foyl learn Sign in
Cyber defense, learned by doing
foyl

Train like you're already on the SOC floor.

Hands-on labs, live analyst shifts, a 3D cyber range, and a full set of mock SOC tools - one connected platform where every alert, host, and incident actually ties together. Investigate real attack stories, not slideshows.

Free while in early access - no card, no catch

Guest mode opens the live SIEM console right now. Sign in any time to unlock everything and keep your progress - what you do as a guest comes with you.

What's inside

A whole security operations center to learn in

Every surface shares one universe of companies, users, hosts, and incidents - so the skills you build in one place carry into the next.

Hands-on labs

Guided, graded investigations you work section by section - write the query, build the detection, draw the attack chain.

Interactive drills

Fast, replayable reps that sharpen one reflex at a time - triage the queue, spot the phish, rank the tickets, score the risk.

Live analyst shifts

A timed desk where alerts arrive, contacts reply, and evidence unlocks only when you open the console. The real job, rehearsed.

3D cyber range

Replay real intrusions hop by hop across a network you can orbit - watch an attack move, then contain it.

Mock SOC tools

Production-style SIEM, EDR, identity, email, and cloud consoles wired together - pivot across them like a real analyst.

Certification prep

Practice banks across dozens of certs, plus timed, domain-scored full exams for the ones that matter most.

Start with the SIEM. No account required.

Free while in early access. Sign in with GitHub or an email link - no password.