Skip to content
DAEMONCORE // ACADEMY
DAEMONCORE 5.1 // TRUST CHAIN

STOP WATCHING.START OPERATING.

Artifacts over vibes. Learn the model. Enter the range. Prove the finding.

DaemonCore Academy replaces passive training with 127 practical lessons, sealed training ranges, evidence collection, and real mastery gating. Every number is earned. Every range proves what it is.

DOWNLOAD DAEMONCORE
UNLOCK FIELDOPS PRO — $29.99LIFETIME MEMBERSHIP / 3 PCs
EXPLORE THE ACADEMY

127 PRACTICAL LESSONS // 70 LAB CONDITIONS // 8 PATHWAYS // 8 DRILL SETS // 7 FIELD MISSIONS

DAEMONCORE ACADEMY

OPERATOR SESSION // 5.1 ACTIVE

LESSON
12 / 127
WORKBENCH
PASSED
VALIDATION
VERIFIED
EVIDENCE
04 ARTIFACTS
RANGE
CONTAINED
OPERATOR XP
2840

> verifying trust chain 5.1...

> validating pack digest...

> containment verified

> evidence artifact sealed

> mastery gate satisfied

>

STATUS // OPERATOR CLEARED00:00 UTC

THE LOOP

NOT ANOTHER
CYBER COURSE.

Most platforms teach security like a spectator sport.

  • Watch a video.
  • Copy three commands.
  • Get XP.
  • Move on.

DaemonCore Academy was built around a different loop.

  1. 01

    LEARN

    MENTAL MODEL

  2. 02

    VALIDATE

    KNOWLEDGE CHECK

  3. 03

    OPERATE

    DISPOSABLE RANGE

  4. 04

    EVIDENCE

    ARTIFACT CAPTURE

  5. 05

    MASTER

    GATE SATISFIED

If you can't explain the signal, reproduce it, document it, and prove what happened—you haven't finished the lesson.

FULL-SPECTRUM TRAINING

127 LESSONS. EIGHT
ACADEMY PATHWAYS.

127 COMPLETE LESSONS // ~120 HOURS GUIDED PRACTICAL WORK

DaemonCore Academy contains 120 hours and 45 minutes of guided practical work across 8 complete pathways. Every node depends on the one before it: you don't skip ahead by clicking, you advance by producing the required artifact and satisfying the mastery gate.

CORESPECIALISTENTERPRISEDEFENSEPLATFORM
PATHWAY 07 DOSSIERPLATFORM

CONTAINERS AND KUBERNETES

OBJECTIVE
Assess isolation, capabilities, and runtime boundaries in clusters.
EXPECTED SIGNAL
Capability or mount that dissolves the container boundary.
REQUIRED ARTIFACT
Runtime configuration evidence and cluster mapping.
MASTERY GATE
Demonstrate lateral movement across disposable Docker-based pods.
PREREQUISITEPATHWAY 06
GATEENFORCED

RANGE FABRIC 5.0

SEALED
TRAINING RANGES.

DaemonCore ships with nine bundled range packs through a content-addressed pack registry. Every launch fails closed when pack integrity does not match SHA-256 signatures. Runtime containment verification is performed before you ever get a shell.

IDENTITY CITADEL

Identity Citadel is the first protocol-native enterprise identity range. Unlike simulated web wrappers, it runs a full Samba Active Directory environment using live DNS, Kerberos, LDAP, and SMB.

SEALED BOUNDARIES

  • NINE BUNDLED RANGE PACKS
  • CONTENT-ADDRESSED REGISTRY
  • SHA-256 INTEGRITY CHECKING
  • FAILS CLOSED ON MISMATCH
  • RUNTIME CONTAINMENT VERIFICATION

TRUST CHAIN 5.1

EVIDENCE YOU CAN
ACTUALLY VERIFY.

Trust Chain 5.1 ensures that the environment you are testing is exactly what it claims to be. Full-tree fingerprints cover Dockerfiles, scripts, fixtures, cases, scenario contracts, and Compose definitions.

