Cloud Security Bootcamps
Pwned Labs runs on-demand attack and defense bootcamps for AWS, Azure and Microsoft 365, Google Cloud, Kubernetes and AI systems, and each one leads to a hands-on certification: ACRTP, MCRTP, GCRTP, KRTP, AISRTP, or the expert-level MCRTE. Each certification is assessed with a 24-hour, unproctored exam in which you build an end-to-end exploitation chain from an entry point to the flag. Passing ACRTP, MCRTP and GCRTP also earns the multi-cloud M-CRTP3.
Hands-on training to execute and validate real-world cloud, AI, and Kubernetes attack and defense workflows. From professional-level bootcamps to advanced expert-level programs for senior practitioners and enterprise teams.
Pwned Labs Microsoft Cloud Attack & Defense Bootcamp
- Professional Edition
- Professional Edition

Attack and defend realistic Azure and Microsoft 365 environments
Pwned Labs Amazon Cloud Attack & Defense Bootcamp
- Professional Edition
- Professional Edition

Attack and detect AWS threats across identity and infrastructure
Pwned Labs Google Cloud Attack & Defense Bootcamp
- Professional Edition
- Professional Edition
.png?width=241&height=260&name=Google-Cloud-Attack-and-Defense-Bootcamp%201-min(1).png)
Attack and defend GCP workloads in real threat scenarios
Get certified
Complete a Pwned Labs bootcamp and validate your skills through a fully hands-on practical exam. The exam is scenario-based and designed to measure applied tradecraft, not memorization.
Successful candidates earn a Pwned Labs professional certification, demonstrating real-world cloud security expertise that holds up in real environments. Each credential is verifiable and backed by clear outcomes you can share with employers and leadership.
Explore each professional certification: AWS Red Team (ACRTP), Azure Red Team (MCRTP), GCP Red Team (GCRTP), AI Systems Red Team (AISRTP), Kubernetes Red Team (KRTP), the expert-level certifications, and the Cloud Penetration Testing certification.
Professional tier
Pwned Labs Microsoft Cloud Attack & Defense Bootcamp - Professional Edition
The Pwned Labs Microsoft Cloud Attack & Defense Bootcamp, Professional Edition teaches modern Azure and Microsoft 365 attack tradecraft observed in real intrusions (e.g., Storm-0558, APT-29), and the defensive techniques used to detect, investigate, and contain it.
Practitioners work through hands-on assume-breach scenarios to compromise, detect, and respond across Entra ID, Microsoft 365, and Azure infrastructure in realistic enterprise environments.
Pwned Labs Amazon Cloud Attack & Defense Bootcamp - Professional Edition
The Pwned Labs Amazon Cloud Attack & Defense Bootcamp, Professional Edition covers modern AWS attacker tradecraft seen in real campaigns from groups like AMBERSQUID and SCARLETEEL, and the defender workflows used to detect, investigate, and contain it.
Practitioners execute hands-on assume-breach scenarios to audit AWS configurations, exploit identity and compute paths, and respond to active threats across realistic AWS environments.
Pwned Labs Google Cloud Attack & Defense Bootcamp - Professional Edition
The Pwned Labs Google Cloud Attack & Defense Bootcamp, Professional Edition covers modern GCP and Google Workspace attacker tradecraft seen in real campaigns from groups like TRIPLESTRENGTH, and the defender workflows used to detect, investigate, and contain it.
Practitioners gain hands-on experience attacking and defending identity, workloads, and cloud services through assume-breach scenarios modeled on real-world GCP environments.
Build multi-cloud security capability with the M-CRTP3 certification
Develop consistent, practical red and blue team capability across AWS, Azure and Microsoft 365, and GCP and Google Workspace. Complete ACRTP, MCRTP, and GCRTP to earn the M-CRTP3 and prove your multi-cloud security credentials.
Specialized bootcamps
Pwned Labs AI Systems Attack & Defense Bootcamp - Professional Edition
The Pwned Labs AI Systems Attack & Defense Bootcamp, Professional Edition covers modern LLM and agentic attacker tradecraft, including activity attributed to groups such as TeamPCP, whose Mini Shai-Hulud worm hijacks CI/CD pipelines and targets AI coding agents, and the defender workflows used to detect, investigate, and contain it.
