Free Security Architect Roadmap
The designer of the whole defence, usually after several years as an engineer: threat models, zero trust, identity, SecurityX for hands-on architecture, then CISSP and a cloud architect certification.
6 steps · 8 free videos · 2 free reads
Create your free account to open all 2,396 free items
The 10 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.
The free roadmap
6 steps, in order
The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually). Infrastructure Labs labs are a separate add-on.
Start here →
Step 1 — Security foundation
The vocabulary and controls every architecture is built from.
Follow the free CompTIA Security+ (SY0-701) roadmap.
🔒 The full roadmap adds here: 6 full courses · hands-on labs 1–148 of 308 (courses in Membership · 71 labs in Membership · 77 labs in Infrastructure Labs)
- Course · CompTIA Security+ Certification (SY0-701): The Total Course · 🔒 Membership
- Course · Security+ (SY0-701) - Self-paced Course! · 🔒 Membership
- Course · CompTIA Security+ SY0-701: General Security Concepts · 🔒 Membership
- Course · CompTIA Security+: Viruses, Threats and Compromise Indicators · 🔒 Membership
- Course · CompTIA Security+ Labs · 🔒 Membership
- Course · Security+ Just Labs: The Ultimate Hands-On Bootcamp · 🔒 Membership
- Lab 1 of 308 · Additional Scanning Options · 🔒 Membership
- Lab 2 of 308 · Basics of Metasploit · 🔒 Membership
- Lab 3 of 308 · BCP DRP and Test Planning · 🔒 Membership
- Lab 4 of 308 · BitLocker Setup · 🔒 Membership
- Lab 5 of 308 · Block Incoming Traffic on Known Port · 🔒 Membership
- Lab 6 of 308 · Comparing Controls · 🔒 Membership
- Lab 7 of 308 · Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server · 🔒 Membership
- Lab 8 of 308 · Creation of BCP and DRP · 🔒 Membership
- Lab 9 of 308 · Data Backup to Prep for Recovery · 🔒 Membership
- Lab 10 of 308 · Event Log · 🔒 Membership
- Lab 11 of 308 · Host Data Integrity Baselining · 🔒 Membership
- Lab 12 of 308 · Installing Patches and Testing Software · 🔒 Membership
- Lab 13 of 308 · MITRE - Attack · 🔒 Membership
- Lab 14 of 308 · MITRE - Defend · 🔒 Membership
- Lab 15 of 308 · Network Discovery · 🔒 Membership
- Lab 16 of 308 · Network Segmentation (FW/DMZ/WAN/LAN) · 🔒 Membership
- Lab 17 of 308 · Network Topology Generation · 🔒 Membership
- Lab 18 of 308 · Open Source Collection · 🔒 Membership
- Lab 19 of 308 · Open Source Password Cracking · 🔒 Membership
- Lab 20 of 308 · Scanning From Windows · 🔒 Membership
- Lab 21 of 308 · Windows Event Log Manipulation via Windows Event Viewer · 🔒 Membership
- Lab 22 of 308 · Wireshark · 🔒 Membership
- Lab 23 of 308 · Manage Users and Groups in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 24 of 308 · Manage Users and Groups in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 25 of 308 · Can You Manage Users and Groups in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 26 of 308 · Configure Password Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 27 of 308 · Configure Password Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 28 of 308 · Can You Manage Password Requirements in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 29 of 308 · Configure Standard Linux Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 30 of 308 · Configure Standard Windows Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 31 of 308 · Can You Configure Standard Linux and Windows Permissions? [Advanced] · 🔒 Infrastructure Labs
- Lab 32 of 308 · Can You Manage Access in Linux and Windows? [Expert] · 🔒 Infrastructure Labs
- Lab 33 of 308 · Can You Harden the SSH Service on a Linux Server? [Advanced} · 🔒 Infrastructure Labs
- Lab 34 of 308 · Force Users to Change Password Upon First Sign In [Guided] · 🔒 Infrastructure Labs
- Lab 35 of 308 · Remove a User Account [Guided] · 🔒 Infrastructure Labs
- Lab 36 of 308 · Can You Add Server Access for a Group? [Advanced] · 🔒 Infrastructure Labs
- Lab 37 of 308 · Examine Log Files to Block Bad Actors [Guided] · 🔒 Infrastructure Labs
- Lab 38 of 308 · Harden a Server by Limiting Access to a Single Subnet [Guided] · 🔒 Infrastructure Labs
- Lab 39 of 308 · Can You Harden a Server by Restricting Access per Protocol? [Advanced] · 🔒 Infrastructure Labs
- Lab 40 of 308 · Can You Harden a Linux Web Server? [Expert] · 🔒 Infrastructure Labs
