Penetration Testing Fundamentals
Web app, network and infrastructure pentest workflow. Recon, exploitation, post-exploitation and reporting using industry tooling.
Request details →Practical, hands-on IT training delivered by working practitioners — not full-time trainers reading slides. Cybersecurity, Linux, networking, system hardening and corporate programs. HRDC-claimable for Malaysian employers.
Employers contributing to HRDC (under PSMB Act 2001) can claim training fees from their levy account. ZS Net Solution is a registered training provider — we help you scope the program, prepare the grant application and deliver an outcome your team can put to work.
Four things every ZS training program does differently.
At least 50% of every session is keyboard-on-keyboard. We use CTF-style labs, live environments and real tooling — not screenshots of someone else's terminal.
Our trainers run pentests, build infrastructure and ship code in the same week they teach. Your team learns from someone who is still doing the work.
We agree the outcome up-front — "your SOC analysts can triage a phishing report end-to-end", not "your team attended a course". Then we design backwards from there.
Public-schedule and in-house options. Custom corporate programs are scoped to your team's level and goals.
Web app, network and infrastructure pentest workflow. Recon, exploitation, post-exploitation and reporting using industry tooling.
Request details →Triage, investigate and respond to security alerts. SIEM workflow, log analysis, phishing investigation and incident response basics.
Request details →Phishing recognition, password hygiene, safe data handling, PDPA basics and incident reporting. Built for non-technical employees.
Request details →Filesystem, shell, package management, services, users, networking, automation with bash. Real production-style labs.
Request details →Lock down Linux and Windows servers using CIS-aligned baselines. Patching, auth, logging, SELinux/AppArmor and audit prep.
Request details →OSI/TCP-IP, IP addressing, routing, switching, VLANs, ACLs, NAT, wireless basics. Aligned to CCNA 200-301 objectives.
Request details →A live capture-the-flag built around your team's role. Great as a year-end skills audit, hiring filter or post-training validation.
Request details →Cloud architecture fundamentals plus the security controls that matter: IAM, network isolation, secrets, logging, and shared-responsibility done right.
Request details →PDPA 2010 obligations, data-handling controls, breach response, vendor risk and audit-readiness — translated into actions your team can take.
Request details →Run IT as a business function: control frameworks (COBIT, ISO 27001, NIST), risk registers, third-party risk, KPIs and reporting to executives.
Request details →A grounded primer on what these technologies actually do, where they fit, where they don't, and the security implications your organisation needs to plan for.
Request details →Outlook, Teams, SharePoint, OneDrive and Excel essentials. Workflows that save hours per week, not feature tours.
Request details →Tell us the outcome — we design the curriculum, build the labs and deliver. Cybersecurity, infrastructure, web/dev, AI/ML basics, anything in scope.
Scope a custom program →From first enquiry to certificate of completion.
Free 30-minute call. Who is being trained, what should they be able to do at the end, and how much time you have.
Written proposal with curriculum, schedule and price. We provide the HRDC documentation (TPGA, TPRA where applicable) to support your claim.
In-person at your office, our venue, or online. Every session includes hands-on labs, a workbook and a recording where suitable.
Tell us what you need them to be able to do at the end. We'll work backwards from there and tell you what's HRDC-claimable.