2026 Curriculum Edition · Blue, Red, Purple, GRC & Intelligence

Build. Break. Defend.
Govern. Prove.

Proof is the product. Train inside authorized labs. Execute investigations or security testing. Produce professional artifacts. Build a recruiter-visible body of work — from 8-week Standard to 12-week Premium.

0
Guided Missions
0
Standard / Premium
0
Blue · Red · Purple · GRC · R & I
100%
Portfolio-Based
Scroll
◆ BUILD · BREAK · DEFEND · GOVERN · PROVE ◆ 35+ MISSIONS STANDARD ◆ 50+ MISSIONS PREMIUM ◆ 10+ SIGMA RULES ◆ 25+ DETECTION RULES ◆ GITHUB PORTFOLIO ◆ PROOF SCORE™ ◆ AUTHORIZED LABS ONLY ◆ IMPACT SUPPORT PRICING ◆ PROOF PASSPORT™ ◆ BUILD · BREAK · DEFEND · GOVERN · PROVE ◆ 35+ MISSIONS STANDARD ◆ 50+ MISSIONS PREMIUM ◆ 10+ SIGMA RULES ◆ 25+ DETECTION RULES ◆ GITHUB PORTFOLIO ◆ PROOF SCORE™ ◆ AUTHORIZED LABS ONLY ◆ IMPACT SUPPORT PRICING ◆ PROOF PASSPORT™
The Reality

India needs cybersecurity talent.
But degrees and certificates don't cut it.

0
Talent Deficit in Cybersecurity
India needs 8 lakh more cyber professionals. That gap grows every year.
Source: WEF
0
Organisations Breached
Companies have tools but not enough capable hands to run them.
Source: Fortinet
0
Employers Demand Experience
Employers need people who have done the work, not just attended classes.
Source: ISACA
The Gap We Fill
Certificates test memory. They don't test capability.
Recruiters can't verify what you actually know. So they reject you in 30 seconds.
The Framework

Proof is the Product.

GraySentinel structures cybersecurity learning around execution, evidence, review, and portfolio work. Every module ends with an artifact you can show a recruiter.

35+
Guided Missions
In every Standard track, structured week by week.
50+
Guided + Advanced Missions
In every Premium track, with cloud, automation and C2 modules.
8 Weeks
Standard Duration
Foundation → logs → detection → IR (Blue) or recon → web → AD → C2 (Red).
12 Weeks
Premium Duration
Adds cloud, automation, SOAR, purple team, AI security and enterprise capstones.
The Learning Loop

How Every Mission Works

01
Mission
Understand the scenario, objective, scope, and success criteria.
02
Execute
Work through the task inside the authorized lab environment.
03
Evidence
Capture observations, decisions, and technical output.
04
Artifact
Produce a report, rule, dashboard, playbook, script, finding, or campaign record.
05
Review
Improve through peer and mentor feedback, validation, and tuning.
06
Portfolio
Publish appropriate proof to GitHub and your professional portfolio.
The Curriculum

Week by Week. Day by Day.

Every day has a module, tools, and a proof artifact. Click any program below to explore the exact 8 or 12-week structure.

Proof Targets

What You Walk Away With.

These are not promises. These are deliverables — every artifact is pushed to a public GitHub portfolio by the end of the program.

DSOU · Standard
Blue Team Proof Targets
10+
Sigma Rules
3+
Incident Reports
2+
SIEM Dashboards
2+
Hunt Reports
5+
Playbooks
✓
Portfolio
Proof Score™ target 60+
DSOU · Premium
Blue Team Premium Targets
35+
Standard Labs
3+
Cloud Reports
5+
Automation Scripts
3+
SOAR Playbooks
10+
YARA Rules
25+
Detection Rules
Proof Score™ target 75+
SSOU · Standard
Red Team Proof Targets
3+
Recon Reports
10+
Exploit PoCs
3+
AD Attack Reports
2+
C2 Simulations
5+
Evasion Exercises
✓
Portfolio
Proof Score™ target 60+
SSOU · Premium
Red Team Premium Targets
35+
Standard Labs
5+
Advanced AD Reports
2+
C2 Campaigns
3+
Cloud Exercises
2+
Purple Team Reports
3+
AI Security Exercises
Proof Score™ target 80+
Combined · Premium
Purple Team Proof Targets
10+
Detection Rules
5+
Emulation Plans
4+
Joint Reports
2+
APT Simulations
1+
KPI Dashboard
✓
Portfolio
Proof Score™ target 85+
GRC · Premium
GRC Proof Targets
3+
Risk Registers
5+
Compliance Reports
3+
Policy Documents
2+
Audit Reports
1+
ISMS Package
✓
Portfolio
Proof Score™ target 75+
R&I · Premium
Research & Intelligence Targets
3+
TI Reports
5+
IOC Lists
2+
Malware Reports
1+
MISP Instance
2+
Detection Rules
✓
Portfolio
Proof Score™ target 75+
Combined Track

