Hands-on SOC training · free to start

A map of the job. Watch it light up.

Every skill a SOC analyst uses, laid out as one map. Pick where you’re headed and see the exact lessons between you and it.

FoundationNetworkingSystemsSecurityProgrammingDetectionSOC OpsThreat IntelMalware & RE
Ed Mercer
Ed Mercer · SOC Lead
Finish this and you’re on my team. Season Zero is your first shift.
Unlocks: Season Zero: your first shift

12 lessons on the SOC Analyst route · about twelve minutes each · the first tier of every zone is free

nodes on the map
56
career zones
9
guided routes
7
free story episodes
5
members
800+
Then the real thing

Finish a node.
Work a case with the team.

Cases are investigations, not quizzes. A ticket from the team, logs to search, the events that prove it pinned as evidence, and a call to make. Close one well and your rapport with the team goes up. Five free cases to start: email, SIEM, endpoint and threat intel.

  • Ed MercerEd MercerSOC Lead · incident leadership
  • Mara VanceMara VanceTech Lead · siem & endpoint
  • Tess HarrowTess HarrowEmail Specialist · email security
  • Eli NavarroEli NavarroThreat Intel · threat intelligence
See the casesNo homelab. No VM. It runs in the tab you’re in.
Season Zero · free · 2-3 hours

Your first week was supposed to be easy.

Mon 8:47 AM
Your first day on the team.
“You picked a quiet week.”
Ed Mercer, SOC Lead
A routine phishing report…
…just escalated into something bigger.
He was wrong.
Episode 1 · First Day · free

Five episodes, one unfolding incident, the same four people. Start here if you’ve never worked an alert, or if you want to feel the job before you commit to the map.

  1. 01First Day25-30 min
  2. 02Inbox Zero30-40 min
  3. 03Follow the Thread35-45 min
  4. 04Lateral40-50 min
  5. 05Containment40-50 min
Progression

Every lesson pays. Every module opens a case.

Nothing here is a certificate of attendance. XP lands as you finish lessons, the map lights up node by node, and your record shows the exact distance to the next title.

1 · As you learn
  • Lesson complete+10 XP
  • Module complete+10 XP
  • Case closed+40 XP

You see the XP land while you work, not a week later.

2 · On the map
LogsSIEMSPLCase

The map is the progress bar. There is no other one.

3 · On your record
1,250 XP
Analyst I · 850 to Analyst II
600 XP2,100 XP5,500 XP

Every award has a receipt.

Recall

It fades. We tell you.

Every card you rate inside a lesson gets a memory score that drops if you leave it alone. When a finished node starts to fade on the map, a four-minute review brings it back. No streak to break.

Network Basics
Done three weeks ago. Fading.
Top it up · 4 min
When you need the cert

Exam prep, scored by domain.

Timed simulators for Security+, Network+ and A+, flashcards by domain, and a dated 30-day Security+ plan.

Pricing

Start free. Pay when the map runs out.

Free$0

The whole map to look at, the free nodes to learn, Season Zero, the free cases, recall, your record.

No card. Progress is kept if you upgrade later.
Premium7-day free trial
$25a monthor $15 a month billed yearly ($180)

Every node, every track, every case, the exam simulators, Season One.

Start the trialCancel any time. You keep everything you finished.
Questions

Fair ones.

No. The map starts at "How Computers Work" and builds through networking, operating systems and security basics before it branches. Season Zero teaches the tools inside the story before it asks you to use them. If you can use a browser, you can start today.

Open the map.
See what you already know.

Three minutes to sign up, no card, and the first node is waiting. If you’d rather feel the job first, Season Zero is free too.

EpicDetect | A map of the SOC job, with hands-on cases and a team | EpicDetect