A week of instructor-led training costs $3,000. A Ridgeline subscription costs less than a single day of security consulting — and produces detection rules, architecture decisions, investigation playbooks, and hardening configurations you deploy at work and keep permanently. Not content you consume once. Infrastructure you build and own.
Free
Free
$0
No account needed
Free foundation modules in every course. Read the content, run the exercises, and decide if the depth is right for you — before you spend anything.
Full access to every Premium course, all lab packs, and every deployable artifact. You produce detection rules, investigation playbooks, and hardening configurations — operational infrastructure you keep permanently.
Cancel anytime · Secure checkout via Stripe · Instant access
Specialist
Specialist
$289/year
or $29/month
Everything in Premium plus Specialist-tier courses — M365 Security Architecture, Identity and Access Management, Purple Teaming, Applied Memory Forensics, and Advanced Windows Forensics. You produce architecture decision records, IAM program packages, validated detection rules for 136 ATT&CK techniques, and memory forensics workflows.
Cancel anytime · Secure checkout via Stripe · Instant access
Team
Team
$899/year
or $99.99/month · 5 users
Everything in Specialist for your security team. One billing account, five seats. Your team produces a shared library of detection rules, playbooks, and architecture artifacts built to a common standard.
Cancel anytime · Secure checkout via Stripe · Instant access
Getting Your Employer to Pay
A Specialist subscription costs less than a single day of security consulting. Your team gets structured professional development that produces documented architecture decisions, tested detection rules, and validated security configurations — artifacts your organization keeps permanently.
Forward this page to your manager with one sentence: "This is a professional development subscription that produces operational security artifacts for our environment — detection rules, architecture documentation, and investigation playbooks. It costs less than one day of consultant time per year."
Ridgeline subscriptions are commonly expensed as professional development, training, or continuing education. Annual subscriptions generate a single invoice suitable for expense reporting or purchase orders.
Common Questions
What's the difference between Premium and Specialist?
Every course and skill on the platform is labeled either Premium or Specialist. Premium subscribers get access to everything marked Premium. Specialist subscribers get everything — both Premium and Specialist content. You can see which tier a course requires on its course page before subscribing. Most courses are Premium. Specialist courses are designed for practitioners who want the deepest operational depth — M365 Security Architecture, Identity and Access Management, Purple Teaming, Applied Memory Forensics, and Advanced Windows Forensics.
Can I try before subscribing?
Every course includes free modules you can read without an account. No signup required. Read the content, run the exercises, and decide if the depth is right for your work.
Can my employer pay for this?
Yes. Annual subscriptions generate a single invoice. Most subscribers expense Ridgeline as professional development, training, or continuing education. The artifacts you produce — detection rules, architecture documentation, investigation playbooks — go directly into your organization's operational infrastructure.
What if I cancel?
You keep access until the end of your billing period. No penalty. Cancel from your account page at any time. The artifacts you built during your subscription are yours permanently.
Do I need a lab environment?
You build one as part of the courses, and it becomes yours permanently. The lab setup guides walk you through creating Windows VMs, Linux VMs, and M365 developer tenants using free tools. Your lab stays on your hardware — you keep using it across every course and during real incidents. All free content is fully readable without a lab.
Is this a replacement for certification training?
No. Certifications test whether you can pass an exam. Ridgeline builds whether you can do the job. Some courses align to certification objectives (SC-200, for example), but the focus is operational capability and deployable artifacts — not exam prep.
Every course starts with free modules — no account needed.Read the content, run the queries, then decide.