  • DOCKER ENGINE & COMPOSE PREFLIGHT DIAGNOSTICS
  • DETECTION OF MODIFIED, REMOVED, OR INJECTED FILES
  • DIGEST-SEALED LAUNCH RECEIPTS
  • EXPORTABLE JSON INTEGRITY RECEIPTS
  • RUNTIME VERSION & CONTAINMENT STATE BOUND INTO RECEIPT
  • RECEIPT REFERENCES RETAINED WITH MISSION ATTEMPTS
INTEGRITY RECEIPTSEALED
{
  "receipt_id": "rcpt_7f3b9...",
  "timestamp": "2026-08-26T20:01:00Z",
  "version": "5.1",
  "pack_digest": "sha256:8a1f...",
  "containment_state": "verified",
  "tree_fingerprint": {
    "dockerfiles": "match",
    "scripts": "match",
    "fixtures": "match"
  },
  "network": "isolated",
  "signature": "sig_4d9a..."
}

MASTERY SYSTEM

YOU DON'T PASS
BY WATCHING.

The Mastery System evaluates your capability across six measured domains through fifteen evidence-driven professional decisions. We use practical scores, decision history, and adaptive remediation based on actual performance—no fake rankings, invented readiness scores, or imaginary community statistics.

0

PROFESSIONAL DECISIONS

0

PRINCIPAL CAPSTONES

0

MASTERY DOMAINS

0

LAB CONDITIONS

INCIDENT // AUTHORIZATION FAILURE WORKBENCH ACTIVE

OBSERVED

GET /api/accounts/8841
200 OK

OPERATOR HYPOTHESIS

EVIDENCE REQUIRED

CONFIDENCE46%

AWAITING INTERPRETATION — NO COMMAND WILL PASS THIS GATE FOR YOU

DISPOSABLE RANGE

THE GHOST PORT

A REAL RANGE. A REAL SHELL. A HARD BOUNDARY.

When Docker Desktop is available, The Ghost Port provisions a disposable operator container and purpose-built target.

Nmap and curl return live results. Arbitrary shell commands work inside the operator container. When the run ends, the target disappears.

THE SHELL IS UNRESTRICTED.
THE BOUNDARY IS NOT.

DAEMONCORE HOST
CONTAINMENT GATE

INTERNAL RANGE

OPERATOR

UNRESTRICTED SHELL

TARGET

DISPOSABLE // EPHEMERAL

✕INTERNET
CONTAINMENT VERIFICATION 0/7
  • NO HOST MOUNTSCHECKING
  • NO PUBLISHED TARGET PORTSQUEUED
  • NO PRIVILEGED CONTAINERSQUEUED
  • CAPABILITIES DROPPEDQUEUED
  • NO-NEW-PRIVILEGESQUEUED
  • EGRESS BLOCKEDQUEUED
  • RESOURCE CEILINGSQUEUED
AWAITING VERIFICATION

PROFESSIONAL TIER

FIELDOPS PRO

REAL DIAGNOSTICS. AUTHORIZATION BOUND.

FieldOps Pro performs authorization-bound diagnostics against exact public targets. Every action is scoped to a declared engagement, a declared window, and a pinned destination.

  • DNS resolution
  • TCP reachability
  • Bounded allowed-port surveys
  • HTTP header inspection
  • TLS inspection
  • Fixed-rate resilience baselines
  • Evidence export
$29.99LIFETIME MEMBERSHIP3 PC ACTIVATIONS
UNLOCK FIELDOPS PRO

A paid license unlocks the tool. It does not authorize a target. The Academy is accessible without purchasing FieldOps.

ENGAGEMENT VAULT ENGAGEMENT // DC-0042
CLIENT
ACME SYSTEMS
AUTHORIZATION
AUTH-2026-00841
WINDOW
21:00 → 23:00 UTC
TARGET
academy.example.com
PORTS
443
ATTESTATION
VERIFIED
DESTINATION
PINNED
LEDGER
INTACT
SHA-256 EVIDENCE LEDGERAPPEND-ONLY

  1. ENTRY 001

    pending

  2. ENTRY 002

    pending

  3. ENTRY 003

    pending

  4. ENTRY 004

    pending

VERIFYING CHAIN

Engagement records are append-only. Completed and blocked actions are both written to the evidence ledger, so a refusal is as auditable as a result.