- Lab 41 of 308 · Deploy a Private Certificate Authority [Guided] · 🔒 Infrastructure Labs
- Lab 42 of 308 · Configure Custom Certificate Templates and Deployment Options [Guided] · 🔒 Infrastructure Labs
- Lab 43 of 308 · Manually Request a PKI Certificate [Guided] · 🔒 Infrastructure Labs
- Lab 44 of 308 · Can You Deploy a Certificate Authority and Issue Certificates? [Advanced] · 🔒 Infrastructure Labs
- Lab 45 of 308 · Enable DNSSEC [Guided] · 🔒 Infrastructure Labs
- Lab 46 of 308 · Use EFS To Encrypt Files on NTFS Volumes [Guided] · 🔒 Infrastructure Labs
- Lab 47 of 308 · Can You Secure DNS Resource Records and Windows NTFS Volume File Objects? [Advanced] · 🔒 Infrastructure Labs
- Lab 48 of 308 · Enable SSL/TLS on a Website [Guided] · 🔒 Infrastructure Labs
- Lab 49 of 308 · Enable Client SSL/TLS [Guided] · 🔒 Infrastructure Labs
- Lab 50 of 308 · Can You Secure a Website with an SSL/TLS Certificate? [Advanced] · 🔒 Infrastructure Labs
- Lab 51 of 308 · Can You Use PKI to Secure a Network Environment? [Expert] · 🔒 Infrastructure Labs
- Lab 52 of 308 · Cryptography: Attacking Classic Ciphers · 🔒 Membership
- Lab 53 of 308 · Cryptography: Breaking Repeated Key XOR Cipher · 🔒 Membership
- Lab 54 of 308 · Cryptography: Breaking Weak RSA Keys · 🔒 Membership
- Lab 55 of 308 · Cryptography: Decrypting Files With a Dictionary Attack · 🔒 Membership
- Lab 56 of 308 · Cryptography: Forging Digital Signatures · 🔒 Membership
- Lab 57 of 308 · Cryptography: Forging MACs With Side Channels · 🔒 Membership
- Lab 58 of 308 · Cryptography: Hidden Veracrypt Containers · 🔒 Membership
- Lab 59 of 308 · Cryptography: Man In the Middle Attack · 🔒 Membership
- Lab 60 of 308 · Cryptography: Password Cracking · 🔒 Membership
- Lab 61 of 308 · Cryptography: Setting Up HTTPS in Windows and Linux · 🔒 Membership
- Lab 62 of 308 · Cryptography: Setting Up Two Factor Authentication · 🔒 Membership
- Lab 63 of 308 · Cryptography: Steganography · 🔒 Membership
- Lab 64 of 308 · Cryptography: Using GPG for Encryption and Key Management · 🔒 Membership
- Lab 65 of 308 · Cryptography: Using the OpenSSL CLI Tool · 🔒 Membership
- Lab 66 of 308 · Getting Started with Security Concepts in Windows and Linux Environments [Getting Started] · 🔒 Infrastructure Labs
- Lab 67 of 308 · Configure Windows Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 68 of 308 · Configure Linux Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 69 of 308 · Configure Security Settings by Using Microsoft Group Policy [Guided] · 🔒 Infrastructure Labs
- Lab 70 of 308 · Identify Non-secure Network Traffic [Guided] · 🔒 Infrastructure Labs
- Lab 71 of 308 · Can You Secure Host Settings Through Firewall Settings and Group Policy? [Advanced] · 🔒 Infrastructure Labs
- Lab 72 of 308 · Configure IPSec [Guided] · 🔒 Infrastructure Labs
- Lab 73 of 308 · Configure a Windows PPTP VPN [Guided] · 🔒 Infrastructure Labs
- Lab 74 of 308 · Can You Secure Network Access? [Advanced] · 🔒 Infrastructure Labs
- Lab 75 of 308 · Can You Harden Windows Hosts? [Expert] · 🔒 Infrastructure Labs
- Lab 76 of 308 · Back Up and Restore Data in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 77 of 308 · Back Up and Restore Data in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 78 of 308 · Can You Back Up and Restore Data in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 79 of 308 · Configure and Test the Firewall in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 80 of 308 · Configure and Test the Firewall in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 81 of 308 · Can You Configure the Firewall in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 82 of 308 · Configure Patch Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 83 of 308 · Configure Update Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 84 of 308 · Can You Configure Update Management in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 85 of 308 · Can You Manage Windows and Linux Systems? [Expert] · 🔒 Infrastructure Labs
- Lab 86 of 308 · Applying Filters to TCPDump and Wireshark · 🔒 Membership
- Lab 87 of 308 · DNS as a Remote Shell · 🔒 Membership
- Lab 88 of 308 · Firewall Setup and Configuration · 🔒 Membership
- Lab 89 of 308 · Gap Analysis of Firewall Rules · 🔒 Membership