Practitioners gain hands-on experience attacking and defending LLM applications, RAG pipelines, and agentic systems through assume-breach scenarios modeled on real-world AI deployments.
Pwned Labs Kubernetes Attack & Defense Bootcamp - Professional Edition
The Pwned Labs Kubernetes Attack & Defense Bootcamp, Professional Edition covers modern Kubernetes and cloud attacker tradecraft seen in campaigns such as TeamTNT and the RBAC Buster operation, and the defender workflows used to detect, investigate, and contain it.
Practitioners gain hands-on experience attacking and defending clusters from minikube to managed Kubernetes on AWS, Azure, and Google Cloud through assume-breach scenarios modeled on real-world environments.
Expert tier
Pwned Labs Microsoft Cloud Attack & Defense Bootcamp - Expert Edition
The Pwned Labs Microsoft Cloud Attack & Defense Bootcamp - Expert Edition delivers complex Microsoft Cloud intrusion tradecraft successfully used by real threat actors, aligned to the Microsoft Cloud Red Team Expert (MCRTE) certification.
Defenders learn to build and validate detections for advanced techniques, while red teamers learn those techniques in depth and refine OPSEC across Entra ID, Microsoft 365, Intune, and hybrid environments using Microsoft Defender XDR and Microsoft Sentinel.
Preferential pricing available for MCRTP alumni and existing Pwned Labs Enterprise customers.
Self-paced, on-demand | Available from June 2026

Meet the team
Ian Austin is a security researcher and educator with a career spanning over 20 years in technical, security and leadership roles for global enterprises.
Ian was Head of Content at Hack The Box, a leading online platform for cybersecurity training and assessment. He also participated in the Green Team of Locked Shields, a NATO cyber defense exercise, contributing to the design and execution of realistic scenarios.
He is the founder of Pwned Labs, providing gamified and immersive cloud security labs for red and blue teams.
Filip Jodoin has over half a decade of experience across both red and blue cybersecurity roles, with a strong focus on cloud adversary emulation and modern Microsoft Cloud attack techniques.
Prior to focusing on offensive security, Filip worked in Azure architecture roles at Ubisoft, where he addressed complex Microsoft Cloud security challenges at enterprise scale.
Filip focuses on designing and executing realistic attack simulations across Azure, Entra ID, and Microsoft 365 to evaluate detection coverage and defensive readiness.
Tyler Petty brings over a decade of cybersecurity experience across technical and leadership roles and works as a cloud security engineer.
Driven by a passion for helping others, he has created hands-on labs in cloud security and DevSecOps, along with a course on using Infrastructure as Code to build secure infrastructure on AWS.
He is actively involved in the cloud security community, contributing hands-on educational content and open-source resources focused on AWS security, DevSecOps, and real-world defensive and offensive techniques.
Matt Watkins has over a decade of experience in offensive and defensive security, spanning big tech, startups, and leading vendors, with a specialization in cloud security-particularly GCP.
He brings deep expertise in building and securing operations at scale, combining hands-on technical skills with a talent for breaking down complex topics to help teams understand both the "what" and the "why" behind modern security practices.
He brings an attacker-informed mindset to cloud defense, focusing on practical detection engineering, threat emulation, and real-world security operations in GCP environments.
What previous participants say
Caleb Havens
Red Team Operator & Social Engineer, NetSPI
"I’ve attended two training sessions delivered by Pwned Labs: one focused on Microsoft cloud environments and the other on AWS. Both sessions delivered highly relevant content in a clear, approachable manner and were paired with an excellent hands-on lab environment that reinforced key concepts and skills for attacking and defending cloud infrastructures. The training was immediately applicable to real-world work, including Red Team Operations, Social Engineering engagements, Purple Team exercises, and Cloud Penetration Tests. The techniques and insights gained continue to be referenced regularly and have proven invaluable in live operations, helping our customers identify vulnerabilities and strengthen their cloud defenses."
Sebas Guerrero
Senior Security Consultant, Bishop Fox
"The AWS, Azure, and GCP bootcamps helped me get up to speed quickly on how real cloud environments are built and where they tend to break from a security standpoint. They were perfectly structured, with real-world examples that gave me rapid insight into how things can go wrong and how to prevent those issues from happening in practice. I’m now able to run cloud pentests more confidently and quickly spot meaningful vulnerabilities in customers’ cloud infrastructure.”