RESILIENCE

DAEMONCORE
CHAOS ENGINE.

BREAK ASSUMPTIONS. MEASURE RECOVERY.

Four resilience profiles let operators apply pressure deliberately, watch the SLO boundary, and measure how a system actually recovers — not how its documentation claims it does.

P1

BASELINE

Establish normal latency and error behavior.

P2

CONTROLLED RAMP

Increase pressure gradually while watching SLO boundaries.

P3

SPIKE

Measure behavior under a sudden controlled load increase.

P4

BOUNDED SOAK

Observe stability under sustained, capped pressure.

LIVE TELEMETRY // CHAOS RUN STREAMING
REQUEST RATE420 RPS
P95 LATENCY610 ms
ERROR RATE0.40 %
ACTIVE PROBES58
SLO STATUSWITHIN BOUNDS
RECOVERY TIME1.8 s
RESILIENCE SCORE86

SLO LIMIT

P95 < 850ms

ERROR RATE

< 3.0%

AUTO ABORT

ARMED

OPERATOR OVERRIDE AVAILABLE AT ALL TIMES
  1. STEP 01

    SLO BREACH DETECTED

  2. STEP 02

    LOAD PHASE TERMINATED

  3. STEP 03

    RECOVERY VALIDATION

  4. STEP 04

    RESULT SEALED

CONTAINED LABORATORY POWER

SEALED
POWER DOMAIN.

Inside the sealed Academy range, operators can study saturation, breakpoint discovery, guardrail design, and recovery engineering against a disposable black-box target. None of this capability is pointed at a public network.

0RPS

SUSTAINED CEILING

0WORKERS

CONCURRENCY CAP

0REQUESTS

TOTAL BUDGET

SEALED CONTAINMENT BOX

CHAOS WORKER

DISPOSABLE TARGET

BLACK BOX

  • 500 RPS MAX
  • 100 WORKERS MAX
  • 30K REQUEST CAP
  • NO PRIVILEGES
  • NO INTERNET EGRESS
  • NO HOST MOUNTS
  • NO PUBLISHED PORTS
  • AUTO TEARDOWN
✕INTERNET // DISCONNECTED

POWER WITHOUT CONTAINMENT
IS A LIABILITY.

The same pressure profiles that teach breakpoint discovery inside the range are deliberately unavailable against public infrastructure. FieldOps handles public targets under authorization and fixed rates; the sealed domain handles force.

OPERATOR RECORD

YOUR RECORD
IS EARNED.

XP, streaks, weekly minutes, lessons completed, workbench scores, validation checks, drill performance, field missions, achievements and activity history — all of it derived from work you actually finished.

  • NO SEEDED XP.
  • NO FAKE PROGRESS.
  • EVERY NUMBER COMES FROM COMPLETED WORK.

Records are local-first with atomic writes, backup recovery, JSON export and reset controls.

OPERATOR // THOR RECORD VERIFIED
ASSESSMENT PROGRESS0%
PRACTICAL SCORE0
VALIDATIONS0/70
FIELD MISSIONS0/7
CURRENT STREAK12 DAYS
EVIDENCE ARTIFACTS47
WEEKLY MINUTES412
LESSONS COMPLETED84 / 127
DRILL AVERAGE89
ACHIEVEMENTS09

ACTIVITY HISTORY

  • D-01WORKBENCH 12 // AUTHORIZATIONPASSED
  • D-01EVIDENCE ARTIFACT SEALED+3
  • D-02DRILL SET 06 // API SURFACE94
  • D-03RANGE RUN // GHOST PORTCONTAINED
  • D-04VALIDATION 16 // SECRETSVERIFIED

FIELD NOTES

TECHNICAL REFERENCE CARDS.

