Modul 01
SSH hardening
Disable PermitRootLogin, force key auth, set banners, configure AllowUsers. 7 tasks, ~40 minutes.
Learning platform
Learn server hardening — free, in your browser, with a real Linux VM
No installation. No VM-setup hours. No expensive online courses. You click, get your own Ubuntu VM, harden it task by task — and the validator checks every step.
- GDPR-compliant
- Made in Germany
- Servers in Germany (Hetzner)
- TLS-encrypted
- No tracking without consent
How it looks
A real Linux terminal in your browser
No simulation, no fake. You SSH into a Hetzner Cloud VM and the validator checks every step.
student@lab-vm — ssh — 80×24
student@lab-vm:~$
Live-Vorschau einer SSH-Hardening-Session — so läuft das in echt
What you'll learn
Seven modules, practiced hundreds of times by real sysadmins
Each module ships with a broken default configuration. You fix it, learn why the default was unsafe — and the validator gives instant feedback.
Modul 02
UFW + fail2ban
Firewall rules, brute-force protection, port whitelisting, rate limits. You build active defense against script kiddies.
Modul 03
nginx + TLS
Strict-Transport-Security, cipher suites, OCSP, HTTP/2. Understand modern vs intermediate profiles.
+ More modules coming — Postfix, Docker hardening, intrusion detection
How it works
Three clicks to your own VM
- 01
Sign up
Email + password + year of birth. Learners under 16 need parental consent (GDPR Art. 8).
- 02
Start a module
Click a module → a Hetzner Cloud VM is provisioned in 60–90s. You land directly in the browser terminal.
- 03
Solve tasks
Each task has a “Check” button. The validator inspects your config state and returns instant feedback — passed, failed, or hint.
Safety & parents
Built safely — for young learners too
We take child safety seriously. Lab runs GDPR-compliant with parental consent, hard sandbox boundaries and 24/7 monitoring.
Fully isolated VMs
Each learner gets their own Hetzner Cloud VM with an external firewall. No contact between sessions, no access to the techlogia network.
Parental consent under 16
GDPR Art. 8 / BDSG: Learners under 16 require parental consent. We email parents a separate confirmation link.
Mining + DDoS detection
CPU and bandwidth watchers run every 5 minutes — crypto mining or reflection-DDoS kills the VM automatically.
GDPR-wipe with one click
Delete your account from the profile — all sessions, logs and learning progress are removed instantly (GDPR Art. 17).
Pricing
Free. Period.
No credit card. No trial trick. No newsletter requirement. The free tier is enough for serious learning.
- 3 sessions per day (UTC reset)
- 60 minutes per session
- All modules (currently 3, more coming)
- No credit card
- No tracking, no advertising pixel
- Task engine is open-source
Ready?
One VM, three modules, no setup. All you need is a browser.