Blue + Red Combined Program.

For learners who want full-spectrum capability. Complete both Standard tracks or both Premium tracks — from defensive detection to offensive operations and purple teaming.

12 WK · Standard 16 WK · Premium
Verify Scope & Pricing
Combine tracks. Discuss scope on your free evaluation call.
Book Free Evaluation →
Impact Support Pricing

Not everyone needs a discount.
But some people genuinely deserve one.

We don't run random sales. We invest where the barriers are highest. Impact Support Pricing is available for three communities — verified during your free Job Readiness Evaluation, applied to your invoice.

Category 01
Students & Freshers
Unemployed graduates and freshers who are actively building capability but lack the earning capacity to afford full pricing.
30%
Off · Verified
Category 02
Women in Tech
Women transitioning into cybersecurity or upskilling within the industry — where representation still lags far behind demand.
40%
Off · Verified
Category 03
Armed Forces Veterans
Veterans rebuilding careers in civilian cybersecurity. Priority processing, dedicated support, and the highest impact discount.
50%
Off · Priority
How It Works

Verification first.
Discount applied on invoice.

01
Book your free evaluation
30-minute call. No obligation, no pressure.
02
Declare your category
Student ID, veteran status, or self-declaration for women in tech.
03
Verification within 24 hours
Veterans get priority — 12-hour turnaround.
04
Impact price on your invoice
Discount reflects in your final quotation. Not publicly listed.
Why These Three
Highest barrier to entry — financial, societal, or transitional. We put our money where the need is.
No Extra Paperwork
Simple verification. Not a bureaucratic process. We trust but we verify — once.
Book Free Evaluation →
Capability Direction

Role-Aligned Capability Map

Each program aligns to a capability direction. These are not job guarantees — employment depends on your background, demonstrated skill, interviews, and market conditions.

DSOU · Standard
L1 SOC Analyst · Junior Detection Engineer · Incident Responder
SIEM operations, log analysis, Sigma rules, IR fundamentals.
DSOU · Premium
L3 SOC Lead · Detection Engineer · IR Manager
Cloud security, automation, SOAR, enterprise IR simulation.
SSOU · Standard
L1 Pentester · Bug Bounty Hunter · Junior Red Team
Recon, web testing, network testing, AD security, controlled C2.
SSOU · Premium
L3 Red Teamer · C2 Operator · Purple Team Lead
Advanced AD, C2 architecture, cloud testing, purple team, AI security.
GRC
GRC Analyst · Risk Manager · Compliance Officer
NIST, ISO 27001, GDPR, HIPAA, PCI DSS, SOC 2, DPDP Act.
Research & Intelligence
Threat Intelligence Analyst · OSINT Specialist · Malware Researcher
MISP, OpenCTI, OSINT, malware analysis, CTI leadership.
The Method

From Evaluation to Portfolio

Step 01
Free Job Readiness Evaluation
30-minute call with a practitioner. Honest assessment. Track recommendation. A written roadmap PDF — yours to keep.
Step 02
Standard or Premium Selection
8-week foundation or 12-week advanced. Choose based on capability depth and available time.
Step 03
Week-by-Week Execution
35+ missions (Standard) or 50+ missions (Premium). Each day ends with a proof artifact. No theory bingeing.
Step 04
Capability Verification
Final capstone simulation. Proof Score™ assessed. Portfolio reviewed by practitioners.
Step 05
Talent Pool Entry
Verified portfolio enters the GraySentinel Talent Pool. Companies search, verify, and reach out. No resumes. Only proof.
Lab Standards

Real Skills. Controlled Environments.

