Skip to the briefing

NeuralCiberGuard · Game 2a

The road into the field is a road. Drive it.

A bounded coastal highway with eleven stops. Each stop is a real stage of the route into defensive security — the skills, the tools by name, the certificates the job postings actually ask for, and an honest note on what AI changed about it. Each one opens only when you have reasoned your way through it — no trivia, no multiple-choice about acronyms.

The route

Eleven districts

  1. Your first help-desk ticket

    What “the internet is down” actually means, and how to find out. A+, ITIL 4.

  2. The endpoint, and local admin

    Why “just for today” is the whole game. A+ Core 2, Linux Essentials.

  3. Your first network diagram

    Drawn from a subnet mask, in your head. Network+, CCNA.

  4. Identity, and the account nobody closed

    Joiner–mover–leaver, and why a hardware key is not the same control as a push. SC-900.

  5. Your first script

    And reading it before you run it as root. Bash, PowerShell, version control.

  6. Cloud, and the bucket left open

    Shared responsibility, roles over keys, and where the logs are not. AZ-900, AWS CCP.

  7. The crossing into security The crossing

    CIA, risk, inventory, and which document you are actually writing. Security+.

  8. Your first incident

    One email, one hostname, one decision.

  9. Vulnerability management

    Which twelve of forty-one thousand findings you fix this week. CySA+, KEV, EPSS.

  10. Your first SOC shift

    Spray or brute force, and what you revoke first. CySA+, BTL1.

  11. The detection you leave behind The goal

    Close the loop, or handle it by hand again. Sigma, KQL, NIST SP 800-61.

At the wheel

Driving it

Arrow keys work too, a gamepad works the moment you plug one in, and every control can be remapped from the pause menu. The clock is driving time only — it stops while you read, so taking the briefings seriously never costs you your record.

Read it as a map instead

Loading the route…

No 3D? Nothing is lost. If your browser or graphics driver cannot run WebGL, this page opens the map view automatically — every briefing, every explanation, every ATT&CK reference and every question is answerable there. A training product that only teaches people with a GPU has failed at its own premise.

Curriculum structure is our own, informed by the shape the field agrees on at roadmap.sh/cyber-security and written in our own words. Techniques are mapped to MITRE ATT&CK where one genuinely applies. Progress is saved in this browser and is never sent anywhere.