XP, Levels & Badges

Here is exactly how progress works on EpicDetect: what earns XP, what a level means, where badges come from, and how the weekly rhythm and leaderboard count.

XP & Levels Badges Weekly Rhythm Leaderboard

XP & Levels

You earn XP the first time you finish a lesson, a module, a case, an adventure episode or a season. Finishing the same thing twice earns nothing new.

A lesson10 XP
A module, on top of its lessons10 XP
A case40 XP
An adventure episode25 XP
A whole adventure season100 XP

Each level takes a little more XP than the last: 100 for level 1, then 200 more, then 300 more. Your title changes at these levels:

Trainee

Level 0 · 0 XP

Analyst I

Level 3 · 600 XP

Analyst II

Level 6 · 2,100 XP

Senior Analyst

Level 10 · 5,500 XP

Lead

Level 15 · 12,000 XP

Principal

Level 20 · 21,000 XP

Nobody's level goes down when the curve changes: you keep the level you had.

Badges

There are 19 skill badges, and each one names something you can do. You earn one when you finish the last thing it asks for, and it shows up on your profile. Badges add no XP.

Route badges

Finish every module and episode on a certification or role route. Some route badges need premium modules.

SOC Analyst Route
Can work a Tier 1 alert from raw log to a written verdict.
Security+ RoutePremium
Can reason through every Security+ domain on a real alert, not a flashcard.
A+ RoutePremium
Can take a machine from 'won't boot' to fixed and written up.
Network+ RoutePremium
Can trace a request hop by hop and name the one that dropped it.
Linux Admin Route
Can find what a process is doing on a Linux box without guessing at flags.
Cloud Security RoutePremium
Can spot the misconfigured bucket before it makes the news.
Threat Intel Route
Can turn a pile of indicators into something a decision-maker can act on.

Zone and season badges

Finish a set of modules in one zone of the map, or every episode of an adventure season.

IT Core
Can explain what the machine, the OS and the network were doing when the alert fired.
Windows & Active DirectoryPremium
Can tell a normal Active Directory change from an attacker's.
Python for Defenders
Can script the boring half of an investigation.
Log Reader
Can find the three lines that matter in ten thousand.
Career Map
Can say which security job fits and what it takes to land it.
Malware First LookPremium
Can pull the tells out of a suspicious file without running it.
Season Zero
Can run an incident with a team from the first alert to the debrief.

First-case badges

Solve your first case in a discipline: email, endpoint, SIEM, threat intel or malware analysis.

Inbox Triage
Can take a reported phish from inbox to verdict.
Endpoint First Response
Can read a process tree and say what the macro actually did.
Log Pivot
Can chase one failed login across a whole auth log.
Intel Pivot
Can pivot from one domain to the infrastructure behind it.
First Specimen
Can take apart a real malware sample with static analysis.

The SOC simulator also awards badges: for closing your first case, keeping SLAs, and earning each teammate's trust. They sit on your profile next to your skill badges.

Open the SOC

Weekly rhythm

A week counts when you are active on 3 different days in it: a lesson section, a recall review, a case, a problem or an episode phase. Signing in on its own does not count.
Your rhythm is the number of counted weeks in a row. It shows on your dashboard as the week you are on.
Every 4 counted weeks bank a rest week, up to 2. Miss a week and a banked rest covers it on its own, so the rhythm holds.
The rhythm earns no XP. XP is for finishing things.