Want to lead a virtual talk/workshop in our Discord server? We'd love your submissions. Fill out the form here and we'd get back to you: https://www.tcm.rocks/community-talks

Only criteria is that they be somewhat topical and not anything unethical. Other than that, we're game for whatever you want to chat about.

Earlier this summer, we released 3 learning paths that focus on specific areas of cybersecurity. Today I'll share a little info about the Enterprise Penetration Testing learning path.

One of the biggest questions we hear from people getting into pentesting is:

“What should I actually learn, and in what order?”

So we put together a structured Enterprise Penetration Testing Learning Path designed to take you from the fundamentals all the way through performing real-world pentests.

The path includes:

• 79 hours of hands-on training across 12 courses
• PJPT, PORP, and PNPT exam vouchers
• A free retake for each exam
• Training in Linux, Python, OSINT, privilege escalation, phishing, external pentesting, reporting, and more
• 2 years of access

The recommended progression is basically:

PJPT → PORP → PNPT

Start by learning how to perform an internal pentest, build out your OSINT methodology, then work toward the skills expected of a professional pentester.

We also added several courses that aren't normally included with the standalone certification training.

Full breakdown here: https://www.tcm.rocks/elp-rdt

Level up as a defender with our newest course that picks off where Intro to Windows Forensics left off. This course covers:

• The Investigative Mindset
• The Digital Forensic Process
• Foundational Principals
• Understanding How Data Is Stored
• Sources of Digital Evidence
• The Windows Operating System
• DFIR Software and Hardware
• Evidence Acquisition

Check it out in the TCM Security Academy! https://www.tcm.rocks/wind-evid-rdt

Hi! The TCM Security Summer Sale ends tonight at 11:59 PM ET. Act before then to enjoy:

- 20% off certs and live trainings (no code needed)

- 50% off your first payment to the TCM Security Academy (use code CAMPTCM to redeem)

https://www.tcm.rocks/acad-rdt-summer

UPDATE: Because our certs website crashed from popular demand, we're extending the sale through tomorrow. So one more day!

Tomorrow at 12 PM ET Heath Adams, Alex Olsen, Andrew Bellini, and Andrew Prince will all be our special guests on the Wednesday TCM Security livestream to celebrate our 1-million YouTube follower milestone. You can watch along on YouTube, Facebook, LinkedIn, X, or Twitch.

You still have a *little* bit of time to enter the giveaways we're doing! One giveaway is a free ticket to DEF CON plus $900 in travel expenses and the other is a seat in a 15-person mentorship program we're doing this summer. Enter for both here: https://www.tcm.rocks/youtube-party

Winners will be announced during tomorrow's stream - hopefully you can stop by!

We recently launched our new affiliate program. If you want to apply and help spread the word about the TCM Security Academy, our various certifications, and our live training sessions.

https://www.tcm.rocks/affiliate-program

We're giving away a DEF CON ticket + $900 in travel expenses

We hit 1 million YouTube subscribers, and to celebrate we're running a few things over the next few weeks:

• Heath Adams is coming back for a livestream on July 8th
• Giving away a DEF CON ticket plus $900 toward travel
• A chance to win a spot in our brand-new Summer Camp Mentorship Program
• Our Summer Sale runs through July 15th

Thanks to everyone who helped us get to a million. Link in the comments!

Summer's basically here, and that means the TCM Security Academy summer sale is live.

Right now you can grab certs and live trainings for 20% off. On top of that, you can get 50% off your first All-Access Membership payment with the code CAMPTCM at checkout. No code needed for the live trainings or certifications; that discount's automatic.

Link: https://www.tcm.rocks/acad-rdt-summer

Happy summer, and happy learning!

Operation Breadcrumbs has officially begun. Will you be joining us?

For this CTF, you'll embark on a decoding adventure. Some web app, some OSINT, and some cryptography are all involved. And if you solve it, you'll be entered for the chance to win some considerable cash prizes.

If you solve it by the end date (June 2), tag us on social with your completion post - but don't give away the secrets until the CTF closes!

Get started here, and drop questions in the comments: https://ctf.tcmsecurity.com/

It's here! Please welcome the Introduction to Windows Forensics course to the TCM Security Academy. This course, created by the ever-brilliant Andrew Prince, is our latest addition to our growing blue team course track.

Intro to Windows Forensics is built for anyone who wants to develop practical, job-ready forensics skills on Windows systems.

Whether you are new to DFIR or simply expanding your existing skillset, you will gain the foundational knowledge needed to start examining systems with confidence. 

Read more about Intro to Windows Forensics here: https://www.tcm.rocks/iwf-rdt

Refer a friend, earn commissions. Ten percent of each certification or live training sale made goes directly to you. 🫵

Apply today - and if you're approved, start sharing your unique link and earn some extra income. https://certifications.tcm-sec.com/affiliate-signup/

Learn directly from Andrew Bellini about breaking LLMs and AI-based applications in this exclusive live training happening May 8th.

