersecurity for Small Business

Protect a small business without a security team: the owner's role, phishing and payment fraud, passwords and MFA, devices and Wi-Fi, ransomware and backups, customer data under India's DPDP Act, and what to do in the first hours of an incident. Built on public lessons from the FTC, CISA, the FBI and Professor Messer.

Explain why small businesses are attacked and rank the risks to your own
Lead security as an owner: responsibilities, budget and policies
Recognise phishing, scams and business email compromise, and stop fraudulent payments

9 modules 2h 46mView course

FreeCybersecurityBeginner

ISC2 Certified in Cybersecurity (CC) Exam Prep

Free preparation for the ISC2 Certified in Cybersecurity (CC) exam, mapped to the five domains of the outline effective 1 September 2026: security principles, security governance, identity and access management, networking and cloud security, and security operations and incident response, with original practice questions on every domain. Exam preparation only: the EDWartens certificate is not the CC, which is earned only by passing ISC2's exam.

Know the 2026 CC exam format, the five domains and their weights, and how to break down a scenario question
Apply the CIA triad, AAA, MFA, non-repudiation and privacy to real incidents
Score and calculate risk with SLE and ALE, and choose avoid, reduce, transfer or accept

13 modules 8h 45mView course

FreeCybersecurityIntermediate

IEC 62443 Cybersecurity Fundamentals Exam Prep

Preparation for ISA's ISA/IEC 62443 Cybersecurity Fundamentals Specialist exam, mapped to the topics ISA lists for its IC32 course: the 62443 series and roles, zones and conduits, FR1 to FR7, security levels, risk assessment, secure products. Free to learn; not the ISA certificate.

Map your study to the fifteen topics ISA lists for its IC32 fundamentals course
Place every 62443 part in its group and match it to the asset owner, service provider or product supplier
Partition a plant into zones and conduits using the reference model and defence in depth

15 modules 13h 51mView course

FreeCybersecurityBeginner

DPDP Act Compliance: India's Data Protection Law in Practice

India's Digital Personal Data Protection Act 2023 and the DPDP Rules 2025 in practice: who the law covers and when each duty starts, consent and legitimate uses, rule 3 notices, Data Principal rights, children's data, security safeguards and breach response with CERT-In's six-hour rule, retention, processors and transfers abroad, Significant Data Fiduciary duties, the Data Protection Board and penalties, RBI, SEBI and IRDAI overlays, and a compliance programme built step by step.

Decide whether the DPDP Act applies to an activity, and which duties are in force on a given date
Classify Data Principals, Data Fiduciaries, Data Processors and Consent Managers in a real data flow
Choose consent or the right section 7 legitimate use, and write a standalone rule 3 notice

14 modules 14h 24mView course

FreeCybersecurityIntermediate

OT Network Monitoring: Zeek, Suricata and Malcolm

Passive network security monitoring for industrial plants with free tools: where to tap, reading Modbus, S7comm, EtherNet/IP, DNP3 and BACnet in Wireshark, Zeek with the CISA ICSNPP parsers, Suricata rules for OT, Malcolm and Security Onion, asset inventory from traffic, baselines, MITRE ATT&CK for ICS detections and alert triage with plant operations.

Place a passive sensor by Purdue level and size a SPAN port, or choose a TAP
Read Modbus/TCP, S7comm, EtherNet/IP, DNP3 and BACnet traffic in Wireshark and spot writes and program transfers
Run Zeek with CISA's ICSNPP parsers and answer operational questions from its logs

15 modules 14h 28mView course

FreeCybersecurityIntermediate

SOC Analyst Level 2: Threat Hunting with Wazuh

Level 2 SOC skills in a free, open source lab: build a Wazuh 4.14 server, enrol Windows and Linux agents with Sysmon, write and tune detection rules, map them to MITRE ATT&CK, hunt persistence, credential access and lateral movement, handle incidents with NIST SP 800-61 Rev. 3, and measure your detections against an Atomic Red Team simulation in an isolated lab.

Know what Level 2 SOC work adds to Level 1 triage, and build a safe, isolated hunting lab
Install Wazuh 4.14, enrol Windows and Linux agents and troubleshoot them
Configure and tune Sysmon for the events hunters rely on

14 modules 13h 59mView course

FreeCybersecurityIntermediate

Microsoft Sentinel and Defender: SC-200 Exam Prep

Preparation for Microsoft's SC-200 Security Operations Analyst exam, mapped to the skills measured as of 21 October 2026: KQL from first query to hunting, Microsoft Defender XDR incidents and attack disruption, Defender for Endpoint, Office 365, Identity and Cloud Apps, Purview investigations, Microsoft Sentinel setup, data connectors, analytics rules, automation, Security Copilot and threat hunting.