- Lab 90 of 308 · Implementing Least-Privilege on Windows · 🔒 Membership
- Lab 91 of 308 · Setting Up Zones in a Firewall · 🔒 Membership
- Lab 92 of 308 · Snorby Setup and Operation · 🔒 Membership
- Lab 93 of 308 · TCPDump · 🔒 Membership
- Lab 94 of 308 · Tweaking Firewall Rules for Detection · 🔒 Membership
- Lab 95 of 308 · Using Snort and Wireshark to Analyze Traffic · 🔒 Membership
- Lab 96 of 308 · Getting Started with Cybersecurity Defensive Tools [Getting Started] · 🔒 Infrastructure Labs
- Lab 97 of 308 · Managing Log Files on a Windows Server [Guided] · 🔒 Infrastructure Labs
- Lab 98 of 308 · Configure Windows Defender on a Windows System [Guided] · 🔒 Infrastructure Labs
- Lab 99 of 308 · Configure a Local Security Policy on Server 2016 [Guided] · 🔒 Infrastructure Labs
- Lab 100 of 308 · Can You Use the Sysinternals Suite to Review Permissions on a Windows System? [Advanced] · 🔒 Infrastructure Labs
- Lab 101 of 308 · Using Encryption to Secure Information [Guided] · 🔒 Infrastructure Labs
- Lab 102 of 308 · Can You Configure Drive Encryption by Using LUKS and BitLocker? [Advanced] · 🔒 Infrastructure Labs
- Lab 103 of 308 · Can You Configure Remote Administration by Using PuTTY and SSH? [Expert] · 🔒 Infrastructure Labs
- Lab 104 of 308 · Use a Password Cracking Utility in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 105 of 308 · Can You Use PowerShell to Gather Computer Information in Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 106 of 308 · Escalate Privileges in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 107 of 308 · Can You Enumerate Network Services by Using Port Scanning in Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 108 of 308 · Auditing Service Accounts and Setting Up Automated Log Collection · 🔒 Membership
- Lab 109 of 308 · Centralized Monitoring · 🔒 Membership
- Lab 110 of 308 · CIRP Creation and Disaster · 🔒 Membership
- Lab 111 of 308 · Creation of Standard Operating Procedures for Recovery · 🔒 Membership
- Lab 112 of 308 · Data Downloads and Validation · 🔒 Membership
- Lab 113 of 308 · Force Point: DLP Email Overview · 🔒 Membership
- Lab 114 of 308 · Force Point: DLP Network Overview · 🔒 Membership
- Lab 115 of 308 · Identifying Key Assets · 🔒 Membership
- Lab 116 of 308 · Leveraging Internal Intelligence Resources · 🔒 Membership
- Lab 117 of 308 · Log Correlation & Analysis to Identify Potential IOC · 🔒 Membership
- Lab 118 of 308 · Monitoring and Verifying Management Systems · 🔒 Membership
- Lab 119 of 308 · Open and Close Ports on Windows 7 · 🔒 Membership
- Lab 120 of 308 · Phishing · 🔒 Membership
- Lab 121 of 308 · Post Incident Service Restoration · 🔒 Membership
- Lab 122 of 308 · Ransomware · 🔒 Membership
- Lab 123 of 308 · Recover from SQL Injection Attack · 🔒 Membership
- Lab 124 of 308 · Sensitive Information Identification · 🔒 Membership
- Lab 125 of 308 · Vulnerability Identification and Remediation · 🔒 Membership
- Lab 126 of 308 · Use Git to Manage Code [Guided] · 🔒 Infrastructure Labs
- Lab 127 of 308 · Analyze Log Files for Malicious Activity [Guided] · 🔒 Infrastructure Labs
- Lab 128 of 308 · Identify and Manage Old Software [Guided] · 🔒 Infrastructure Labs
- Lab 129 of 308 · Deploy a Docker Container [Guided] · 🔒 Infrastructure Labs
- Lab 130 of 308 · Deploy a Virtual Machine [Guided] · 🔒 Infrastructure Labs
- Lab 131 of 308 · Configure a Jump Box [Guided] · 🔒 Infrastructure Labs
- Lab 132 of 308 · Manage File Redundancy for Resilience and Recovery [Guided] · 🔒 Infrastructure Labs
- Lab 133 of 308 · Manage System Restore Using Windows 11 [Guided] · 🔒 Infrastructure Labs
- Lab 134 of 308 · Use Alerting and Monitoring Tools [Guided] · 🔒 Infrastructure Labs
- Lab 135 of 308 · Digitally Sign Code To Verify Authenticity [Guided] · 🔒 Infrastructure Labs
- Lab 136 of 308 · Configure a Wireless Access Point [Guided] · 🔒 Infrastructure Labs
- Lab 137 of 308 · Sanitize Storage Disks [Guided] · 🔒 Infrastructure Labs
- Lab 138 of 308 · Enhance Security by Using SELinux [Guided] · 🔒 Infrastructure Labs
- Lab 139 of 308 · Manage Configurations by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 140 of 308 · Configure Devices by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 141 of 308 · Perform Security Audits on Linux Services [Guided] · 🔒 Infrastructure Labs