COMPACT OPERATOR CARDS // NOT BLOG POSTS

  • FN-01

    RECON

    • Record the source of every fact.
    • Resolve before you scan.
    • Version hints are hypotheses, not findings.
    • Note what you deliberately did not touch.
  • FN-02

    HTTP EVIDENCE

    • Capture the full request and response pair.
    • One variable changes per comparison.
    • Timestamps in UTC, always.
    • Redact credential material at capture time.
  • FN-03

    FINDING WRITING

    • Impact first, mechanism second.
    • State the affected identity and object.
    • Include a reproducer a peer can run.
    • Separate observation from inference.
  • FN-04

    RANGE RULES

    • Authorization precedes the first packet.
    • Stay inside the declared boundary.
    • Log refusals as well as results.
    • Tear down what you provisioned.

LOCAL FIRST

YOUR TRAINING RECORD
BELONGS TO YOU.

The Academy keeps your operator record on your machine. Nothing about your training work, evidence, or engagement data is shipped off to DaemonCore.

  • No account dependency.
  • Operator data remains local.
  • Atomic persistence.
  • Backup recovery.
  • JSON export.
  • Reset controls.
  • Secure license-key storage.

PERSISTENCE PATH

ACADEMY
LOCAL OPERATOR RECORD
BACKUP / EXPORT

NO UPLOAD PATH // NO REMOTE TRAINING STORE

SYSTEM REQUIREMENTS

WHAT THE RANGE
NEEDS.

Docker Desktop with Linux containers is required for the live Ghost Port range. Without it, the Academy still runs the lessons, workbenches, validations and record — the range simply reports simulation mode instead of pretending to be live.

ENVIRONMENT CHECK3 / 3 DETECTED
OPERATING SYSTEM
Windows 10 / 11
RUNTIME
Node.js 20+
RANGE PROVIDER
Docker Desktop

  • WINDOWS //

    SUPPORTED

  • DOCKER RANGE //

    AVAILABLE

  • BROWSER PREVIEW //

    SIMULATION MODE

COMPARISON

ACADEMY VERSUS
FIELDOPS PRO.

DaemonCore Academy compared with FieldOps Pro
DAEMONCORE ACADEMYFIELDOPS PRO
127 Practical LessonsAuthorization-bound diagnostics
Sealed Training RangesExact target allowlists
Identity CitadelTesting-window enforcement
Mastery SystemPublic-destination validation
No target authorization neededControlled resilience testing
Included for free$29.99 Lifetime (3 PCs)

FAQ

FREQUENTLY ASKED
QUESTIONS.

Is DaemonCore available for macOS or Linux?

No. DaemonCore 5.1 is built exclusively for Windows 10 and Windows 11.

Do I need Docker Desktop?

Yes. Docker Desktop with Linux containers is required to run the sealed Ghost Port ranges and Identity Citadel locally. Without it, the Academy functions in a limited simulation mode.

How does the $29.99 FieldOps license work?

FieldOps Pro is a one-time purchase of $29.99 for a lifetime membership, which includes activation on up to 3 PCs. It unlocks authorization-bound external diagnostics. The Academy, including all 127 lessons and ranges, is completely free.

Does FieldOps Pro authorize me to attack targets?

Absolutely not. Training software is not authorization. FieldOps Pro requires you to input your explicit scope, window, and authorization reference before conducting any diagnostics against public targets.

Are there automatic updates?

No. The application is completely offline-first and does not silently update itself or phone home. You download updates manually when they are ready.

Where is my progress data stored?

Locally on your machine. DaemonCore 5.1 has no cloud database, no tracking pixels, and no telemetry.

STOP COLLECTING COURSES.START COLLECTING EVIDENCE.

  • Learn the model.
  • Enter the range.
  • Make the decision.
  • Capture the evidence.
  • Earn the record.
DOWNLOAD DAEMONCORE
UNLOCK FIELDOPS PRO — $29.99LIFETIME MEMBERSHIP / 3 PCs
EXPLORE THE ACADEMY

DAEMONCORE ACADEMY // v5.1

TRAINING SOFTWARE IS NOT AUTHORIZATION.

USE ONLY ON SYSTEMS YOU OWN OR HAVE EXPLICIT PERMISSION TO TEST.

DaemonCore Academy Masterclass
Upcoming

Spring 2027 Hands-on Masterclass Webinar

Since this is a hands-on session, attendance will be strictly limited to ensure every participant receives direct feedback and has their questions answered in real-time.

STAY TUNED FOR THE SCHEDULE