For human rights defenders and civil society organizations, a penetration test is not merely a technical exercise—it is the ultimate stress test for the digital walls protecting sensitive data, activist identities, and field operations. While standard security tools provide a baseline, the ability to lead a comprehensive, multi-vector assessment is what ensures an organization can survive targeted surveillance and digital crackdowns. This intensive course provides the technical mastery and management expertise needed to conduct professional penetration tests that align with high-stakes humanitarian risks and real-world threats.

Key Learning Modules

• Defining the Mission Scope: Learning how to plan a penetration test and identify a scope that is ethically sound and appropriate based on the specific risks faced by activists.

• Tactical Foundation & Strategy: Mastering the core technical knowledge and principles required to organize and carry out an effective set of security tests.

• Executing Multi-Vector Assessments: Acquiring hands-on practical skills and using relevant tools to conduct tests across infrastructure, web applications, mobile technology, and social engineering.

• Vulnerability Analysis & Reporting: Learning how to analyze results, document test quality, and create actionable follow-up plans to remediate discovered weaknesses.

• The Final Defense Test: Applying your skills in a high-intensity "Capture the Flag" exercise to prove your ability to navigate and secure complex digital landscapes under pressure.

Target Audience: Human rights advocates, digital security trainers, and technical leads responsible for the protection of civil society organizations, as well as incident handlers looking to use testing as a core part of their protective regime.