Security

24 skills in 6 steps, from “Write, verify and deliver Rego policies” to “Understand threats and reason about defense”.

Start · Write a correct Rego policy in OPA 1.x syntax, and predict what it returns All skills

24 skills to acquire in this domain
6 steps in the order you learn them
0/24 acquired from your progress, in this browser
4 prerequisite domains to know before starting here

Your path

The domain's steps

In the order you learn them: each step builds on the previous one. Your status is computed in your browser, from what you have read and passed (quizzes, labs).

1

Write, verify and deliver Rego policies

4 skills
See the 4 skills
- Write a correct Rego policy in OPA 1.x syntax, and predict what it returns 4 lessons · ~2 h 35 · then its quiz
- Verify a Rego policy: tests, coverage, lint and CI checks 3 lessons · ~1 h 50 · then its quiz
- Enforce Rego policies on configuration files in a CI pipeline 1 lesson · ~45 min · then its quiz
- Package, sign and distribute Rego policies to OPA instances 1 lesson · ~40 min · then its quiz
2

Secure the delivery chain

2 skills
See the 2 skills
- Assess your software supply chain's exposure and respond to a compromised component 7 lessons · ~3 h 00 · then its quiz
- Replace the shared secret with a verifiable machine identity (OIDC) 4 lessons · ~2 h 10 · then its quiz · a lab
3

Hold a system's secrets, from inventory to leak

6 skills
See the 6 skills
- List a system's secrets, rank them by criticality and keep their register 3 lessons · ~1 h 25 · then its quiz
- Store a secret in a vault and read it without ever writing it in clear 3 lessons · ~1 h 35 · then its quiz
- Scope access to a vault to the strict minimum and explain a denial 2 lessons · ~1 h 25 · then its quiz
- Issue a secret with a bounded lifetime, renew it and revoke it in an emergency 4 lessons · ~2 h 25 · then its quiz
- Detect an exposed secret, measure the reach of the leak and deal with it 4 lessons · ~2 h 10 · then its quiz
- Run a vault in production: initialise, seal, back up and monitor it 3 lessons · ~2 h 10 · then its quiz
4

Think about security at every step

6 skills
See the 6 skills
- Think DevSecOps: risks, responsibilities, defense in depth 3 lessons · ~1 h 25 · then its quiz
- Threat-model an application 6 lessons · ~2 h 30 · then its quiz · a lab
- Analyze code and dependencies 7 lessons · ~2 h 55 · then its quiz · a lab
- Harden the build, the images and the IaC 6 lessons · ~4 h 00 · then its quiz · a lab
- Triage vulnerabilities and date the exceptions 2 lessons · ~55 min · then its quiz · a lab
- Detect and contain at runtime 1 lesson · ~25 min · then its quiz · a lab
5

Go deeper into end-to-end security

3 skills
See the 3 skills
- Analyse an application with specialised scanners: secrets, SAST, dependencies, Scorecard and DAST 7 lessons · ~3 h 25 · then its quiz
- Analyse an attack on a pipeline: secrets, hijacked tools and provenance 8 lessons · ~4 h 05 · then its quiz
- Control what reaches production and detect deviations at runtime 9 lessons · ~7 h 15 · then its quiz · a lab
6

Understand threats and reason about defense

3 skills
See the 3 skills
- Choose and justify a security measure from the principles, and classify it by type 10 lessons · ~3 h 55 · then its quiz
- Reconstruct an intrusion phase by phase and place one control per phase 11 lessons · ~4 h 10 · then its quiz
- Recognize a common threat from its indicators and choose the measure that stops it 7 lessons · ~2 h 50 · then its quiz

The domain's steps

Write, verify and deliver Rego policies

Secure the delivery chain

Hold a system's secrets, from inventory to leak

Think about security at every step

Go deeper into end-to-end security

Understand threats and reason about defense