- Lab 142 of 308 · Baseline Systems in Accordance with Policy Documentation · 🔒 Membership
- Lab 143 of 308 · Conduct Baseline Comparison for Indicators of Compromise · 🔒 Membership
- Lab 144 of 308 · Creating a Baseline Using Autopsy · 🔒 Membership
- Lab 145 of 308 · Creating a Secondary Baseline and Conducting Comparison · 🔒 Membership
- Lab 146 of 308 · Manually Creating a Baseline with MD5Deep · 🔒 Membership
- Lab 147 of 308 · Recovering Data and Data Integrity Checks · 🔒 Membership
- Lab 148 of 308 · Windows Deployment Services · 🔒 Membership
Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.
Step 2 — Think like an architect
Model the threats before you draw the design. SABSA and TOGAF, the frameworks architect adverts name, are studied on the job; no course for them is sold here.
🔒 The full roadmap adds here: 1 full course (Membership)
- Course · Modeling Threats: Strategies in Threat Modeling · 🔒 Membership
Step 3 — Identity is the perimeter
Design access the way modern estates enforce it.
Follow the free Microsoft Identity and Access Administrator (SC-300) roadmap.
🔒 The full roadmap adds here: 1 full course · hands-on labs 149–173 of 308 (course in Membership · 25 labs in Infrastructure Labs)
- Course · SC-300 : Microsoft Identity and Access Administrator · 🔒 Membership
- Lab 149 of 308 · Manage Users, Groups, and Administrative Units in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 150 of 308 · Can You Manage Users, Groups, and Administrative Units in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 151 of 308 · Configure Roles and Tenant Wide Settings in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 152 of 308 · Can You Configure Roles and Tenant-Wide Settings in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 153 of 308 · Can You Configure Device Registrations and Manage External Users in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 154 of 308 · Implement and Manage Hybrid Identities and Synchronization in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 155 of 308 · Can You Implement and Manage Hybrid Identities and Synchronization in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 156 of 308 · Configure Multi-factor Authentication in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 157 of 308 · Configure Self-Service Password Reset in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 158 of 308 · Can You Configure Multifactor Authentication and Self-service in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 159 of 308 · Can You Implement Conditional Access Policies in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 160 of 308 · Can You Manage Identity Protection in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 161 of 308 · Can You Implement Entitlement Management by Using Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 162 of 308 · Can You Configure Access Reviews in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 163 of 308 · Configure Access Reviews in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 164 of 308 · Manage Privileged Access in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 165 of 308 · Can You Manage Privileged Access in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 166 of 308 · Can You Monitor Microsoft Entra ID?[Advanced] · 🔒 Infrastructure Labs
- Lab 167 of 308 · Implement Integration Between Active Directory Domain Services and Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 168 of 308 · Create and Configure Enterprise Applications in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 169 of 308 · Can You Create and Configure Enterprise Applications in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 170 of 308 · Configure Application Registrations in Microsoft Entra ID [Guided] · 🔒 Infrastructure Labs
- Lab 171 of 308 · Can You Configure Application Registrations in Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 172 of 308 · Can You Implement Access and Single Sign-On for Applications by Using Microsoft Entra ID? [Advanced] · 🔒 Infrastructure Labs
- Lab 173 of 308 · Microsoft Defender for Cloud Apps [Guided] · 🔒 Infrastructure Labs
Step 4 — Architecture at scale
Practise designing, engineering and governing security across an enterprise.