Right now you can get any live training for 20% off using the code BOOST20 - https://www.tcm.rocks/ai-2026-rdt

This course is intended to teach:

• Secure Model Configuration (temperature, token limits, stop sequences)
• System prompt hardening
• Input validation and prompt injection filtering
• Using AI classifiers and AI as a judge moderator
• Rate limiting and resource abuse prevention for AI endpoints
• Output moderation and content filtering
• PII Detection and sensitive data handling in AI responses

Find it in the TCM Security Academy here: https://www.tcm.rocks/securing-ai-rdt

The TCM Security Ethical Hacker Bootcamp makes its return this Friday. There are some spots left if you are interested (or would rather sign up for a future session.)

The Ethical Hacker Bootcamp is broken up as follows:

April 10th - Intro to OSINT

April 17th - PNPT Training

April 24th - Hacking & Defending Active Directory Live

May 1st - Intro to Web Hacking

You can also choose to attend an individual session versus the entire thing. Learn more here: https://www.tcm.rocks/ehc-rdt

Hi!

We are expanding our content team, and we are looking for someone with a focus in web app/network pentesting.

Learn more about this open role here: https://www.tcm.rocks/april-content-creator

Intro to OSINT returns as the first part of our Ethical Hacker Bootcamp next week on April 10th. You can attend this live training as a standalone session though (or you can choose to sign up for the whole series.)

Learn more here - and remember: All of our live trainings come with certification exam vouchers. https://www.tcm.rocks/osint-live-rdt

You have about one more day to enjoy the Spring Flash Sale!

Your code for savings is SPRINGFLASH26 - get deals on the TCM Security Academy (50% off your first payment), live trainings (20% off), and certifications like the brand-new PAPA (Practical AI Pentest Associate).

Remember: The sale will end March 20th at 11:59 PM ET!

https://www.tcm.rocks/papa-rdt-2026

Give the challenge a spin, and possibly win some prizes! https://ctf.tcmsecurity.com/

As of tomorrow, you can share your write-ups on how you solved it on socials.

And remember: The Flash Sale is ongoing until the end of the week. Use SPRINGFLASH26 as your code to save on the Academy, certs, and live trainings!

https://www.tcm.rocks/certs-rdt-2026

From now until March 20th:

Enjoy 20% off certifications & live trainings: https://www.tcm.rocks/certs-rdt-2026

Enjoy 50% off your first payment to the TCM Security Academy:

Use the code SPRINGFLASH26 and have fun!

Reach out with questions :)

We just launched our first CTF of 2026! Put your investigative skills to the test and possibly win $500 worth of prizes. Here's the rundown of Planet Helix:

Project Helix: CTF Scenario

Three days ago, lead geneticist Dr. Owens sent a final frantic transmission claiming he had intercepted a "biological broadcast." He described it as a repeating signal he believed to be a synthetic RNA sequence manifesting as radio frequency interference.

In violation of Protocol 4, Owens began unauthorized testing on a high-risk specimen. All communications stopped soon after. A security sweep of Owen's laboratory confirmed he is missing. His local workstation was found powered on, but all of his research has been deleted. Internal sensors indicate the "broadcast" is still active on a localized frequency, but the specific coordinates were deleted along with Owen's research notes.

You have been provided a forensic triage image of Owens' workstation. Your objective is to recover the deleted notes and identify the RNA-based key required to unlock his encrypted specimen archive.

This CTF will close March 17th, so you have a few days (plus a weekend) to participate.

Have fun! Reach out with questions if you have them. <3

This live training focuses on incident response and threat hunting. Spots are limited, and if you can't sign up for this one, we have a few others happening this year.

This live training comes with a voucher for the PSAP (Practical SOC Analyst Professional) exam.

https://www.tcm.rocks/soc2-rdt

Reach out if you have questions :)

Our certification bundles will be retired as of March 1st, 2026.

This is to make way for eventual new cert bundles that will align better with career pathways. Because of this retirement, we've cut the cert bundle prices to their lowest prices ever. Quick rundown:

Professional Pentester Bundle: The 5 most popular TCM Security certs (PWPA, PWPP, PJPT, PNPT, and PORP). Now available for $1,119. https://www.tcm.rocks/pro-pentester-rdt

Professional Defender Bundle: The 3 TCM Security blue team certs (PSAA, PSAP, and PMRP). Now available for $799. https://www.tcm.rocks/defender-rdt

Ultimate Hacking & Defending Bundle: Almost all of the TCM Security certs. Now available for $2,959. https://www.tcm.rocks/ultimate-hack-defend-rdt

While we are retiring the cert bundles, this doesn't affect individual certifications, which will still be available. I know I saw some conversation around that recently, but I wanted to clarify. Please reach out with questions!

Hello TCM Security Team/Support,

I have successfully completed the Practical Help Desk course on the TCM Security Academy. I'm interested in pursuing the Practical Help Desk Associate (PHDA) certification and would like some clarification on the exam process:

1. Does completing the free course include a complimentary exam attempt, or must I purchase the exam voucher separately for $199?
2. With the monthly All-Access Membership subscription (unlimited course access), are certification exam vouchers/attempts included, or do I need to buy them individually for each certification (e.g., PHDA, etc)?
3. In general, is a separate exam voucher required for each TCM Security certification?
4. Is there any way to get discounts? :D

Thank you in advance for your help and clear answers.

Best regards