A free, fully offline cybersecurity learning platform. 15 tracks, 118 modules and 4,140 graded questions, aligned to CompTIA Security+ / CySA+ and CISSP domains, with a practical SOC and blue-team focus throughout.
No account, no server, no internet connection, no tracking. Open index.html and start.
Most free security training is either a wall of video or a bare quiz bank with no teaching behind it. This is built the way people actually learn a technical subject: a short explained module, then graded practice at three levels, then a mastery quiz you have to earn your way into.
It runs entirely in the browser from local files, so it works on a locked-down machine, on a train, or anywhere the network is not your friend.
Every module follows the same loop:
| Stage | What happens |
|---|---|
| Learn | A focused explanation with worked examples and offline SVG diagrams |
| Practice | Graded questions at three levels: Recall, Apply, Challenge |
| Quiz | A mastery check that stays locked until the practice has been attempted |
Progress, XP and a daily streak are kept in localStorage. The quiz rotates its question order on every retake, so a second attempt is not a memory test, and multiple-choice options are shuffled at load so the answer is never predictably in the same position.
There is an optional read-aloud mode built on the browser's own speech engine, which also works offline.
Start here
- Git & GitHub — Prove Your Skills (6 modules)
Phase 1 · Security Foundations
- Security Fundamentals · Threats & Attacks · Cryptography · Identity & Access
Phase 2 · Securing Systems & Networks
- Network Security · Endpoint Security · Cloud & Infrastructure Security · Application Security
Phase 3 · Operations & Defence
- Security Operations (SOC/SIEM) · Incident Response · Threat & Vulnerability Management · Data Protection & Privacy
Phase 4 · Governance, Risk & Career
- Governance, Risk & Compliance · Security Career, Ethics & Capstone
UK context is woven in where it matters: UK GDPR, the Data Security and Protection Toolkit and Caldicott principles appear in the data protection and governance tracks.
Totals: 15 tracks · 118 modules · 2,754 practice questions · 1,386 quiz questions.
Simplest. Open index.html in any modern browser. That is the whole install.
With the progress dashboard. Run start-server.bat (needs Python, no packages), then visit http://localhost:8982; the dashboard is at /progress. The server exists only to persist progress to disk. The learning content never needs it.
The only dependency is jsdom, and only for the tests.
npm install
npm testThat runs three gates:
| Gate | Checks |
|---|---|
npm run validate |
Every auto-marked answer key actually marks its own answer correct |
npm run projects |
Every track's project definitions load and grade |
npm run smoke |
The app boots in jsdom and renders a module end to end |
Content is plain JavaScript objects under tracks/<track>/content/, so adding a module means adding a file and a script tag, not learning a framework.
A few decisions that shaped it:
- Offline is a hard requirement, not a feature. No CDN, no web fonts, no analytics, no external images. Everything ships in the repo.
- The quiz is gated behind practice. Attempting the practice first is what makes the quiz meaningful, so the engine enforces it rather than suggesting it.
- Answer position is randomised. A fixed correct-answer position teaches pattern matching instead of the subject.
- Marking is validated, not assumed.
scripts/validate.jsre-marks every authored answer using the real grading code, because a quiz that silently mis-marks is worse than no quiz at all.
MIT, see LICENSE. Code and content are free to use, adapt and share.