NewHunter I is now free foreverStart learning today arrow_forward

Cyber Threat Intelligence Training for Beginners

Cyber Threat Intelligence Training Platform: For those who want to learn this field from the beginning.

Create free accountarrow_forward

Built for analysts starting from zero

We started CTI Academy because we kept seeing the same gap. Brilliant people who wanted to break into threat intelligence, blocked by courses that skipped fundamentals and certifications that tested memorization instead of skill.

Every course at CTI Academy starts at the actual beginning. No prerequisites, no jargon walls, no shame in asking basic questions. You will touch real data, follow real workflows, and learn the craft the way it is practiced.

CTI Academy owl mascot

Cyber Threat Intelligence

Learn to collect, analyze, and act on threat data the way real SOC and intel teams do.

Threat Hunting

Go beyond alerts. Proactively hunt for adversaries hiding in networks using techniques pros rely on.

OSINT

Open-source intelligence is more than Google dorking. Dive into social media analysis and infrastructure mapping.

Malware Analysis

Static analysis, dynamic analysis, reverse engineering. We walk you through real samples step by step.

Your CTI learning path, starting from scratch

CTI Academy is designed for learners with no prior experience. Follow a structured path from foundational concepts to real-world threat hunting workflows.

stairs
Step 01

Choose your level

Start at Hunter I for free. Progress through Hunter IV as your skills grow.

menu_book
Step 02

Learn by practice

Structured lessons, quizzes, and CTF-style challenges built around real threat scenarios.

sports_kabaddi
Step 03

Compete and share

Test your skills in duels and arena matches. Share intelligence on NullBase community.

workspace_premium
Step 04

Get certified

Earn course completion certificates as you progress from Hunter I through Hunter IV.

Start your journeyarrow_forward

How it works

From structured lessons for beginners to competitions and real-world research tools, every element works together seamlessly.

Structured learning with real-world challenges

Progress through carefully crafted modules that combine theory with hands-on CTF-style challenges. Each course builds on the previous, creating a comprehensive learning path.

  • check_circleMulti-level courses from beginner to expert
  • check_circleCTF-style challenges with step-by-step progression
  • check_circleInteractive quizzes and practical exercises
  • check_circleCourse completion certificates
Courses interface

Field notes from CTI practitioners

Tutorials, threat breakdowns, and lessons learned from analysts working in the field.

ClickFix, Explained: a fake browser verification popup showing a PowerShell command with a Copy button, the classic ClickFix lure
CTI

ClickFix, Explained: The Attack That Turns Users Into the Payload

There is no exploit in a ClickFix attack. The victim runs the malware themselves, copying a command off a fake CAPTCHA or update page and pasting it into their own machine. In 2025, Microsoft attributed 47% of all initial access intrusions it tracked to this one technique. This guide breaks down how ClickFix works, dissects three real campaigns, and covers exactly how to detect and defend against it.

calendar_today2 days agoschedule16 min read
View all postsarrow_forward

Common questions

Answers to what most beginners ask before joining.

Yes. Hunter I, the entry level, assumes nothing. Lessons start with what a threat is, how analysts think, and how to read basic intelligence reports. By the end of Hunter I, you will have practiced enough to understand what mid-level material is asking of you.
Hunter I is free, forever. You can complete the full entry-level path, earn the certificate, and join the community without paying. Premium unlocks Hunter II to IV, advanced labs, and the LeakLens simulator.
Most learners complete Hunter I in two to four weeks at a casual pace of three to five hours per week. The platform is self-paced. You can move faster if you have time, slower if you do not.
Courses are structured learning paths with lessons, quizzes, and progression. Challenges are CTF-style puzzles where you apply what you learned. Courses build your knowledge. Challenges prove you can use it under pressure.
Course completion certificates demonstrate hands-on skill and are increasingly recognized by hiring managers in the CTI space. Each level certificate proves you completed real, practitioner-graded work, not just memorized content.
Every challenge has a hint system that nudges without giving away the answer. Beyond that, NullBase has dedicated help threads where instructors and senior learners respond, usually within a day.
Yes. The malware analysis track starts with what a binary is and how to inspect one safely. We walk through static analysis tools, dynamic sandboxing, and progress into reverse engineering with real samples in controlled environments.
Fully self-paced. There are no enrollment windows, no fixed schedules, no expiration on lessons. The only time-bound activities are daily challenges and duels, both optional.
NullBase is our practitioner community where learners and instructors discuss real campaigns and share IOCs. It is not required, but most learners find their biggest leaps happen there. Lurking is welcome.
General platforms are built for breadth. We are narrow on purpose. Every course is built by practicing CTI analysts, every lab uses tooling close to what the industry actually runs, and the community is filtered to people in the field. You will not find a marketing course next to ours.
A cyber threat intelligence course teaches you to collect, analyse, and act on data about adversaries: their tools, techniques, and intentions. The goal is to help defenders stay ahead of attacks. CTI Academy courses are built for anyone who wants to enter the CTI field: security analysts, SOC operators, IT professionals, or complete beginners with no prior security background.
Yes. Hunter I, our entry-level cyber threat intelligence course, starts from first principles and assumes no prior knowledge. By the time you finish it you will understand how analysts think, how to read and produce intelligence reports, and how to apply basic threat hunting techniques. The course is free and self-paced.
The platform covers the full CTI skill stack: foundational threat intelligence concepts, OSINT (open-source intelligence), HUMINT, malware analysis, threat hunting, attack surface management, and PRISM certification preparation. Courses progress from beginner through advanced practitioner levels.

Ready to start your CTI journey?

Create a free account, no credit card needed, and begin Hunter I today.

Create free accountarrow_forwardTalk to us
CTI Academy owl mascot waving