Offensive security education must separate technical learning from unauthorized activity. Offensive modules in this curriculum are intended for explicitly authorized, isolated training environments only.

Authorized Scope
Only systems, applications, identities, and networks provided for the exercise or explicitly authorized by their owner.
Isolated Labs
Offensive workflows are reproduced in controlled environments. No third-party production target is implied or authorized.
Safe Artifacts
Document findings, reasoning, detections, and mitigations without exposing real credentials or sensitive data.
Responsible Reporting
Real-world vulnerabilities should be handled through the affected organization's authorized disclosure process.
Alumni Wall

Students Who Built Proof.
And Got Shortlisted.

These are not testimonials. These are outcomes — every portfolio publicly verifiable on GitHub.

A
Aarav Sharma
B.Tech CSE · DSOU Premium
BLUE
"I had 3 certifications and zero callbacks. After 12 weeks in DSOU Premium, my GitHub had 6 investigations, a Sigma rule library, and 4 SIEM dashboards. Two companies shortlisted me."
82
Proof Score
SOC Tier 1
Placed
P
Priya Menon
B.Com · Transition Track
TRANSITION
"I thought cybersecurity wasn't for me. DSOU Standard's 8-week structure made it doable. Now I mentor other transitioners."
78
Proof Score
SOC Analyst
Placed
R
Rohan Kulkarni
IT Support · SSOU Premium
RED
"The SSOU Premium advanced AD module alone was worth the entire program. Went from support to pentesting in 90 days."
85
Proof Score
Pentester
Placed
S
Sneha Patil
BSc IT · DSOU Standard
BLUE
"The Sigma rule library I built during DSOU got me noticed. Interviewer opened my GitHub during the call. I was hired."
80
Proof Score
Detection Eng.
Placed
V
Vikram Singh
Mech Engineer · SSOU Premium
PURPLE
"The purple team module in SSOU Premium is where I finally understood defense and offense together. The labs are brutally real."
88
Proof Score
Threat Hunter
Placed
N
Neha Verma
Fresher · SSOU Standard
RED
"I was told freshers can't get red team roles. My 10+ exploit PoCs and 3 AD reports on GitHub proved them wrong."
76
Proof Score
VAPT Analyst
Placed
Measurable Impact

Proof That Compounds.

Every candidate, every mission, every evaluation contributes to our public Capability Graph.

Verified Alumni
0
42% YoY
Investigations
0
118% YoY
Sigma Rules
0
210% YoY
Avg Proof Score
0
+28 vs baseline
Capability Improvement
Baseline → Graduation average
GROWTH
Track Distribution
Blue · Red · Purple · GRC · R&I
TRACKS
Placement Trend
Monthly alumni placed (last 12 months)
LIVE
Source Distribution
Where our students come from
SOURCES
The People Behind GraySentinel

Leadership & Command.

Seven commands. One shared mission. Every role has a defined area of responsibility — no ambiguity in ownership.

R
Ritik Shrivas
FOUNDER & CHAIRMAN
Overall vision and strategic direction. Leadership oversight, major decisions, organisational development, and long-term planning.
Vision Governance
K
Krish Shrivas
CHIEF EXECUTIVE OFFICER
Day-to-day operations and execution. Team coordination, operational planning, and tracking of organisational priorities and deliverables.
Operations Execution
V
Vaibhav Kant Nagpure
CHIEF FINANCIAL OFFICER
Financial planning and budgeting. Revenue and expense tracking, financial reporting, and cost monitoring.
Finance Revenue Ops
S
Srushti Dasare
CGO & GROWTH DIRECTOR
Growth strategy and marketing initiatives. Lead generation, enrollment funnels, and growth performance tracking.
Growth Marketing
A
Aabhansh Gupta
CTO · HEAD OF LABS
Cybersecurity lab development and maintenance. Technical infrastructure, validation, lab safety, and continuous technical improvement.
Labs Infrastructure
T
Tanushka Kumbhar
CIO · HEAD OF RESEARCH
Cybersecurity research and documentation. Product and assessment quality assurance, research integrity, and quality reviews.
Research Quality
A
Astitva Dasare
BUSINESS OPERATIONS & GROWTH LEAD
Business operations and execution support. Cross-functional team coordination and support for business and growth initiatives.
Business Ops Coordination
+
Join the Team
OPEN ROLES
We hire practitioners who want to build India's capability movement.
Contact Us →
Our Shared Mission

One vision. Seven commands.
Zero ambiguity in ownership.

