What cloudbreach does

CloudBreach Ltd is a Cyprus-incorporated private company (registered entity HE 445220) that provides hands-on offensive cloud security training for Azure and AWS environments, targeting individual practitioners, security teams, and academic users globally. The platform delivers browser-based labs running on Azure and AWS infrastructure where students execute complete attack chains — enumerate, exploit, pivot, persist — against realistic cloud environments, with no local software installation required. Core courses (Breaching Azure, Breaching AWS, Breaching Azure Advanced) carry 16-18 labs each and culminate in report-based certifications (OASP, OAWSP, OASE) that require candidates to compromise a live cloud environment and submit a professional attack-path report.

The company's products and certifications are priced as one-time perpetual licenses between $499 and $1,099, with tiered lab access windows of 30, 60, or 90 days and lifetime access to course material. Optional Add-ons through the customer portal allow lab access extensions. A separate AI-reviewed technical assessment platform, ProofRange, extends the underlying lab infrastructure into enterprise candidate screening and upskilling use cases. Distribution is predominantly self-serve via cloudbreach.io and portal.cloudbreach.io with Stripe-based checkout, supplemented by a Teams/Enterprise sales motion for group purchases and a 15% student/academic discount.

CloudBreach operates without disclosed external funding and is led by practitioners who conduct real red team engagements; the curriculum is sourced from those engagements rather than from academic material. The company maintains an active community footprint across Discord, Reddit, YouTube, LinkedIn, X/Twitter, Instagram, and Facebook, and reports a Trustpilot score of 4.3 across 7 reviews. Marketing messaging indicates 1,000+ practitioners have been trained since the company's founding, though revenue, headcount, and ownership structure are not publicly disclosed.

Name

cloudbreach

Legal name

CloudBreach Ltd

Website

https://cloudbreach.io

Company type

Private

Founded year

2022

Operating status

Operating

Short description

CloudBreach is a Cyprus-based training company that provides hands-on offensive cloud security courses and report-based certifications for Azure and AWS, serving individual penetration testers, red teamers, cloud security engineers, and enterprise teams through browser-based labs.

Ownership category

akta.pro rank

Product category

Cybersecurity Training

NAICS

Computer Training (61142), Business Schools and Computer and Management Training (6114), Professional and Management Development Training (61143)

SIC

Services-Educational Services (8200)

akta.pro primary industry

Cloud Computing & Cloud Security (EDAOAIAC)

akta.pro secondary industries

Cloud & SaaS Security Awareness (e.g., M365/Google Workspace) (EDABAGAG), Cloud Computing & Infrastructure (AWS/Azure/GCP, Virtualization) (EDABAFAB)

Keywords

• Cloud security training
• Offensive security labs
• AWS penetration testing
• Azure security courses
• Cybersecurity certifications

Headquarters

HQ city

Larnaca

HQ country

Cyprus

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Operations, Marketing or Sales

Revenue model

1. Course Sales: Self-paced online courses with tiered pricing (Essential, Extended/Plus, Teams). Includes lifetime access to course materials and bundled certification exam attempts.
2. Certification Exams: Report-based certification exams requiring compromise of live cloud environment followed by professional attack path report submission. Additional exam attempts available for purchase.
3. Lab Access Extensions: Lab access can be extended through portal Add-ons section. Labs deployed on scheduled start date and run continuously for 30, 60, or 90 days depending on plan.
4. Student/Academic Discounts: 15% discount for students, researchers, and academics with verified institutional email addresses.

Pricing tiers

Go-to-market motion1 record

Distribution channels5 records

Marketing channels9 records

Core offering

CloudBreach provides hands-on offensive cloud security training through three core courses (Breaching Azure, Breaching AWS, and Breaching Azure Advanced) delivered via browser-based cloud labs hosted on Azure and AWS infrastructure. Each course is paired with a report-based certification requiring students to compromise a live environment and submit a professional attack path report. The company also operates ProofRange, an AI-powered technical assessment platform for evaluating cybersecurity candidates through live isolated environments.

Product overview

CloudBreach is an offensive cloud security training platform offering hands-on courses focused on Azure and AWS attack techniques. The core portfolio consists of three main training courses (Breaching Azure, Breaching AWS, and Breaching Azure Advanced) each with corresponding report-based certifications (OASP, OAWSP, OASE). Extended '+' versions of each course provide additional challenges and lab time. A companion technical assessment platform called ProofRange enables organizations to evaluate cybersecurity candidates through AI-reviewed live environment assessments. All training is delivered entirely through browser-based cloud labs with lifetime course material access.

Differentiator

Problem solved

Functional benefit

Brands

• ProofRange: A technical assessment platform where candidates work in live, isolated environments with AI-reviewed results. Used for hiring and upskilling in cybersecurity roles.

