Practical Cyber Threat Intelligence Training
Cyber Threat Intelligence Training Platform: For those who want to learn this field from the beginning.
“While I was at a very basic level in the first period I started CTI Academy, thanks to CTI Academy, I reached a level that will be noticed at the end with theoretical and practical lessons.
Built for beginners, graded like the job.
Lessons end on an exercise, not a summary. Simulators reset every night. Missions put you in a role. What you practise is graded on what you recovered, so capability becomes something you can show rather than claim.
Five surfaces, and none of them are a slide deck
We put a real case in front of you
Drop an email, alias, domain or wallet into LeakLens and follow where it goes. The same pivot you would run at work, on data that cannot hurt anyone.
- Expand entities and control how deep the graph goes
- Filter by relationship strength to cut the noise
- Keep the work in a case you can come back to
- Isolated datasets, nothing touches a live person
Analysts and teams trust CTI Academy
CTI Academy contributed a lot to me both theoretically and practically. Since the lecturers were from the sector, their professional experience was also very helpful.
What I like most about CTI Academy is how easy the interface is to use. It’s simple to navigate and I can quickly find what I’m looking for without getting confused.
The best part of CTI Academy is its practical, real-world approach to cybersecurity education. The courses are well-structured, up-to-date, and focused on industry-relevant skills.
The courses are well-organized and easy to follow, even if you don’t have a strong background in tech. I liked how the lessons are broken down into manageable pieces.
It provides both guidance for a student and self-improvement for a working person.
The program allowed me to develop my theoretical and practical skills. With industry professionals as instructors, we gained valuable insights and had the chance to apply our knowledge through hands-on tasks and projects.
I like CTI Academy’s practical real-world approach and how it makes complex cyber threat intelligence topics easy to understand. Additionally, it was very easy for newbies during the initial setup.
CTI Academy is great for improving skills in the cyber threat intelligence field. It gives you a chance to practice and strengthen your skills and knowledge.
The interactive and practical nature of the lessons prepared me for future sectors. I feel very lucky to be a part of the CTI Academy family.
The communication skills and interest of the educators were extraordinarily good.
From the CTI Academy blog
Certificate Transparency: A Practical Guide for Defenders
In October 2026 Google disclosed that attackers who hijacked three country-code domains had obtained real certificates for Google and other organizations, and that certificate transparency log data revealed more organizations believed to be affected. This guide explains how CT logs work, how to monitor your own domains, and how analysts use CT to catch lookalike domains and pivot on actor infrastructure, including the limits that trip people up.
Threat Intelligence Analyst Interview Questions and Answers
Real threat intelligence analyst interview questions with short model answers, from the intelligence lifecycle and the Pyramid of Pain to live pivots and competing hypotheses. Includes an annotated take-home sample, a five-beat structure for current-threat questions built on October 2026 events, and a two-week prep plan.
Cyber Threat Landscape 2026: Where the Reports Disagree
Microsoft says the median time from discovery in the wild to weaponization is well under 24 hours, while VulnCheck puts the median time from CVE publication to KEV listing at 80 days. We read the six big 2026 threat reports side by side to show where they agree, where they split, and why their numbers clash.
Simple pricing, billed in euro
Start with the free learning paths, move to Premium when you need every path and the labs, or equip a whole security team with Team Workspace.
Billed monthly in EUR. Cancel anytime.
- First modules of every other path
- Core missions
- Daily simulator runs
- 30 minutes of lab network access per day
- Everything in Free
- All three simulators, each with its own daily set
- Lab network with no daily cap
- Real-world hands-on missions to build muscle memory
- Hands-on threat hunting via LeakLens
- NullBase forum access
- AI performance analyzer
- Shareable certificates to boost your resume
- Everything in Premium
- Partner university email verification
- Six-digit code, verified in minutes
- Student rate for as long as you qualify
Teams are priced by team size. Compare plans and billing questions
Bring the whole team onto the same casework
Team Workspace gives every analyst a full Premium seat and gives you one view of who has done what, where each person stands and which areas the team still has to cover.
- Progress, activity and skills for every member
- Onboarding and live training included
- Priced by team size
Your questions, answered.
How the range works, how you are graded, and what you leave with.
No. The learning paths start from zero, with Cybersecurity Foundations and the intelligence lifecycle, and assume no prior background. If you already work in a SOC, you can skip ahead and go straight at the simulators and missions.
Eleven paths are live, from beginner to advanced: Cyber Threat Intelligence, Cybersecurity Foundations, Open Source Intelligence (OSINT), Human Source Collection for CTI, Attack Surface Management, Advanced OSINT Investigations, Phishing Investigation & Email Threat Analysis, Threat Actor Profiling & Attribution, Cybercrime Underground Intelligence, Fraud & Financial Crime Intelligence and CTI Reporting & Briefing. Each path is split into modules of short lessons. Every lesson closes on a quiz, and the sections include investigation missions where you work a case on the same tools an analyst uses. Finish a path and you earn a certificate you can add to LinkedIn. The Cyber Threat Intelligence path is free from start to finish, the first modules of every other path are free, and Premium unlocks the rest. Browse the learning paths.
LeakLens is our investigation graph: you drop in an email, alias, domain or wallet, expand entities, control the depth and filter by relationship strength until a defensible picture appears. NullBase is a simulated underground forum where you practise reading sellers, validating leaks and keeping your own research quiet. Both run on prepared datasets, so nothing you do touches a real person or a live service.
Each simulator gives you a fresh set of questions that resets nightly. SOC asks you to report, dismiss or escalate; phishing asks for a verdict; attack asks for the kill-chain phase and the ATT&CK technique, and both have to be right. Correct answers bank points, wrong ones cost you, and finishing any one simulator keeps your streak alive. Whatever you leave unsolved carries over rather than disappearing.
Missions put you in a role: Intelligence Bureau for casework from a file, Backchannel for infiltration where you play the other side, and Workstation for hands-on machine work. Arena is competitive: you invite up to 25 players with a code, solo or in teams, and everyone races through the same mission. Missions build the habit, Arena tests it under pressure.
A contained network you reach over VPN, with real hosts, captures and artifacts. Nothing in it touches the public internet or a production system. Free accounts get a daily time allowance, Premium removes the daily limit.
Premium is 15.99 EUR a month or 159.99 EUR a year. Premium starts with a 3-day free trial if you have not subscribed before: nothing is charged until it ends, and cancelling before then costs nothing. Students at a verified university pay 8.99 EUR a month or 90.00 EUR a year: you enter your student email, confirm a six-digit code, and if we already know the domain you are approved immediately. Teams are priced by team size, see Team Workspace.
Ready to open your first case?
Start free, run today's mission, and see how the grading works before you pay for anything.
Create free account