Matt Pardo
Senior Application Security Engineer, Fortune 500 company
"I’ve worked in security for more than 15 years, and every step up came from taking courses and putting the lessons into practice. I’ve attended many trainings over the years, and Pwned Labs’ bootcamps and labs are among the best I’ve experienced. When you factor in how affordable they are, they easily sit at the top of my list. As a highly technical person, I get the most value from structured, hands-on education where theory is immediately reinforced through labs. Having lifetime access to recordings, materials, and training environments means you can repeat the practice as often as needed, which is invaluable. If you’re interested in getting into cloud security, sign up for Pwned Labs.”
Steven Mai
Senior Penetration Tester, Centene
“Although my background was mainly web and network penetration testing, the ACRTP and MCRTP bootcamps gave me a solid foundation in AWS and Azure offensive security. I’m now able to take part in cloud penetration testing engagements and have more informed security discussions with my team.”
Practice this at Pwned Labs
Pwned Labs runs free starter labs in AWS, Azure and Google Cloud, so you can practice the groundwork before choosing a bootcamp:
- Intro to AWS IAM Enumeration (Free, Beginner): use the AWS CLI to list, retrieve and interpret IAM users, roles, groups and policies, the groundwork for the ACRTP exam.
- Intro to Azure Recon with BloodHound (Free, Beginner): collect Azure data with AzureHound and use BloodHound to see the relationships and attack paths that MCRTP builds on.
- Exploit SSRF with Gopher for GCP Initial Access (Free, Beginner): exploit a server-side request forgery bug, bypass an SSRF protection with the gopher protocol, and enumerate Google Cloud resources, a first step toward GCRTP.
Frequently asked questions
What certifications does Pwned Labs offer?
Pwned Labs offers ACRTP (Amazon Cloud Red Team Professional), MCRTP (Microsoft Cloud Red Team Professional), GCRTP (Google Cloud Red Team Professional), KRTP (Kubernetes Red Team Professional), AISRTP (AI Systems Red Team Professional) and the expert-level MCRTE (Microsoft Cloud Red Team Expert), and each one is earned through its bootcamp. Passing ACRTP, MCRTP and GCRTP also earns M-CRTP3 (Multi-Cloud Red Team Professional).
How are the certification exams assessed?
Each exam is fully hands-on and unproctored. You get 24 hours to build an end-to-end exploitation chain from a provided entry point to the flag, there is no pentest report to submit, and each bootcamp includes two exam attempts. The expert-level MCRTE exam also requires a command and control framework and a phishing component.
Are the labs hands-on with real cloud environments?
Yes. The bootcamps teach through hands-on labs, and every exam runs in a live environment: AWS for ACRTP, Azure and Microsoft 365 for MCRTP, Google Cloud for GCRTP, a Kubernetes cluster and the cloud account behind it for KRTP, LLM-backed and agentic applications for AISRTP, and an enterprise-scale Microsoft environment for MCRTE.
Do I get lifetime access to bootcamp materials?
Yes. Each Professional Edition bootcamp includes lifetime access to the latest session recordings, updated slides and command guides, bootcamp labs and future course updates, and 45 days of Academy access to the labs tied to each session, starting when you redeem your voucher. The Expert Edition includes lifetime lab access.
Are the bootcamps live or on-demand?
Every bootcamp is on-demand, so you can start straight away and work through the sessions and labs at your own pace. On the Professional Edition bootcamps, instructors are on hand in Discord to help.
Are the bootcamps suitable for beginners?
Pwned Labs runs free beginner labs at pwnedlabs.io/explore, and each bootcamp page lists its prerequisites. The professional bootcamps expect you to be comfortable on the command line, KRTP needs no prior Kubernetes experience and AISRTP needs no prior AI security experience, while the expert-level MCRTE program is aimed at senior practitioners.
About Pwned Labs
Pwned Labs is a hands-on cloud and AI offensive security training platform. It runs real-world attack labs and bootcamps for AWS, Azure, GCP, Kubernetes and AI systems, including the ACRTP, MCRTP, GCRTP, KRTP and AISRTP certifications. Free labs are at pwnedlabs.io/explore.