Invest in Capability That Compounds.
Premium opens every Premium course. Specialist opens every course. Detection rules, architecture decisions, investigation playbooks, and hardening configurations you deploy at work and keep permanently. Less than a single day of consulting, and the artifacts are yours forever.
Every course opens with lessons you can read in full without an account, without a card, and without a trial clock. Read one, run the exercises, and only then decide whether the depth is right for your work.
Browse the free previewsFree
- Free preview in every course
- Practice labs you can actually work, across the SOC Simulator, Forensic Lab and the query labs
- Run the exercises in your own tenant
- No account or card needed
Premium
- All Premium courses & skills
- Enterprise-grade Detection rules
- Cyber Investigation playbooks
- Exams and Certifications, CPE credits
Specialist
- Everything in Premium
- Advanced architecture and identity engineering courses
- Offensive security and purple teaming
- Deep-dive memory and endpoint forensics
Business
- Everything in Specialist
- A named seat for each team member
- Add or remove seats anytime
- Single invoice for expense reporting
What Subscribers Say
“Was a bit hesitant, but it’s been money well spent. A single subscription to all the courses is a good deal. The KQL for Detection and Threat Hunting course gave a lot of production-ready queries, and I found the investigation playbooks extremely helpful as they worked well for our environment.”
“The Microsoft 365 Threat Hunting course provided a lot of strategies and ideas for campaigns with repeatable processes. We used the material, especially the cheatsheets and walkthroughs, to run our first proper hunt the week after finishing the modules.”
“Really enjoyed the Conditional Access Design modules. It forced us to measure our actual coverage instead of assuming it. Now it’s much easier to spot our gaps and evaluate the effectiveness of our production policies.”
“After the Detection Engineering course we deployed 40+ validated rules, with little adjustment needed for our environment. They worked perfectly.”
“The DFIR courses have really simplified the process, instead of the collect-everything-and-sort-it-later approach. I liked the structured walkthroughs of the investigation process, and I’m glad the courses are built around open-source tools, which makes things easier for us.”
“I’ve taken several M365 courses, and most are focused on the products and features, but not on how to incorporate them into your existing solutions or real-world applications. The courses here skip the generic Microsoft marketing and focus on how to actually handle real security issues.”
Getting Your Employer to Pay
A Specialist subscription costs less than a single day of security consulting. Your team gets structured professional development that produces documented architecture decisions, tested detection rules, and validated security configurations, artifacts your organization keeps permanently.
Forward this page to your manager with one sentence: “This is a professional development subscription that produces operational security artifacts for our environment, detection rules, architecture documentation, and investigation playbooks. It costs less than one day of consultant time per year.”
Ridgeline subscriptions are commonly expensed as professional development, training, or continuing education. Annual subscriptions generate a single invoice suitable for expense reporting or purchase orders.