This step is the Advanced Security Practice — SecurityX (CAS-005) practice labs roadmap.
🔒 The full roadmap adds here: hands-on labs 174–256 of 308 (46 labs in Membership · 37 labs in Infrastructure Labs)
- Lab 174 of 308 · Evaluate Security Policy, Guides and Templates [Guided] · 🔒 Infrastructure Labs
- Lab 175 of 308 · Implement Remote Assistance [Guided] · 🔒 Infrastructure Labs
- Lab 176 of 308 · Implement Domain Trusts [Guided] · 🔒 Infrastructure Labs
- Lab 177 of 308 · Evaluate SSH Remote Management Security [Guided] · 🔒 Infrastructure Labs
- Lab 178 of 308 · Implement Network Security Solutions for Data Flow [Guided] · 🔒 Infrastructure Labs
- Lab 179 of 308 · Use Security Assessment Tools [Guided] · 🔒 Infrastructure Labs
- Lab 180 of 308 · Perform Forensic Analysis on a Suspect's System [Guided] · 🔒 Infrastructure Labs
- Lab 181 of 308 · Can You Secure Windows Server with Security Templates, Domain Trusts, and Nmap Scanning? [Advanced] · 🔒 Infrastructure Labs
- Lab 182 of 308 · Can You Unify Windows and Linux by Using the Power of Remote Desktop, VNC, and SSH? [Advanced] · 🔒 Infrastructure Labs
- Lab 183 of 308 · Can You Analyze Network Evidence by Using Wireshark and Autopsy? [Advanced] · 🔒 Infrastructure Labs
- Lab 184 of 308 · Can You Configure Trusts, Remote Connections and Network Data Analysis? [Expert] · 🔒 Infrastructure Labs
- Lab 185 of 308 · Use SSH to Configure Connections Between Systems [Guided] · 🔒 Infrastructure Labs
- Lab 186 of 308 · Detect Windows Network Vulnerabilities [Guided] · 🔒 Infrastructure Labs
- Lab 187 of 308 · Use Metasploit and Netcat to Gain Remote Access to a Windows System [Guided] · 🔒 Infrastructure Labs
- Lab 188 of 308 · Debug Code [Guided] · 🔒 Infrastructure Labs
- Lab 189 of 308 · Use Metasploit to Test Network Security [Guided] · 🔒 Infrastructure Labs
- Lab 190 of 308 · Manage a Server by Using a Security Template [Guided] · 🔒 Infrastructure Labs
- Lab 191 of 308 · Perform Application Source Code Verification to Install New Software [Guided] · 🔒 Infrastructure Labs
- Lab 192 of 308 · Can You Establish Secure Communications by Using SSH and Security Templates? [Advanced] · 🔒 Infrastructure Labs
- Lab 193 of 308 · Can You Perform Inside Exploitation, Remote Commands, and Gain Remote Access? [Advanced] · 🔒 Infrastructure Labs
- Lab 194 of 308 · Can You Manage Code Security? [Advanced] · 🔒 Infrastructure Labs
- Lab 195 of 308 · Can You Use Security Templates, Remote Access Exploits, and PE Analysis to Manage a Windows Server Configuration? [Expert] · 🔒 Infrastructure Labs
- Lab 196 of 308 · Enforce Segmentation and Approved Access Paths [Guided] · 🔒 Infrastructure Labs
- Lab 197 of 308 · Harden a JumpBox for Secure Administration [Guided] · 🔒 Infrastructure Labs
- Lab 198 of 308 · Secure Privileged Access and Auditing in Active Directory [Guided] · 🔒 Infrastructure Labs
- Lab 199 of 308 · Establish a Windows Hardening and Security Logging Baseline [Guided] · 🔒 Infrastructure Labs
- Lab 200 of 308 · Reduce DVWA Exposure by Using Compensating Controls [Guided] · 🔒 Infrastructure Labs
- Lab 201 of 308 · Implement TLS and Certificate Controls for a Service [Guided] · 🔒 Infrastructure Labs
- Lab 202 of 308 · Integrated Hardening Sprint A: Segment, Harden, and Secure Services [Advanced] · 🔒 Infrastructure Labs
- Lab 203 of 308 · Governance and Compliance Evidence Collection [Guided] · 🔒 Infrastructure Labs
