Understand the attack.Build the defence.
Hands-on challenges and structured courses, from your first step to professional level.
1200+
active users
700+
hands-on challenges
6
learning paths
2
ready courses
01Learning paths
Learn both the attack and the defence in practice
Every path shows how an attacker works and how a defence against it is built. Start at the beginner level or choose an advanced path that matches your experience.
Beginner level
Your first step into cybersecurity
Advanced level
In-depth practice for those who know the basics
02Real-world practice
Put your skills to work on real systems
Take what you learn here to BugOne, Uzbekistan’s bug bounty platform. Companies give official permission to test their systems, and you are rewarded for every confirmed vulnerability.
Test only in-scope systems and follow each program’s rules. Testing without permission is against the law.
- 01
Become a researcher
Create a free profile on BugOne. Companies never see your personal details.
- 02
Pick a program
Each program states exactly which systems are in scope and what the rules are.
- 03
Submit a report
Describe the vulnerability with steps to reproduce it. Specialists review every report.
- 04
Get rewarded
Confirmed vulnerabilities earn a cash reward, and your results appear on the leaderboard.
03Courses
Courses structured from start to finish
Each course is a complete program of video lessons, theory, tests and hands-on labs.
04Offline courses
Offline groups in Tashkent and Nurafshon
Learn cybersecurity through practice, in the same room as your instructor: from the beginner level to the Offensive, Defensive and Web Security tracks.
- Tashkent
- Nurafshon
- Places in each group are limited
05Corporate training
Prepare your team for real attacks
Programs for companies and government bodies, from everyday staff to SOC analysts. Training is adapted to your organisation’s tasks and infrastructure.
Who it is for
- Banks and finance
- Government bodies
- IT companies
- Telecom and industry
- 01
Security culture
For all staff: recognising phishing, social engineering, password hygiene and BEC schemes.
- 02
Phishing simulation
Testing staff with emails that mimic real schemes. Results in numbers: who clicked, who reported.
- 03
Technical team training
For IT, SOC and security teams: log analysis, incident response, pentest fundamentals, in the lab.
- 04
Custom program
A program built around your organisation’s needs: topics, format and timeline agreed with you.
How we work
- 01
Diagnostics
We assess the level of staff and the team.
- 02
Program
We build the program from the results.
- 03
Sessions
Theory and hands-on labs.
- 04
Report
Results and recommendations for the next steps.
Leave a request
We will get back to you shortly.
- Results measured in numbers
- Online or on-site
- In Uzbek and Russian
- Certificates for participants
Or contact us directly
06Certificate
Verify a certificate
Every certificate issued by Falcon Academy has a unique ID. An employer or partner can verify it here in a few seconds.
- Unique ID
- The full electronic certificate
- Open verification for employers
Certificate
Penetration Testing
Holder
Sample Learner
Issued
15.09.2026
07FAQ
Frequently asked questions
Is Falcon Academy free?
Signing up and starting to learn is free. Part of the platform is open on the free plan, while extended features and ready courses are offered inside the platform.
Which level should I start with?
If you are new to cybersecurity, start with Security Fundamentals and Networking Basics. If you know the basics, choose Web Security, Defensive Security or Offensive Security.
Can I learn cybersecurity from scratch?
Yes. No programming or IT background is required: the Security Fundamentals path starts with Linux, the terminal and core concepts. Every topic comes with a hands-on task, and from there you move on to pentesting (ethical hacking), SOC or web security.
Are there in-person cybersecurity courses in Tashkent?
Yes. Offline groups run at our Tashkent and Nurafshon branches: Security Fundamentals, Offensive Security (pentesting), Defensive Security (SOC) and Web Security. Apply on the Offline courses page.
Is ethical hacking legal?
Yes, with permission. We teach attack techniques in purpose-built labs and CTF challenges. Testing someone else’s systems without the owner’s written permission is against the law.
How do the hands-on challenges work?
Each challenge launches its own target and gives you an IP address and port. You connect to it with the tools on your own computer, find the vulnerability and submit a flag in the FALCON{...} format.
Do I get a certificate?
Yes. When you finish a course you receive an electronic certificate with a unique ID. Anyone can verify it in the Certificate section of this website.
Which languages can I study in?
The platform works in Uzbek, Russian and English. Corporate sessions are held in Uzbek and Russian.
Can you train our company’s staff?
Yes. The corporate program is built around your organisation’s needs: security culture, phishing simulation and technical team training. Leave a request and we will get in touch.
Capture your first flag today
Create a free account and access 700+ hands-on challenges.