TelcoSec Academy

Learn Free.
Labs Are One-Time.

Every course, research module, and protocol archive is permanently free. Remote lab environments - which unlock your path certificate - are purchased once, per lab.

All content - FREE
+
Remote labs - one-time purchase
FREE FOREVER

Everything except remote labs is free

Sign up once and access the full telecom security curriculum - no card, no tier, no time limit.

Full course library (5G, LTE, GSM, PSTN, IMS)
Research protocol archives (SS7, Diameter, GTP)
OSINT toolkit & operator intelligence
Signaling dissectors & topology tools
RAN / Wireless deep-dive modules
XP system, streaks, leaderboard, and badges
Learning paths & certification roadmaps

Remote_Lab_Catalog

Each lab is a persistent, cloud-isolated environment provisioned per user. One purchase grants permanent access - including VPN credentials, SIM profiles, and the challenge board that unlocks your path certificate.

€49/ one-time

LTE eNB Security Lab

Hands-on exploitation and hardening of a live LTE eNodeB using srsRAN.

  • Dedicated isolated node - VPN access included
  • Per-user SIM profile (IMSI/K/OPc via HMAC)
  • Challenge board → path certificate on completion
  • Permanent access - no expiry, no subscription
€49/ one-time

5G SA Core Security Lab

Audit and attack a standalone 5G core network with Open5GS and UERANSIM.

  • Dedicated isolated node - VPN access included
  • Per-user SIM profile (IMSI/K/OPc via HMAC)
  • Challenge board → path certificate on completion
  • Permanent access - no expiry, no subscription
€69/ one-time

Baseband Research Lab

Reverse-engineer and fuzz baseband firmware in a hardware-backed range.

  • Dedicated isolated node - VPN access included
  • Per-user SIM profile (IMSI/K/OPc via HMAC)
  • Challenge board → path certificate on completion
  • Permanent access - no expiry, no subscription
€49/ one-time

IoT SIM Security Lab

Clone, authenticate, and analyze IoT SIM profiles in a controlled environment.

  • Dedicated isolated node - VPN access included
  • Per-user SIM profile (IMSI/K/OPc via HMAC)
  • Challenge board → path certificate on completion
  • Permanent access - no expiry, no subscription

Enterprise_&_Teams

Custom ARR

Institutional Access

For telecom operators, MSSPs, and training institutions requiring bulk lab seats, private nodes, NIS2 compliance tooling, or SAML/SSO integration.

  • Bulk lab seat allocation (team/cohort)
  • 20+ dedicated isolated research nodes
  • SAML / SSO integration
  • Custom institutional learning paths
  • NIS2 & GSMA NESAS compliance audit tooling
  • Dedicated account manager + SLA
Custom/ ARR
Contact Sales

Response within 1 business day

Intelligence_Briefing_FAQ

01.

Is TelcoSec Academy really free?

Yes. Every course, research module, intelligence feed, OSINT toolkit, RAN/wireless content, and signaling protocol archive is completely free for all registered users. No subscription required.

02.

What does a lab purchase include?

A one-time lab purchase gives you permanent access to that specific remote lab environment - including VPN credentials, per-user SIM profiles, and the challenge board. No recurring charges.

03.

Do labs unlock certificates?

Yes. Each learning path ends with a ProLab as the practical capstone. Completing a lab challenge is required to earn the path certificate. The lab is the gate to your credential.

04.

Can I buy labs individually?

Absolutely. Labs are sold à la carte - buy only the lab that aligns with your current path. No bundle required. Prices are one-time, not recurring.

05.

What infrastructure backs the labs?

Labs run on dedicated cloud-isolated nodes provisioned per user - LTE eNB via srsRAN, 5G SA core via Open5GS/UERANSIM, baseband via hardware-backed firmware environments, and IoT SIM via JavaCard toolchains.

06.

Is there an enterprise or team option?

Yes. For organizations requiring bulk lab seats, private lab nodes, SAML/SSO, NIS2 compliance tooling, or institutional learning paths, contact us for an ARR quote.