Plan SC-200 study against the three skill areas and weights Microsoft publishes
Write KQL that filters by time, aggregates, joins tables and unpacks JSON for investigations
Work incidents in the Microsoft Defender portal and explain automatic attack disruption

14 modules 17h 49mView course

FreeCybersecurityIntermediate

ISO 27001:2022 Implementation: Build an ISMS

Build an information security management system to ISO/IEC 27001:2022, step by step: context, interested parties and scope, leadership and policy, risk assessment and risk treatment, the Statement of Applicability, the 93 Annex A controls in four themes, documented information and evidence, supplier, cloud, incident and continuity controls, internal audit and management review, corrective action, the stage 1 and stage 2 certification audits, and how the ISMS maps to GDPR, NIS2, SOC 2 and NIST CSF 2.0.

Plan an ISO 27001:2022 implementation with a gap analysis and a phased roadmap
Write the context, interested parties and a credible ISMS scope, including the 2024 climate amendment
Set risk criteria, run a risk assessment and calculate risk levels against an acceptance threshold

14 modules 13h 20mView course

FreeAI and machine learningIntermediate

AI Security and the OWASP Top 10 for LLMs

The security course for people who have already built something with an LLM: the attack surface a model adds, all ten 2026 OWASP LLM risks one at a time, indirect injection and zero-click agent attacks, what leaks out through a chatbot, securing agents with identity and least privilege, the OWASP MCP and agentic guidance, red-teaming with MITRE ATLAS, and the NIST-based governance a plant or a GCC can actually enforce.

Draw an AI feature as its parts and mark where an outsider's text can enter
Name all ten 2026 OWASP LLM risks and sort a real incident into the right one
Trace an indirect injection from a poisoned document to an executed action

15 modules 9h 21mView course

Compare the Cybersecurity courses

Course	Level	Modules	Video	Brand
OT Security Assessment: Testing a Plant Without Stopping It	Intermediate	12	8h 50m	Vendor-neutral
ICS Security Foundations: Control Systems, Defence in Depth and the 62443 Requirements	Beginner	11	4h 46m	Vendor-neutral
OT and ICS Cybersecurity with ISA/IEC 62443	Intermediate	16	43h 50m	Vendor-neutral
Cybersecurity for PLC Programmers: Hardening Siemens and Rockwell Controllers	Intermediate	9	4h 51m	Vendor-neutral
CompTIA Security+ (SY0-701) Exam Prep	Beginner	13	15h 11m	CompTIA
Cybersecurity Fundamentals for Beginners	Beginner	9	5h 57m	Vendor-neutral
SOC Analyst Level 1 with Splunk	Beginner	9	4h 47m	Vendor-neutral
Cloud Security Fundamentals: AWS and Azure	Beginner	9	5h 43m	Vendor-neutral
Cybersecurity for Building Automation: BMS and BACnet	Intermediate	9	5h 12m	Vendor-neutral
Cybersecurity for Healthcare and Medical Devices	Beginner	9	3h 20m	Vendor-neutral
Cyber Fraud and Security for Finance Teams	Beginner	9	2h 19m	Vendor-neutral
Cybersecurity for Small Business	Beginner	9	2h 46m	Vendor-neutral
ISC2 Certified in Cybersecurity (CC) Exam Prep	Beginner	13	8h 45m	Vendor-neutral
IEC 62443 Cybersecurity Fundamentals Exam Prep	Intermediate	15	13h 51m	Vendor-neutral
DPDP Act Compliance: India's Data Protection Law in Practice	Beginner	14	14h 24m	Vendor-neutral
OT Network Monitoring: Zeek, Suricata and Malcolm	Intermediate	15	14h 28m	Vendor-neutral
SOC Analyst Level 2: Threat Hunting with Wazuh	Intermediate	14	13h 59m	Vendor-neutral
Microsoft Sentinel and Defender: SC-200 Exam Prep	Intermediate	14	17h 49m	Microsoft
ISO 27001:2022 Implementation: Build an ISMS	Intermediate	14	13h 20m	Vendor-neutral
AI Security and the OWASP Top 10 for LLMs	Intermediate	15	9h 21m	Vendor-neutral

Why learn Cybersecurity in India

Every organisation now has to show it can defend its systems, from a hospital's records to a plant's PLCs, and employers struggle to find people who can do the defending.

Questions

Is this offensive security?: No. It is defence: architecture, standards, detection, risk and response.
Where should I start?: Cybersecurity Fundamentals if you are new to the field. Engineers who work with PLCs, SCADA or building systems can go straight to the OT courses, which are written for them.
Is OT cybersecurity a job for network engineers or automation engineers?: Both, and the shortage is on the automation side: people who know what a PLC does and can read IEC 62443.

Classroom course, Bangalore

PLC training in Bangalore

The Automation Engineer Program (AEP) is our classroom course in PLC programming and industrial automation, taught in person at our Electronic City centre.