Skip to content
Shadow Security
Suraksha Labs · Learn & practise

Learn cybersecurity by doing.

Early access soon

Free, hands-on cybersecurity labs for people starting from zero. You get the logs, the access records, a terminal and an objective, and you work out what happened.

Request early access (opens in a new tab)Join the community

Suraksha Labs is Shadow Security's free, hands-on cybersecurity learning and practice platform.

Why this exists

In India, “hacker” still sounds like an accusation.

Ask most families what a hacker does and you will hear something closer to a crime than a career. That perception has a cost: a generation of capable people treat security as something suspicious rather than one of the most useful skills they could have, while the country puts more of daily life online every year and needs far more people who can find the flaws in it.

Suraksha Labs is free because that gap is the point. Not a lead magnet, not a funnel into something else. We want “I work in security” to be an ordinary sentence to say in India.

How it works

The unit of work is a mission.

Not a chapter, not a video, not a quiz. A situation, some evidence, the tools to examine it, and a question you have to answer.

  • You get a situation

    Something happened. Nobody hands you the answer.

  • You get real evidence

    Logs, config, access records, traffic: the same messy material a real investigation starts from.

  • You get tools, not solutions

    A terminal and the standard utilities. Learning which one to reach for is part of it.

  • You reach a conclusion

    And then you find out whether you were right, and why.

Suraksha Labs · Mission briefNot a product screenshot
Mission 014 · Investigation

Someone got in last night.

A mid-sized company noticed unusual activity on an internal service just after 02:00. You have their logs, their access records and a shell. Nobody will tell you what happened; that's the job.

Objective
Find the entry point and establish what the intruder reached.
Evidence provided
Access logs · Auth records · Service config · Terminal
No prior experience requiredHints availableYou do the work
Illustrative mission. Suraksha Labs opens in early access soon.
Progression

From nothing to actually useful.

Each stage assumes only what the previous one taught, so there is no point where you are expected to already know something nobody explained.

Absolute beginner · No background at all
What an IP address is. What actually happens when you load a page. How to move around a Linux machine without being afraid of it.
Web fundamentals · After the basics
HTTP properly, cookies and sessions, how authentication is meant to work, and the specific ways it is usually got wrong.
Finding real flaws · Once the ground is solid
Access-control mistakes, injection, request forgery, and the business-logic errors that no scanner will ever find for you.
Investigation · The interesting part
Reading logs that were not written for you. Reconstructing what happened from incomplete evidence. Writing up what you found so somebody can act on it.

Indicative structure while Suraksha Labs is in development. Content at early access will be a subset of this.

AI in Suraksha Labs

A mentor, not an answer machine.

AI assistance is planned as guidance: explaining what you are looking at, a hint when you are genuinely stuck, and the conceptual answers that would otherwise cost you two hours.

Why it will never complete a lab for you
A platform where AI solves the exercise produces people who cannot do the job, which defeats the entire purpose of building it. The work is the product.
Early access

Get in when it opens.

Suraksha Labs opens in early access soon. Tell us where you're starting from and we'll get in touch when places open.

Request early access (opens in a new tab)What comes next →
Questions

About Suraksha Labs.

What is Suraksha Labs?
Suraksha Labs is Shadow Security’s free, hands-on cybersecurity learning and practice platform. Instead of lectures and multiple-choice tests, you work through investigations using logs, terminals, traffic and real evidence.
Is Suraksha Labs really free?
It is built to be free. The shortage of people with practical security skill is a bottleneck for the whole ecosystem, and putting a paywall in front of it would make that worse. Shastra and Astra are the commercial products.
Do I need any cybersecurity knowledge to start?
No. The first path assumes you do not know what an IP address is and builds from there. You do not need to arrive knowing HTTP, DNS, Linux or networking.
Is this ethical hacking training?
In substance, yes. You learn to find flaws the way an attacker would, so that you can help fix them. We describe it as practical security work rather than ethical hacking training because the skill matters more than the label, and because a lot of "ethical hacking" cybersecurity training teaches tools without teaching reasoning.
Is this a course platform?
Not in the usual sense. There is no video series to sit through. The unit of work is a mission: a situation, some evidence, a set of tools and an objective. You investigate and reach a conclusion.
Does the AI just solve the labs for me?
No, and that is deliberate. AI assistance acts as a mentor: hints, explanations, and help understanding what you are looking at. It will not do the work, because the work is the entire point.
When can I use it?
Suraksha Labs opens in early access soon. Request access now and we will contact you when places open.
Will there be CTFs and leaderboards?
Capture the flag competitions, downloadable and container-based labs, leaderboards and community challenges are planned directions rather than features you can use today. We would rather ship a small number of genuinely good missions first.