To build GraySentinel Cyber Defence Lab into a trusted cybersecurity learning and proof-of-work ecosystem — through practical learning, research, quality assurance, and measurable outcomes.

01
Clear Ownership
Every task has a name attached. Every command has defined accountability.
02
Transparent Communication
Internal and external communication follows the same standard: honest, clear, timely.
03
Cross-Command Collaboration
Commands are independent but never siloed. The work crosses boundaries by design.
04
Evidence-Based Decisions
Opinions don't decide direction. Data, proof, and validated outcomes do.
05
Ethical Cybersecurity
Authorized labs only. Responsible disclosure always. No shortcuts on ethics.
06
Consistent Execution
Daily discipline over sporadic bursts. Continuous improvement over one-off wins.
Policies & Procedures

Radical Transparency

We publish our policies openly. No hidden terms. No surprise clauses.

Code of Conduct
▾

Plagiarism: Copying from any source — including AI-generated work without attribution — disqualifies a candidate. GitHub commits are reviewed.

Respect: Zero tolerance for harassment, discrimination, or toxicity in community channels.

Integrity: Every submission must reflect the candidate's own work and understanding.

Evaluation Policy
▾

Free Evaluation: The first Job Readiness Evaluation is free. No obligation. A written roadmap is provided within 48 hours.

Scoring: Five dimensions — Technical, Logical, Communication, Problem Solving, Evidence. Total out of 100.

Appeal: Any score can be appealed within 48 hours. Reviewed by a second evaluator within 7 days.

Placement Policy
▾

No Guarantee: We do not guarantee placement or salary. Employment depends on prior background, demonstrated skill, interviews, market conditions, and employer decisions.

Talent Pool: Every verified graduate enters our public Talent Pool. Companies reach out directly — we do not cold-call or force placements.

Support: Graduates receive a written recommendation, portfolio review, and interview preparation support.

Refund Policy
▾

Enrollment Fee: Refund details are shared during the Job Readiness Evaluation. No hidden charges.

Course Cancellation: If GraySentinel cancels a batch, full refund is provided within 7 working days.

Privacy Policy
▾

Data Collected: Name, email, phone number, educational background, and evaluation data. Only for the purpose of assessment and support.

Data Sharing: Portfolio data is published publicly on GitHub (with candidate consent) for recruiter visibility. Personal contact information is never shared without explicit permission.

Data Deletion: Any candidate can request full data deletion at any time by emailing graysentinel.ai@gmail.com.

Grievance Redressal
▾

Reporting: Any concern can be raised at graysentinel.ai@gmail.com. Response within 48 hours.

Escalation: Unresolved concerns are escalated to the Founder within 7 days.

Confidentiality: All grievances are handled confidentially. No retaliation for good-faith reporting.

For Companies · Inbound

We don't send resumes.
We send capability.

Every candidate in our Talent Pool has a public GitHub portfolio, a Proof Score™, and a video demonstration. No certificates. Only verifiable work.

Blue Team · Sample
Proof Score 82/100
Splunk · Sigma · Threat Hunting · IR
✓10+ Sigma rules on GitHub
✓4 SIEM dashboards
✓6-minute video demonstration
✓MITRE ATT&CK mapped
Available
Red Team · Sample
Proof Score 78/100
Burp · AD Attacks · VAPT Reporting
✓10+ exploit PoCs on GitHub
✓3 AD attack reports
✓8-minute video walkthrough
✓Executive report writing
Available
For Companies
Two ways to work with us
1. Hire from our Talent Pool
Verified candidates with public proof of work. No resumes. Only GitHub.
2. Train your team
Custom corporate programs designed for security teams.
Contact Us →
Companies don't come to us for resumes. They come for verified capability.
Radical Honesty

What We Don't Promise

We are not for everyone. Here is what we will never tell you.

