Skip to main content

CLEARSECLABS Training

ClearSecLabs teaches reverse engineering and vulnerability research: hands-on courses where you analyze real binaries, find real bugs, and build tooling you keep using after the course ends. Every course is taught live by the researcher who builds the open-source tools behind it, and each one fits a deliberate path: master the craft by hand first, or lead with AI orchestration from day one.

A packed room of students during the ClearSecLabs Agentic RE training at Black Hat USA 2026 in Las Vegas
A full room for Agentic RE at Black Hat USA 2026, Las Vegas.

Our Courses

CourseLevelTrack
Everyday Ghidra: Practical Windows Reverse EngineeringBeginner–IntermediateManual-First
Patch Diffing In The Dark: Windows Vulnerability ResearchIntermediate–AdvancedManual-First
Agentic RE: Automating RE & VR with AIIntermediate+ (RE comfort assumed)AI-Native
  • Manual-First Track — Build the craft by hand, then accelerate each step with AI. AI shows up after fundamentals are solid.
  • AI-Native Track — Lead with AI orchestration from day one: private AI stacks, custom MCP servers, and agents that reason through binaries.

Not sure where to start? Training Pathways maps each course to your background and goals.


Training Formats

We offer two flexible delivery options:

  • In‑Person — Hosted on-site for company teams and cohorts, fostering collaboration and shared learning.
  • Virtual — Live, interactive sessions you can join from anywhere, with the same expert instruction and practical exercises.

All courses are hosted by ClearSecLabs, often in collaboration with our training partners to bring you specialized expertise and diverse perspectives.

📌 In-person logistics (location, timing, registration) are provided by either the partner registration page or the ClearSecLabs registration page, depending on the host.


Training Partners

We collaborate with a network of trusted training partners who share our commitment to high-quality, practical security education. These partnerships allow us to expand our course offerings and deliver niche expertise directly to your team.


Events

For the latest public courses, workshops, and conference sessions, check out our upcoming events. Here you'll find dates, locations, and registration details for both in-person and virtual opportunities.


Why Train with ClearSecLabs?

  • You Write Real Code — Labs run against real binaries and real CVEs, not slideware. You leave with working tools, not just notes.
  • A CTF Runs Alongside the Course — A live Capture The Flag server reinforces each day's material with gamified, adaptive feedback.
  • Support Outlasts the Cohort — Instructor support via Discord continues during and after the course.
  • Labs Ready on Day One — Preconfigured lab environments (VMs or devcontainers) mean zero setup friction.

"This is the first course I've taken where it feels like I can go home and start employing the methods I've learned immediately, instead of having to spend the next month sorting through my own thoughts." — REcon student, Patch Diffing In The Dark

Students working through hands-on labs during a ClearSecLabs workshop session at DEF CON 34
Hands-on lab time during the Agentic RE Skills workshop at DEF CON 34.

What Students Receive

All courses include slides, training materials, preconfigured lab environments (VMs or devcontainers depending on the course), access to a course CTF server, and instructor support via Discord during and after the course. See individual course pages for details.


Frequently Asked Questions

How do virtual courses work?

Courses are delivered live via Zoom, combining structured lectures, self-paced labs, and real-time feedback, with instructor support via Discord throughout.

What is the daily format?

In-person: Full-day sessions combining lectures, guided labs, and CTF exercises. Virtual: A 4-hour interactive lecture each day, followed by self-paced exercises. Office hours and Discord support are available throughout.

Do I get CPE credits?

Yes. CPE hours combine lecture time with structured hands-on labs and self-directed study.

FormatDurationCPE Hours
In-Person (full)4 days32
Virtual5 days, 4 hrs/day32
In-Person (conference)2 days16

The format depends on the course and event — check the course page for details.

Where do I find logistics for in-person courses?

In-person logistics are handled by the partner registration page or the ClearSecLabs registration page, depending on the host organization.


Sample Virtual Course Schedule

DayTime (US Eastern)Format
Day 109:00–13:00Lecture + Labs
Day 209:00–13:00Lecture + Labs
Day 309:00–13:00Lecture + Labs
Day 409:00–13:00Lecture + Labs
Day 509:00–13:00Lecture + Labs

Time Zone Conversion

RegionLocal Time
US Eastern09:00–13:00
US Mountain07:00–11:00
US Pacific06:00–10:00
UK GMT14:00–18:00
Europe CET15:00–19:00
Australia AEST23:00–03:00 (next day)

Course Design Philosophy

ClearSecLabs courses combine immersive, instructor-led lectures with self-directed practice and adaptive feedback mechanisms:

  • Interactive Lectures — 4 hours daily of live instruction focused on core concepts and practical applications.
  • Self-Paced Labs — Reinforce learning with exercises and challenges you complete on your own schedule.
  • CTF Integration — A live Capture The Flag event runs alongside the course, offering gamified feedback and adaptive instruction.
  • Personalized Support — Office hours and Discord access ensure you get help when you need it.

Instructor Spotlight

John McIntosh

John McIntosh (@clearbluejar) is a security researcher at ClearSecLabs specializing in reverse engineering and offensive security. He's known for his expertise in binary analysis, patch diffing, and vulnerability discovery, and has developed multiple open-source tools for vulnerability research.

John McIntosh presenting Reverse Engineering Apple Security Updates on stage at RE//verse Orlando 2026
John on stage at RE//verse Orlando 2026, presenting agentic diffing of Apple security updates.

With over a decade of experience and a strong presence at international security conferences, John brings deep technical insight and a passion for collaborative learning to every course.


Ready to Train with ClearSecLabs?

Whether you're looking to upskill your team or advance your own expertise, we're here to help you take the next step.

  • 📅 Browse Upcoming Events — Find the next in-person or virtual session that fits your schedule.
  • 📩 Contact Us — Have questions or need a custom cohort? Contact us
  • 🤝 Partner With Us — Interested in becoming a training partner? Let's collaborate.

ClearSecLabs — Learn the craft. Keep the tools.