- Lab 204 of 308 · Prioritize Risks and Implement One Remediation [Guided] · 🔒 Infrastructure Labs
- Lab 205 of 308 · Threat Modeling to Controls: Identify Risks and Implement Mitigations [Guided] · 🔒 Infrastructure Labs
- Lab 206 of 308 · Establish centralized logging by onboarding hosts and validating monitoring readiness [Guided] · 🔒 Infrastructure Labs
- Lab 207 of 308 · Hunt Threats Using Intelligence and Rule-Based Detection [Guided] · 🔒 Infrastructure Labs
- Lab 208 of 308 · Triage, Contain, and Automate Incident Response [Guided] · 🔒 Infrastructure Labs
- Lab 209 of 308 · Govern, Detect, Hunt, and Respond Through an Integrated Security Operations Sprint [Advanced] · 🔒 Infrastructure Labs
- Lab 210 of 308 · Design, Defend, and Respond Across an End-to-End Security Architecture [Expert] · 🔒 Infrastructure Labs
- Lab 211 of 308 · Secure Coding (Python) - Lab 1: Race Conditions · 🔒 Membership
- Lab 212 of 308 · Secure Coding (Python) - Lab 2: Data Validation · 🔒 Membership
- Lab 213 of 308 · Secure Coding (Python) - Lab 3: Authentication · 🔒 Membership
- Lab 214 of 308 · Secure Coding (Python) - Lab 4: Access Control · 🔒 Membership
- Lab 215 of 308 · Secure Coding (Python) - Lab 5: Cryptography · 🔒 Membership
- Lab 216 of 308 · Secure Coding (Python) - Lab 6: Error Handling · 🔒 Membership
- Lab 217 of 308 · Secure Coding (Python) - Lab 7: Static Analysis · 🔒 Membership
- Lab 218 of 308 · Secure Coding (Python) - Lab 8: Pickles and Imports · 🔒 Membership
- Lab 219 of 308 · Analyze and Update a Company BCP/BIA/DRP/CIRP · 🔒 Membership
- Lab 220 of 308 · Analyze DoomJuice Infection to Identify Attack Vector and Payload · 🔒 Membership
- Lab 221 of 308 · Analyze SQL Injection Attack · 🔒 Membership
- Lab 222 of 308 · Analyze Structured Exception Handler Buffer Overflow Exploit · 🔒 Membership
- Lab 223 of 308 · Identify Access to a LINUX Firewall Through SYSLOG Service · 🔒 Membership
- Lab 224 of 308 · Identify Whether High-Risk Systems Were Affected · 🔒 Membership
- Lab 225 of 308 · Identifying System Vulnerabilities with OpenVAS · 🔒 Membership
- Lab 226 of 308 · Implementing Least-Privilege on Windows · 🔒 Membership
- Lab 227 of 308 · Intro To Linux - Users and Groups · 🔒 Membership
- Lab 228 of 308 · Manual Vulnerability Assessment · 🔒 Membership
- Lab 229 of 308 · Manually Analyze Malicious PDF Documents · 🔒 Membership
- Lab 230 of 308 · Manually Analyze Malicious PDF Documents 2 · 🔒 Membership
- Lab 231 of 308 · Microsoft Baseline Security Analyzer · 🔒 Membership
- Lab 232 of 308 · Monitoring Network Traffic for Potential IOA/IOC · 🔒 Membership
- Lab 233 of 308 · Parse Files Out of Network Traffic · 🔒 Membership
- Lab 234 of 308 · Patch Installation and Validation Testing · 🔒 Membership
- Lab 235 of 308 · Performing Incident Response in a Windows Environment · 🔒 Membership
- Lab 236 of 308 · Scanning and Enumeration · 🔒 Membership
- Lab 237 of 308 · Scanning and Mapping Networks · 🔒 Membership
- Lab 238 of 308 · Securing Linux for System Administrators · 🔒 Membership
- Lab 239 of 308 · Use pfTop to Analyze Network Traffic · 🔒 Membership
- Lab 240 of 308 · Analyze Various Data Sources to Confirm Suspected Infection · 🔒 Membership
- Lab 241 of 308 · Assessing Vulnerabilities Post Addressal · 🔒 Membership
- Lab 242 of 308 · BitCoin Mining Web Application on Corporate Network · 🔒 Membership
