Cloud Security Bootcamps
Hands-on training in real-world cloud attack and defense.
From professional-level bootcamps to advanced expert-led cohorts for senior practitioners and enterprise teams.
Pwned Labs Microsoft Cloud Attack & Defense Bootcamp
- Professional Edition
- Professional Edition

Attack and defend Azure and Microsoft 365 in real-world breach scenarios
Pwned Labs Amazon
Cloud Attack & Defense Bootcamp
- Professional Edition
Cloud Attack & Defense Bootcamp
- Professional Edition

Attack and detect AWS threats across identity and infrastructure
Pwned Labs Google
Cloud Attack & Defense Bootcamp
- Professional Edition
Cloud Attack & Defense Bootcamp
- Professional Edition
.png?width=241&height=260&name=Google-Cloud-Attack-and-Defense-Bootcamp%201-min(1).png)
Attack and defend GCP workloads
in real-world threat scenarios
Get certified
Complete a Pwned Labs bootcamp and validate your skills through a fully hands-on practical exam.
Successful candidates earn a Pwned Labs professional certification, demonstrating real-world cloud security expertise that holds up in live environments.
Professional tier
Pwned Labs Microsoft Cloud Attack & Defense Bootcamp - Professional Edition
The Pwned Labs Microsoft Cloud Attack & Defense Bootcamp – Professional Edition teaches modern Azure and Microsoft 365 attack and defense tradecraft used by real threat actors, including Storm-0558 and APT-29.
Practitioners work through hands-on assume-breach scenarios to compromise, detect, and respond across Entra ID, Microsoft 365, and Azure infrastructure in realistic enterprise environments.
Next course starting: February 2026
Pwned Labs Amazon Cloud Attack & Defense Bootcamp - Professional Edition
The Pwned Labs Amazon Cloud Attack & Defense Bootcamp – Professional Edition focuses on modern AWS attack and defense tradecraft used by real threat groups such as AMBERSQUID and SCARLETEEL.
Practitioners execute hands-on assume-breach scenarios to audit AWS configurations, exploit identity and compute paths, and respond to active threats across realistic AWS environments.
Next course starting: March 2026
Pwned Labs Google Cloud Attack & Defense Bootcamp - Professional Edition
The Pwned Labs Google Cloud Attack & Defense Bootcamp – Professional Edition covers modern GCP and Google Workspace attack and defense tradecraft used by real threat actors, including TRIPLESTRENGTH.
Practitioners gain hands-on experience attacking and defending identity, workloads, and cloud services through assume-breach scenarios modeled on real-world GCP environments.
Next course starting: January 2026
Build multi-cloud security capability
with the M-CRTP3 certification
Develop consistent, practical red and blue team capability across AWS, Azure, and GCP. Completing ACRTP, MCRTP, and GCRTP earns the M-CRTP3 credential.

Meet the team
Ian Austin is a security researcher and educator with a career spanning over 20 years in technical, security and leadership roles for global enterprises.
Ian was Head of Content at Hack The Box, a leading online platform for cybersecurity training and assessment. He also participated in the Green Team of Locked Shields, a NATO cyber defense exercise, contributing to the design and execution of realistic scenarios.
He is the founder of Pwned Labs, providing gamified and immersive cloud security labs for red and blue teams.
Filip Jodoin has over half a decade of experience across both red and blue cybersecurity roles, with a strong focus on cloud adversary emulation and modern Microsoft Cloud attack techniques.
Prior to focusing on offensive security, Filip worked in Azure architecture roles at Ubisoft, where he addressed complex Microsoft Cloud security challenges at enterprise scale.
Filip focuses on designing and executing realistic attack simulations across Azure, Entra ID, and Microsoft 365 to evaluate detection coverage and defensive readiness.
Tyler Petty brings over a decade of cybersecurity experience across technical and leadership roles and works as a cloud security engineer.
Driven by a passion for helping others, he has created hands-on labs in cloud security and DevSecOps, along with a course on using Infrastructure as Code to build secure infrastructure on AWS.
He is actively involved in the cloud security community, contributing hands-on educational content and open-source resources focused on AWS security, DevSecOps, and real-world defensive and offensive techniques.
Matt Watkins has over a decade of experience in offensive and defensive security, spanning big tech, startups, and leading vendors, with a specialization in cloud security-particularly GCP.
He brings deep expertise in building and securing operations at scale, combining hands-on technical skills with a talent for breaking down complex topics to help teams understand both the "what" and the "why" behind modern security practices.
He brings an attacker-informed mindset to cloud defense, focusing on practical detection engineering, threat emulation, and real-world security operations in GCP environments.
What I liked most about the bootcamp was the hands-on approach. It wasn't just theoretical; I got to apply what I learned in real-world scenarios, especially in Azure environments. This practical experience really helped solidify my understanding of cloud security concepts and strategies.
