Courses
Every course we run. Two ways to learn.
Our own blue team programmes teach you the job, live, over a few months. Our Microsoft courses prepare you for one exam at a time. Find the one that fits you – or use both.
- Three blue team programmes, from £1,160
- Nine Microsoft exams, from £500
- Live and tutor-led, in UK hours
Two ways to learn
Learn the job, or pass the exam.
Different goals, different formats. Plenty of people do both – the programme first, then the exam that matches it.


Our own programmes
Blue team programmes
From £1,160the full programme fee
Three rungs of one ladder. Live classes, your own lab tenants, marked assignments and a MyCyberWay badge – with a CV rewrite, LinkedIn optimisation and mock interviews included.
Blue Team Analyst
Investigate · 26 live classes · no experience needed
Blue Team Specialist
Respond · 30 live classes · own the investigation
Blue Team Engineer
Build · 28 live classes · design and build the defences
Exam preparation
Microsoft certification training
From £500per course · the exam fee is paid to Microsoft
Tutor-led preparation for one Microsoft exam at a time, taught by Microsoft Certified Trainers to Microsoft’s current skills outline, with practice in your own trial tenant.
- From fundamentals to expert level
- Security, identity, endpoint and Azure
- Book the exam with Microsoft when you’re ready
| At a glance | Blue team programmes | Microsoft certification training |
|---|---|---|
| What it’s for | Getting job-ready for a security role | Preparing for one Microsoft exam |
| How it runs | Live two-hour classes, 2–3 a week in UK hours, every session recorded | Live, tutor-led online classes in UK hours |
| Labs | Your own Azure and Defender tenants, open for six months after you finish | Practice in your own Microsoft 365 or Azure trial tenant |
| How you’re assessed | Tutor-marked assignments, then a MyCyberWay badge | Microsoft’s exam, booked when you’re ready |
| Career support | CV, LinkedIn, mock interviews and a job feed included | Available separately |
| Price | From £1,160 | From £500, plus Microsoft’s exam fee |
Find a course
Three questions. The right shortlist.
Filter by what you want, the area you’re heading for and where you are now. Every course here is taught live today.
How they fit together
Programmes and exams, side by side.
Point at any course to see what it pairs with. The programmes teach the work; the exams prove it on paper.
Blue team programmesLearn the job
Microsoft exam trainingPass the exam
Point at a course to see what it pairs with.Blue Team Analyst covers the SOC work behind SC-200. Many people take SC-900 alongside it.Blue Team Specialist goes past SC-200: investigations, threat hunting, breach analysis and root cause.Blue Team Engineer overlaps with SC-200, SC-300 and SC-500.SC-900 is the usual first exam, and a good companion to Blue Team Analyst.AZ-900 starts the Azure route: AZ-104 next, then SC-500.SC-200 is the SOC exam. All three programmes overlap with it, and it is one route to SC-100.SC-300 is the identity exam. It overlaps with Blue Team Engineer and is one route to SC-100.SC-401 stands on its own: information protection, DLP and retention in Microsoft Purview.SC-500 follows AZ-104, overlaps with Blue Team Engineer and leads towards SC-100.MD-102 stands on its own: Windows devices, Intune and endpoint protection.AZ-104 sits between AZ-900 and SC-500 on the Azure route.SC-100 is the expert exam. It needs an associate certification behind it; SC-200 and SC-300 are among the routes.
How it works
From enrolling to your first class.
The same four steps for every course, whichever you choose.
- 1
You enrol
Your order confirmation arrives straight away.
- 2
We agree your start date
Classes run in UK hours, arranged around your job.
- 3
We set up your learning account
We email you how to sign in before your first class. Our new learning portal opens soon.
- 4
You learn live, in your own lab
Then a MyCyberWay badge, or your Microsoft exam when you are ready.
Not sure yet?
Three ways to decide, before you spend anything.
Two of them are free and take a few minutes. The third is twenty minutes on a call.
Career guidance
Pick the line that sounds like you and see the route we’d put you on.
Find my routeCertification guidance
Choose a job role and see which certifications come first, next and later.
Map my roleA free fit call
Twenty minutes on which of our courses suits you – or whether none does.
Book a fit callIn the works
Coming, but not yet.
Listed so you can plan around them. Neither is open, and neither is on sale.
Coming soon
Red team
Offensive security: attacking the environment, with permission, to show where it breaks.
Coming soon
Purple team
Attack and defence together: run the technique, then build the detection for it.
Questions
Before you choose.
Programme or Microsoft course – which should I start with?
If you want a security job and haven’t done one, start with a programme: it teaches the work, and the matching Microsoft exam is easier afterwards. If you already do the work and need the certification on paper, a Microsoft course is the quicker route. Career guidance shows which applies to you.
Do I need experience?
Not for Blue Team Analyst, SC-900 or AZ-900. Blue Team Specialist works at depth, and Blue Team Engineer assumes technical experience. The associate and expert Microsoft exams expect you to have used the products.
Are Microsoft exam fees included?
No. You pay Microsoft directly when you book the exam. Our course fee covers the training only.
Can I spread the cost of a programme?
Yes. You can pay half up front and the rest by an agreed class, or use an instalment plan – book a call and we’ll send the enrolment agreement with those options. The total never changes whichever way you pay.
What if I need to stop?
On a programme you can withdraw at any time and pay only for the classes delivered. For Microsoft courses and other services, you get a full refund if you cancel within 24 hours of paying; after that it’s non-refundable, apart from your legal 14-day right to cancel. See the refund policy.
Do you teach CompTIA, ISC2 or EC-Council courses?
No. We teach our own blue team programmes and Microsoft certifications. Certification guidance shows where the other certifications fit, and we’ll tell you if one of them is your right next step.
How do I get into my course after I enrol?
We set up your learning account and email you how to sign in before your first class. Our new learning portal opens soon. What happens after you enrol.
Still deciding?
Twenty minutes, free, and a straight answer.
Tell us where you are. We’ll tell you which course fits, or that none does yet.
Microsoft, Azure, Microsoft 365, Entra, Defender, Sentinel, Purview, Intune and GitHub are trademarks of the Microsoft group of companies. Certification badges are shown only to identify the certification a course prepares you for. MyCyberWay is an independent training provider and is not affiliated with or endorsed by Microsoft.
