Cybersecurity Bootcamp
Find the vulnerability, prove it against a withheld key, fix it.
Cybersecurity Bootcamp is a 12-week live online bootcamp, taught on Zoom by one instructor at about 15 hours a week, with 6 deployed projects and a one-to-one every week. The founding price is A$200, down from A$400. Live sessions run on weekday evenings from 5:30 PM Sri Lanka and India time, with full-day sessions at weekends.
- Week 1Firewall BaselineA Linux server with a firewall, SSH keys only and a checked list of open ports
- Weeks 1–2FoundationsA hardened server with a written threat model, deployed
- Week 3Recon ReportA reconnaissance report of a lab network with every open service listed
- Weeks 3–4OffenceA penetration test of a lab application with a report, published
- Weeks 5–6DefenceA detection pipeline that catches the block-two attacks, deployed
- Week 7Bucket Audit ScriptA Python script that lists AWS S3 buckets and flags any with public access
- Weeks 7–8Cloud and identityA cloud environment audited and fixed, with evidence
- Week 9Prompt Injection TestA set of prompt injection attacks run against a small chatbot, with results logged
- Weeks 9–10AI securityThe capstone: an AI application red-teamed and hardened, with the report
- Weeks 11–12Employer brief and hiring sprintThe employer brief shipped, and demo day
- weeks, live on Zoom
- 12
- hours a week
- 15
- projects to build
- 10
- minutes 1-1, every week
- 30
Who it is for, and what you receive.
Career-changers and IT people who are comfortable with computers and curious, and want to find the vulnerability, prove it against a withheld key, and fix it. No security background needed.
Comfortable with computers and curious; no security background needed.
- Live on Zoom
- 4h
- Recorded lessons and exercises
- 6h
- The project
- 5h
- 1
Six deployed projects
Each graded by Nova against a published rubric and signed off by the instructor at the gate.
- 2
The recorded lessons
The track's lessons and exercises, graded line by line, open for twelve months after the cohort ends.
- 3
Live on Zoom every week
A 90-minute live code review, a 60-minute squad lab, 60 minutes of office hours, and a 30-minute 1-1 with your instructor.
- 4
Your hiring plan
Opened in week 1 and reviewed in every 1-1: target roles, the gap map, the proof list, weekly actions, an interview log, the outcome.
- 5
The record
Every grade and every project with its repository at square1ai.com/u/{handle}, and the recording of your viva, verifiable by any employer.
- 6
The certificate
A credential ID that resolves at square1ai.com/verify to the real completion.
- 7
The hiring sprint
Weeks 11 and 12: CV and portfolio from graded work, applications, mock interviews scored against the role, demo day.
- 8
Nova for twelve weeks
A tutor with every submission of yours in its memory, at 2am as well as in class.
Twelve weeks in six parts.
Each part teaches for a week, then you build and deploy a project, then a gate checks it before the next part opens. The project and its gate are the part's entry on your record.
Live time each week on Zoom: a 90-minute class where the instructor reviews real submissions, a 60-minute squad lab, 60 minutes of office hours, and your own 30-minute 1-1. Nothing is lectured live; the recorded lessons do that.
- Key skillsNetworks, identity and encryptionLinux and the command lineThreat modellingWeek 1
Foundations
- Networks, identity, encryption
- Linux and the command line
- Threat modelling
You build: A hardened server
Week 2Project 1: hardened
- Scanning your own work
- Writing a threat model
You build: A hardened server with a written threat model
Project 1 · the gate at week 2Hardened
A hardened server with a written threat model, deployed
You hand in- Hardened server
- Threat model
- Scan results
The gateA scan of the server finds nothing critical.
What you can do by week 12.
Six deployed security projects and reports covering offence, defence, cloud and AI, each verified against ground truth rather than an opinion.
- 1
Harden a server and write a threat model for it.
- 2
Run reconnaissance, scanning and web-application attacks in a lab and report findings professionally.
- 3
Build detection with logging and a SIEM, and run incident response.
- 4
Audit and fix cloud security posture, identity and secrets.
- 5
Attack and defend an LLM application, and use AI in security operations.
- 6
Defend a finding from discovery to fix, on camera.
No placement rate is shown, because there are no graduates to count yet. The roles above are what the projects are built for.
Your record at week 12.
Every exercise and project is graded by Nova against a rubric you can read, and every grade is kept on one page an employer can open and run. This is what the programme writes to it.
- Graded, line by line
- Nova reads every submission against the brief and the rubric and returns a score, what you did well and what to fix.
- Six gates
- A block does not open until the previous project passes its gate. You always know where you are and what is next.
- A weekly 1-1
- Thirty minutes with your instructor, who has already read your code before the call.
- One page an employer can run
- Every grade, project and the viva recording at /verify. An employer opens it, runs the code and watches you defend it.
- Week 2Graded, gate signed
Hardened
A scan of the server finds nothing critical
- Week 4Graded, gate signed
The pentest
Findings are verified against the withheld answer key
- Week 6Graded, gate signed
Detection
The attacks are detected and triaged
- Week 8Graded, gate signed
Posture
The posture score meets the bar
The entries, not the grades: those are yours to earn. The page lives at /verify and an employer needs no account to open it.
8 entries, twelve weeks. Reserving a spot holds the founding price.
Reserve a seatHow we help you find a job.
The last block is not curriculum. It is the hiring sprint, and the proof you built in the ten weeks before it.
The whole plan on a few pages: the parts, the projects, the gates and the price. We email it to you.
Get the booklet- 1
Your hiring plan, from week 1
Six parts you and your instructor keep: target roles, the gap map from real postings, the proof to send, weekly actions, an interview log, the outcome. Read before every 1-1.
- 2
The hiring sprint
Weeks 11 and 12: CV, portfolio, applications, mock interviews, and demo day in front of hiring partners.
- 3
A record an employer can run
Your deployed projects and the recorded viva on /verify. An employer opens it, runs the code and watches you defend it.
- 4
The career agent
Paste a real job posting at /career and it maps the role to your graded work and what to do next.
- 5
The roles directory
Every role we prepare people for, what it pays and what it asks, at /roles.
Questions people ask.
About Cybersecurity Bootcamp, answered from the plan on this page.
- AI Security Engineer Career Path: Skills and Roadmap
- AI in Cybersecurity
- Enhancing Zero-Trust Security with AI
- SOC Automation vs Human Analysts: Who Wins in 2026?
- SOC Analyst Essentials · 9.5 h on demand
- Cybersecurity Foundations · 14 h on demand
- Web Application Security · 9.5 h on demand
One cohort, one instructor. Hold your spot.
A cohort of 25, one instructor, 12 weeks, six things you ship. Spot holders hear the start date first, and nothing is charged before you confirm.
- Six deployed security projects and reports
- A recorded viva
- Your record on /verify
About a minute. No account, no card, and nothing is charged until you confirm.