Products and services

• Breaching Azure Hands-on offensive Azure security training course teaching enumeration, exploitation, and persistence techniques across Entra ID, Managed Identities, OAuth flows, and Azure services. Includes 16 labs covering real-world attack paths and pairs with the OASP certification.
• Breaching AWS Lab-first training on offensive AWS security covering IAM enumeration, SSRF exploitation, S3 bucket abuse, AssumeRole pivoting, Lambda exploitation, and persistence across AWS accounts. Includes 18 labs and pairs with the OAWSP certification.
• Breaching AWS v2.0 Updated version 2.0 of the Breaching AWS course with refreshed content, enhanced lab structure, and expanded coverage of AWS offensive security techniques.
• Breaching Azure Advanced Advanced Azure attack techniques course covering multi-tenant attacks, PIM abuse, Conditional Access bypass, Azure DevOps pipeline compromise, and advanced persistence techniques for senior red teamers. Includes 17 labs and pairs with the OASE certification.
• Breaching Azure+ Extended version of Breaching Azure with additional standalone challenges, threat hunting module using Microsoft Sentinel, and extended lab time for advanced practice.
• Breaching AWS+ Enhanced AWS security training with additional challenges and an AWS Defense module covering defensive techniques and countermeasures.
• Breaching Azure+ Advanced Elite hands-on course for experienced cloud security professionals covering realistic attack paths, multi-tenant misconfigurations, and post-exploitation scenarios across enterprise Azure infrastructures.
• ProofRange AI-powered technical assessment platform enabling organizations to evaluate candidates' hands-on cybersecurity skills through live isolated environments with automated verdicts and evidence-grounded reviews.

Quantifiable outcome

• Practical certification exam based on real attack chain execution and professional report writing, matching red team engagement standards
• +2 more outcomes

Named customers6 records

Segments5 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability2 records

Feature3 records

Scale indicators1 record

Recent moves5 records

Expansion highlights5 records

Direct peers

• TCM Security: TCM Security offers practitioner-led cybersecurity training (Practical Ethical Hacking, Practical Bug Bounty, Practical API Hacking) and certifications via a similar self-paced, video-plus-labs model to CloudBreach, directly competing for the offensive security practitioner persona.
• HackTheBox: HackTheBox is a hands-on cybersecurity platform with lab environments, CTF challenges, and structured cloud/AD focused paths (CPTS, CBBH, CDSA) that target the same penetration testing and red team learner persona as CloudBreach.
• OffSec (Offensive Security): OffSec produces OSCP/OSEP/OSWE and offers PEN-200 and cloud-focused learning paths with hands-on labs; it is the gold-standard legacy player in offensive security training that CloudBreach differentiates against via cloud-native, attack-path-focused labs.
• INE Security (eLearnSecurity): INE Security (formerly eLearnSecurity) delivers technical cybersecurity training including cloud and pentesting tracks (eJPT, eCPPT) via an online learning platform with labs, directly comparable to CloudBreach's practitioner-focused, online-delivered cloud security training.
• Altered Security: Altered Security specializes in Azure AD / Microsoft cloud offensive security training (CRTP, PACES, CARTP) and is one of the closest direct niche competitors to CloudBreach's Azure-focused attack courses, sharing the same persona and report-based certification approach.
• PentesterLab: PentesterLab is a subscription-based platform for hands-on web and application security training with badge-based learning paths, similar self-paced practitioner model to CloudBreach but historically more focused on web app exploitation than cloud-specific attack paths.

Broad incumbents

• SANS Institute: SANS Institute is a large, established cybersecurity training and certification provider (GIAC certs, SEC/Azure/AWS courses) with deep enterprise penetration and instructor-led and on-demand formats, competing for the same enterprise cloud security training budget as CloudBreach's Teams plans.
• Cybrary: Cybrary is a broad cybersecurity and IT training platform offering hands-on labs and certification prep across a wide range of topics, overlapping with CloudBreach at the cloud security and offensive security practitioner segments but at a portfolio rather than niche level.
• Pluralsight: Pluralsight is a large enterprise technology skills platform with cloud (AWS/Azure) and security content, serving enterprise teams similarly to CloudBreach's Teams plan but at a much broader skill-development category rather than deep offensive cloud specialization.

Others

• Wiz: Wiz is a leading cloud security platform (CNAPP) producing much of the cloud attack surface research and threat content that CloudBreach learners defend against; Wiz Labs and Wiz research content represents adjacent ecosystem rather than direct training competition, though Wiz increasingly publishes educational cloud security material.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xtwitter.com/Cloud_Breach
• YouTubeyoutube.com/channel/UC1ixS-72H9JGCuWE7hyjbSA
• Facebookfacebook.com/CloudBreach
• LinkedInlinkedin.com/company/cloudbreach
• Instagraminstagram.com/cloudbreach

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about cloudbreach