HisnLabsFireAI University
Learn to protect yourself online
Free courses that explain how the internet really works, who can see what, and how to make your computer safe, step by step.
- NGOs and activists
- Lawyers and their clients
- Journalists and whistleblowers
- Anyone who needs a safer computer
Free, no account, nothing tracked. Your progress stays in this browser.
Foundations
- 01 · Beginner
How the internet works
What really happens between your computer and a website, who takes part, and what each of them can see.
Lessons: 4 · 30 min - 02 · Beginner
TCP/IP: addresses, ports and connections
The rules every device on the internet follows: IP addresses, ports, TCP and UDP, and what your router does.
Lessons: 4 · 26 min - 03 · Beginner
DNS: the internet’s address book
How names become addresses, who sees your lookups, and how encrypted DNS changes that.
Lessons: 4 · 26 min - 04 · Beginner
Data brokers: who sells your life
How personal data is collected, combined and sold, and the practical steps that reduce what they get.
Lessons: 4 · 34 min - 05 · Beginner
Your operating system, your first line of defence
What an operating system does, how permissions and sandboxing protect you, and why updates matter.
Lessons: 4 · 29 min - 06 · Intermediate
Layers of security: native hygiene for a safer Mac
A step-by-step plan, from threat modelling to encryption, backups and a firewall, for people who can’t afford a breach.
Lessons: 5 · 39 min - 07 · Beginner
Malware and the hidden internet
Trojans, ransomware and rootkits, the people behind them, and the parts of the internet where stolen data ends up: the dark web and Tor, explained without the myths.
Lessons: 7 · 54 min - 13 · Beginner
Foundations of cybersecurity
The CIA triad, who attacks and why, the words that matter (threat, vulnerability, risk, exploit) and how social engineering targets people rather than software.
Lessons: 4 · 30 min - 14 · Beginner
Networking and security architecture
How networks carry data, and the layers that defend them: firewalls, VPNs and proxies, intrusion detection and segmentation, and Wi-Fi security from WPA3 to evil-twin hotspots.
Lessons: 4 · 35 min - 15 · Beginner
Identity and access management
Who are you, and what may you do? Authentication and authorization, the access control models behind them, MFA and passkeys, and the zero trust approach that checks every request.
Lessons: 4 · 34 min - 16 · Beginner
Vulnerability and risk management
Rank what matters with SLE, ARO and ALE, find known weaknesses with scanners, CVE and CVSS, close them with a real patch process, and know the main families of malicious software they invite.
Lessons: 4 · 32 min - 17 · Intermediate
Defensive operations: how the blue team works
What a Security Operations Center does, how logs and a SIEM turn events into alerts, the six phases of incident response, and how to preserve digital evidence.
Lessons: 4 · 33 min - 18 · Intermediate
Offensive security: how the red team thinks
How authorised attackers work: the penetration-testing lifecycle, open-source intelligence, the classic software flaws and how to prevent them, and what happens after a break-in.
Lessons: 4 · 34 min - 19 · Intermediate
Cryptography and data protection
AES, RSA and elliptic curves, hashing and password storage, certificates and TLS, and how to protect data at rest, in transit and in use.
Lessons: 4 · 32 min - 20 · Intermediate
Compliance, ethics and future trends
The frameworks and rules that shape security programs (NIST CSF, ISO/IEC 27001, MITRE ATT&CK, GDPR, HIPAA, PCI DSS), cloud shared responsibility, and the threats ahead: AI, IoT and quantum.
Lessons: 4 · 33 min - 21 · Intermediate
AI-driven desktop defense: host-based firewalls on macOS
Why the laptop is the new perimeter, how a modern Mac firewall hooks into the system without a kernel extension, and how behavioural signals, a learned baseline, context and plain-language rules work together, with FireAI as the worked example.
Lessons: 9 · 70 min - 24 · Intermediate
Case studies 2026: AI agents, schools and governments
The incidents that defined 2026, told from the public record: AI agents escaping a test lab and breaching Hugging Face, the Canvas breach that hit schools worldwide, a government health portal and the FBI, and the extortion economy behind them. What happened, what was only claimed, and what defenders should change.
Lessons: 6 · 49 min - 27 · Intermediate
AI guardrails, explained, and how Guardrino is designed
What an AI guardrail checks and why, how prompt injection, jailbreaks and harmful content differ, how to test any guardrail before you trust it, and the planned design of Guardrino, HisnLabs’ AI firewall for Arabic and English (in development), with a glossary in English, Arabic and French.
Lessons: 5 · 43 min
Expert track
The expert courses are organised around the Knowledge Units that the NCAE-C program publishes for cyber defense degrees (CAE-CD, 2024). Read the Knowledge Units
- 08 · Expert
Threat modelling and risk for people at risk
Who might target you, how attacks unfold, and how to choose protections in proportion to the real risk.
Lessons: 4 · 35 min - 09 · Expert
Cryptography you can rely on
What encryption, hashing and signatures really guarantee, how TLS and end-to-end encryption work, and where keys make or break them.
Lessons: 4 · 34 min - 10 · Expert
Network defense for a single computer
Firewalls, egress filtering, logging and detection applied to the one machine you must protect, and how to read what it tells you.
Lessons: 4 · 35 min - 11 · Expert
macOS hardening, setting by setting
Reduce the attack surface of a Mac: secure installation, encryption, services, ports, accounts, updates and built-in defences, with the commands to check each one.
Lessons: 5 · 43 min - 12 · Expert
Understanding cloud security
Who is responsible for what in the cloud, how accounts and keys get compromised, and how to keep your files and services under your control.
Lessons: 4 · 34 min - 22 · Expert
Adversarial AI and threat hunting
Why machine learning detectors can be fooled, how defenders harden them and layer around them, and how to hunt for the attacks that slip through, ending with a tabletop exercise.
Lessons: 7 · 60 min - 23 · Expert
DevSecOps and software supply chain security
How security fits into every stage of building and shipping software: pipeline checks, supply chain lessons from SolarWinds and Log4Shell, SBOMs and signing, containers, infrastructure as code and cloud posture.
Lessons: 7 · 60 min - 25 · Expert
AI security frameworks and red teaming
How NIST AI RMF, MITRE ATLAS, the OWASP LLM Top 10 and CIS Controls fit together, who is responsible for what when you deploy an LLM, and how to plan, run and report an AI red-team engagement.
Lessons: 9 · 77 min - 26 · Expert
AI red teaming: techniques, open-source tools and automated pipelines
Follow the arc of Microsoft’s AI Red Teaming 101 series and go further: how prompt injection, jailbreaks and multi-turn attacks work and why, the probes, buffs and detectors inside open-source scanners such as garak, PyRIT, promptfoo and Augustus, how to automate and gate them in CI, and how to read the results with proper statistics.
Lessons: 22 · 232 min
FireAI University is independent: it is not affiliated with, endorsed by or designated by the NSA or the NCAE-C program. We use their published Knowledge Units as a curriculum guide.