Security operations training that helps analysts build fundamentals they can use on the job.

Security training should hold up in real SOC work. Learn the fundamentals from a practitioner who builds detections, leads operations, and teaches the job clearly.

Featured training

Foundations of Security Operations

Take yourself from the ground floor of "What is a SOC" to "How to detect and investigate a multi-stage attack." Build a fully functioning SOC of your own, learn SIEM and ticketing fundamentals, and write custom detections.

Foundations of Security Operations

SOC engineers, managers, analysts, and anyone wanting to work in or better understand a SOC

On-demand · Live · 16 hours · Antisyphon Training

View Course

Why NOCT

Learn from someone who still does the work

NOCT teaches security operations the way practitioners actually have to apply it: clearly, directly, and with real-world judgment.

Training grounded in nearly a decade of work across incident response, detection engineering, and day-to-day SOC operations.

The flagship course, Foundations of Security Operations, gives you a clear baseline for analyst work — whether you're starting out or leveling up.

Articles, webcasts, and talks reflect the same practical approach and give you useful material outside the classroom.

Meet the instructor →

Get started

Ready to build stronger fundamentals?

Start with Foundations of Security Operations — available on-demand and live. Or explore webcasts, blog posts, and talks to see how Hayden teaches before you commit.