No Guaranteed Jobs
Nobody can guarantee placement honestly. We give you proof. Placement depends on you.
No Shortcuts
8-12 weeks of real work. No "learn cybersecurity in 30 days" nonsense.
No Fake Hype
We don't sell certificates. We don't sell dreams. We sell verified capability.
Start Here · Every Path Begins Here

Book Your Free
Job Readiness Evaluation.

A 30-minute one-on-one call with a GraySentinel practitioner. We assess your current capability, recommend the right track (Blue, Red, Purple, GRC or R&I), and lay out a realistic roadmap.

Honest assessment — no sales pitch
Track recommendation: Blue / Red / Purple / GRC / R&I · Standard / Premium
Personalised roadmap document after the call
Impact Support Pricing eligibility assessed on the call
Completely free. Zero obligation.
Why We Evaluate First
No two learners are the same.
Your background, pace, and target capability determine your path. Evaluation ensures we don't waste your time or ours.
What You Take Away
A real document, not a chat.
After the call, you receive a written roadmap PDF — your exact gap, your exact next steps.
Zero Pressure
You decide what's next.
Some candidates join a program. Some walk away with clarity. Both are valid outcomes.
Questions

Frequently Asked

Is the Job Readiness Evaluation really free? ▾

Yes. The 30-minute Job Readiness Evaluation is completely free with zero obligation. We use it to understand your background, assess your gap, and recommend the right track. After the call, we send you a written roadmap document — yours to keep, whether you join a program or not.

What is Impact Support Pricing? ▾

Impact Support Pricing is a discount program for three communities: students & freshers (30% off), women in tech (40% off), and armed forces veterans (50% off, priority processing). Eligibility is verified during your free evaluation, and the discount is reflected on your final invoice. We don't advertise it publicly — we verify and apply.

What's the difference between Standard and Premium? ▾

Standard is 8 weeks with 35+ missions — foundation through core capability. Premium is 12 weeks with 50+ missions — adds cloud security, automation (Blue) or advanced AD, C2, purple team, AI security (Red), plus advanced modules for GRC, Purple, and Research & Intelligence. Choose by depth, not by promised job title.

Do I need coding experience? ▾

Basic command-line familiarity and logical reasoning are enough. We teach what's required. Non-IT backgrounds are welcome — the Blue Team Standard track starts with Linux and Windows fundamentals.

Is placement guaranteed? ▾

No. Nobody can guarantee placement honestly. We give you verified capability — a public portfolio, a Proof Score™, and a video demonstration. Companies shortlist based on that. Placement depends on you.

What is a Proof Score™? ▾

Proof Score™ is a composite rating out of 100 across five dimensions: Technical, Logical, Communication, Problem Solving, and Evidence. It measures what you've actually built, not what you've memorised. Standard targets 60+, Premium targets 75-85+.

Are the offensive labs safe and legal? ▾

Yes. All offensive exercises happen inside isolated, explicitly authorized training environments. No third-party production target is ever used or implied. Safe artifacts are documented without exposing real credentials or sensitive data.

How do companies find me? ▾

Once you complete the program and get verified, your portfolio enters the GraySentinel Talent Pool. Companies search it, verify your work, and reach out directly. We don't cold-call companies — they come to us.

Can I do both Blue and Red? ▾

Yes. Combined tracks are available — 12 weeks for both Standard, or 16 weeks for both Premium. This is ideal for learners targeting purple team roles or full-spectrum capability.

What tools will I actually use? ▾

Blue Team: Splunk, ELK, Sysmon, Sigma, YARA, Volatility, Autopsy, Python. Red Team: Burp Suite, SQLMap, BloodHound, Impacket, Metasploit, C2 frameworks. GRC: NIST CSF, ISO 27001, DPDP Act, GDPR toolkits. R&I: MISP, OpenCTI, Malware analysis tools. All labs are free or open-source.

How do I get pricing? ▾

Program scope, pricing, and payment options are discussed during your free Job Readiness Evaluation. Impact Support Pricing eligibility is also confirmed on the call. We'll walk you through available options based on your situation.

The Movement Is Just Beginning

India doesn't need more
certificate holders.
It needs proof.

Join the movement replacing certificates with capability. Book your free Job Readiness Evaluation — 30 minutes that could change the direction of your career.

Not sure which track? Book a general roadmap call
3K+ Community
375+ Evaluations
Top 0.1% Globally