- Lab 243 of 308 · Check for Indicators of Other Attack Activity (Debug PE File) · 🔒 Membership
- Lab 244 of 308 · Cyber Security Evaluation Tool (CSET) · 🔒 Membership
- Lab 245 of 308 · Entering Information into a CMDB · 🔒 Membership
- Lab 246 of 308 · Event Logs with Autopsy · 🔒 Membership
- Lab 247 of 308 · Internet History · 🔒 Membership
- Lab 248 of 308 · Nexpose: Red Team Exploitation · 🔒 Membership
- Lab 249 of 308 · Overview of Kibana · 🔒 Membership
- Lab 250 of 308 · Performing an Initial Attack Analysis · 🔒 Membership
- Lab 251 of 308 · Preparing Target Media · 🔒 Membership
- Lab 252 of 308 · Recover from Illegal Bitcoin Mining Incident · 🔒 Membership
- Lab 253 of 308 · Recover from Web-Based Flashpack Incident · 🔒 Membership
- Lab 254 of 308 · Report Writing for Presentation to Management · 🔒 Membership
- Lab 255 of 308 · Respond to and Validate Alerts from Antivirus Software · 🔒 Membership
- Lab 256 of 308 · WMI Event Persistence · 🔒 Membership
Step 5 — The senior certification
The credential every architect advert lists.
Follow the free CISSP — Certified Information Systems Security Professional roadmap.
🔒 The full roadmap adds here: 7 full courses · hands-on labs 257–273 of 308 (courses in Membership · 8 labs in Membership · 9 labs in Infrastructure Labs)
- Course · CISSP Certification Introduction. Prepare for the exam right · 🔒 Membership
- Course · Certified Information Systems Security Professional - CISSP · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 1 & 2 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 3 & 4 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 5 & 6 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 7 & 8 Video Boot Camp · 🔒 Membership
- Course · Business Continuity and Disaster Recovery Planning · 🔒 Membership
- Lab 257 of 308 · Using the OWASP Zed Attack Proxy Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 258 of 308 · Using the Burp Suite Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 259 of 308 · Use the Nikto Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 260 of 308 · Use the Arachni Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 261 of 308 · Use Web Application Scanners [Advanced] · 🔒 Infrastructure Labs
- Lab 262 of 308 · Use Greenbone Security Manager to Identify Vulnerabilities [Guided] · 🔒 Infrastructure Labs
- Lab 263 of 308 · Use Nmap for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 264 of 308 · Use hping for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 265 of 308 · Use Responder for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 266 of 308 · Secure Coding (Java) - Lab 1: Race Conditions · 🔒 Membership
- Lab 267 of 308 · Secure Coding (Java) - Lab 2: Data Validation · 🔒 Membership
- Lab 268 of 308 · Secure Coding (Java) - Lab 3: Authentication · 🔒 Membership
- Lab 269 of 308 · Secure Coding (Java) - Lab 4: Access Control · 🔒 Membership
- Lab 270 of 308 · Secure Coding (Java) - Lab 5: Cryptography · 🔒 Membership
- Lab 271 of 308 · Secure Coding (Java) - Lab 6: Error Handling · 🔒 Membership
- Lab 272 of 308 · Secure Coding (Java) - Lab 7: Static Analysis · 🔒 Membership
- Lab 273 of 308 · Secure Coding (Java) - Lab 8: Insecure Deserialization · 🔒 Membership
Step 6 — Cloud architecture
Design securely for the platform the business is moving to.
This step is the Microsoft Cybersecurity Architect (SC-100) roadmap.
