Cybersecurity Training FAQ

Xploit Academy is an online cybersecurity training platform with self-paced courses in OT/ICS and SCADA security, governance, risk and compliance (GRC), and offensive security. Courses are built by practitioners who secure enterprise IT environments and industrial plants, so the focus is on skills you can apply on the job.

Our catalog spans five areas:

OT/ICS security: ICS, DCS and SCADA protection, IEC 62443 and OT security awareness.
GRC and compliance: ISO 27001:2022, ISO 27005, SOC 2, CMMC Level 1 and 2, HIPAA, GDPR, Saudi PDPL and ARAMCO SACS-002.
Certification prep: CISSP, CISA, CISM and CCSP.
Ethical hacking: Kali Linux, web application pentesting, bug bounty hunting, Nmap, Wireshark and Android malware analysis.
Leadership: vCISO and GRC consultant career training.

Browse all courses

Yes. Beginners can start with An Introduction to IT and Cyber Security or Fundamentals of Cyber Security. Experienced professionals can go straight to advanced tracks such as Advanced OT Cyber Security or the CMMC and ISO 27001 implementation courses.

Yes. All courses are on-demand, so you can start anytime and learn on your own schedule from desktop or mobile.

Individual course purchases include lifetime access, including future updates. Pro Membership gives access for as long as your subscription is active.

Yes. You receive a certificate of completion when you finish a course, which you can add to your LinkedIn profile or CV. Note that certification prep courses (CISSP, CISA, CISM, CCSP) prepare you for the official exams, which are taken separately with the certifying body.

Yes. Technical courses include practical demos with real tools such as Kali Linux, Nmap and Wireshark. Compliance courses walk through real artifacts, including scoping, policies, risk registers and assessment readiness.

Pro Membership unlocks most of the Xploit Academy catalog with a single subscription. That includes ISO 27001, SOC 2, CMMC, HIPAA, Saudi PDPL, the CISSP, CISA, CISM and CCSP prep courses, the ethical hacking courses and more. See what's included

Pro Membership is $99 USD per year, or 3 monthly installments of $35 USD.

Premium programs such as Advanced OT Cyber Security (ICS-DCS-SCADA) and the vCISO career bundle are sold separately.

Yes. You can cancel anytime from your account, and you keep access until the end of your current billing period.

We accept major credit and debit cards, PayPal, and we also accept cryptocurrency.

Yes. Refunds are available within 7 days of purchase if you have completed less than 25% of the course. Contact support to request one.

Yes. We offer group enrollment and security awareness programs for organizations, including CyberSafe 365 for office staff and OT/ICS Cyber Security Awareness for plant and operations teams. [CONFIRM: volume pricing] Contact us for volume pricing.

Yes. For utilities, water, energy and manufacturing operators, our Defend Your Plant service covers practical OT security, including IEC 62443 alignment, risk assessment and hardening of ICS environments.

Yes. We offer dedicated courses on the Saudi Personal Data Protection Law (PDPL), ARAMCO SACS-002 and National Governance & the IA Standard, along with international standards such as ISO 27001 and IEC 62443.

Visit our Support page or message us on WhatsApp using the chat button on any page. We typically reply within 24 hours.