🔒 The full roadmap adds here: 2 full courses · hands-on labs 274–308 of 308 (courses in Membership · 35 labs in Infrastructure Labs)
- Course · Microsoft Cybersecurity Architect - SC-100 Exam Preparation · 🔒 Membership
- Course · Azure - Cloud Adoption Framework and The Landing Zones · 🔒 Membership
- Lab 274 of 308 · Working with Microsoft Defender Products [Prerequisite Lab] · 🔒 Infrastructure Labs
- Lab 275 of 308 · Introduction to Microsoft Defender Overview [Guided] · 🔒 Infrastructure Labs
- Lab 276 of 308 · Microsoft Defender for Identity Setup [Guided] · 🔒 Infrastructure Labs
- Lab 277 of 308 · Microsoft Defender for Endpoint [Guided] · 🔒 Infrastructure Labs
- Lab 278 of 308 · Comprehensive Security Management with Microsoft Defender and Entra ID [Advanced] · 🔒 Infrastructure Labs
- Lab 279 of 308 · Microsoft Defender for Office 365 [Guided] · 🔒 Infrastructure Labs
- Lab 280 of 308 · Advanced Threat Hunting with Microsoft 365 Defender [Guided] · 🔒 Infrastructure Labs
- Lab 281 of 308 · Incident Response with Microsoft Defender XDR [Expert] · 🔒 Infrastructure Labs
- Lab 282 of 308 · Configure Authentication for an Azure Web App [Guided] · 🔒 Infrastructure Labs
- Lab 283 of 308 · Configure Virtual Network Connectivity by Using Peering [Guided] · 🔒 Infrastructure Labs
- Lab 284 of 308 · Configure an Application Security Group [Guided] · 🔒 Infrastructure Labs
- Lab 285 of 308 · Can You Configure Network Security to Allow Application Traffic? [Advanced] · 🔒 Infrastructure Labs
- Lab 286 of 308 · Configure Azure Disk Encryption [Guided] · 🔒 Infrastructure Labs
- Lab 287 of 308 · Can You Harden Virtual Machines in Azure? [Advanced] · 🔒 Infrastructure Labs
- Lab 288 of 308 · Configure Security by Using the Azure Kubernetes Service [Guided] · 🔒 Infrastructure Labs
- Lab 289 of 308 · Create Azure Resource Locks on a Web App [Guided] · 🔒 Infrastructure Labs
- Lab 290 of 308 · Can You Configure Multi-Scope Network Security? [Advanced] · 🔒 Infrastructure Labs
- Lab 291 of 308 · Can You Configure Multi-Scope Resource Permissions? [Expert] · 🔒 Infrastructure Labs
- Lab 292 of 308 · Configure a Network Security Group in a Virtual Network [Guided] · 🔒 Infrastructure Labs
- Lab 293 of 308 · Configure Route Tables in a Virtual Network [Guided] · 🔒 Infrastructure Labs
- Lab 294 of 308 · Configure Global Virtual Network Peering [Guided] · 🔒 Infrastructure Labs
- Lab 295 of 308 · Can You Implement a Secure Azure Virtual Machine Network? [Advanced] · 🔒 Infrastructure Labs
- Lab 296 of 308 · Configure a Virtual Network Service Endpoint [Guided] · 🔒 Infrastructure Labs
- Lab 297 of 308 · Implement Security for an Azure Web App [Guided] · 🔒 Infrastructure Labs
- Lab 298 of 308 · Can You Implement Security for an Azure Web App? [Advanced] · 🔒 Infrastructure Labs
- Lab 299 of 308 · Can You Create a Secure Web App? [Expert] · 🔒 Infrastructure Labs
- Lab 300 of 308 · Log Virtual Machine Network Traffic by Using Network Watcher [Guided] · 🔒 Infrastructure Labs
- Lab 301 of 308 · Monitor Communication Between Virtual Machines by Using Network Watcher [Guided] · 🔒 Infrastructure Labs
- Lab 302 of 308 · Configure Application Insights [Guided] · 🔒 Infrastructure Labs
- Lab 303 of 308 · Set an Azure Alert for a Web App [Guided] · 🔒 Infrastructure Labs
- Lab 304 of 308 · Secure a Storage Account [Guided] · 🔒 Infrastructure Labs
- Lab 305 of 308 · Secure Azure SQL Server [Guided] · 🔒 Infrastructure Labs
- Lab 306 of 308 · Store Sensitive Data in Azure Key Vault [Guided] · 🔒 Infrastructure Labs
- Lab 307 of 308 · Can You Secure Azure Platform Services? [Advanced] · 🔒 Infrastructure Labs
- Lab 308 of 308 · Can You Manage, Monitor, and Secure Azure Platform Services? [Expert] · 🔒 Infrastructure Labs
Do it hands-on
The full Security Architect roadmap
The same steps with every course and the hands-on labs, and your progress tracked.
The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytimeAdvanced
AI-Driven Security Engineering
Become the Cyber Security Expert the AI Era Needs.
StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”
Explore the AI Master’s →Create your free account to open all 2,396 free items
The 10 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.