CYBERSECURITY
Cybersecurity in Practice
Professional tooling and the final Red Team versus Blue Team battle
2 academic years · 128 lessons · 2 times a week, 90 minutes
Open to everyone — no entrance exams, no selection
Full syllabus (in Russian)NALCHIK · NEXT INTAKE MID-JANUARY
Zero Day Academy is a cybersecurity and programming school in Nalchik. We teach students to find the weakness before anyone else does — and to close it. On site, in small groups, with hands-on practice in every single class.
This is the first cybersecurity course in the city taught entirely in English — for students from 9th grade and up and for adults. The Russian group covers exactly the same syllabus.
// The English group at a glance
0+
lessons written and ready to teach
0%
of classes are hands-on at the keyboard
0
cybersecurity careers on our map, with pay ranges for each
0
languages of instruction: Russian and English
FIRST IN NALCHIK
// Language of instruction
Security documentation, vulnerability reports, CTF tasks and research are written in English and rarely translated. A student who learns the subject in English reads the source, not somebody's retelling of it.
// How to join the English group
Before the start we talk for about fifteen minutes in English: what you do, what you have already tried, why security interests you. Nothing to prepare for that call.
The conversation is not a filter. It exists so the group moves at one pace: the material is hard enough on its own, and the language should not become a second obstacle. B1 is the comfortable level — enough to follow an explanation and to ask questions.
Below B1 is not a refusal
We will work it out on the same call. Usually the answer is simple: start in the Russian group and move to the English one later. The syllabus is the same, so nothing is lost.
// Programmes
The English group runs the cybersecurity track — the school's flagship, a full route from zero to independent work. Anyone can enrol: there are no entrance exams, and the ages next to each programme are a guide, not a requirement. Programming is taught in Russian only.
CYBERSECURITY
Professional tooling and the final Red Team versus Blue Team battle
2 academic years · 128 lessons · 2 times a week, 90 minutes
Open to everyone — no entrance exams, no selection
Full syllabus (in Russian)CYBERSECURITY
Read someone else's web application and map it out
about 3 months · 33 lessons · 3 times a week, 90 minutes
Open to everyone — no entrance exams, no selection
Full syllabus (in Russian)CYBERSECURITY
The full penetration test cycle: from reconnaissance to the report
1 academic year · 66 lessons · 2 times a week, 90 minutes
A level above: continues the senior cybersecurity track
Full syllabus (in Russian)CYBERSECURITY
Neural networks as a working tool, not a toy
about 3 months · 36 lessons · 3 times a week, 90 minutes
Open to everyone — no entrance exams, no selection
Full syllabus (in Russian)// How classes run
The rule of the school: in every class the student does something with their own hands at the keyboard. Theory comes in short blocks and is put to work immediately.
Terminal, lab environments, real tools. The student types the commands and configures the systems, instead of watching slides.
Capture the flag, the same format professionals use: cryptography, web and forensics challenges, school tournaments and public platforms.
Every student signs an ethical hacker code of conduct. Offensive techniques are practised only on our own lab environments, and only legally.
Groups of 8–12 students, so the teacher gets to everyone: to look at a mistake, to push the strong one further, to support the beginner.
// Who teaches
Not a video course and not a student reading from a manual: someone who works in the field and answers for what they teach. Groups are 8–12 students, so there is time for everyone.
$ whoami
teacher@zeroday
$ ./live-class
Penetration tester, developer and teacher
For nine years I have built web applications and internal corporate services — dashboards, admin panels, CRMs and other line-of-business systems. For more than five years I have worked in offensive security: finding and exploiting vulnerabilities, assessing the security of web applications and taking part in Bug Bounty programs.
I have taught for five years — at an Austrian school and a German university, where classes are held in English. Working across all three fields — development, security and teaching — lets me explain hard things in plain language and tie theory to real tasks rather than textbook examples.
My goal is for a student not to memorize tricks, but to understand why a vulnerability is possible in the first place and how to close it.Book a consultation
// Where this leads
“Security specialist” is not one profession but a whole tree. Some people hunt for weaknesses, some watch the monitors and catch the attack, some investigate incidents or build the defences of a cloud. Here is where a student can end up, and what those roles pay.
4.8 M
cybersecurity jobs worldwide with nobody to fill them
ISC2 Cybersecurity Workforce Study
+29 %
growth in security analyst jobs in the US between 2024 and 2034 — many times the average across the labour market
U.S. Bureau of Labor Statistics
$10,400
median monthly pay of an information security analyst in the US — $124,910 a year
U.S. Bureau of Labor Statistics, May 2024
+40 %
year-on-year growth of median security salaries offered in Russia
hh.ru
Penetration tester
Red Team operator
Bug bounty hunter
Mobile application security specialist
SOC analyst
Incident responder
Digital forensics analyst
Detection engineer
Threat intelligence analyst
OSINT analyst
Application security engineer
DevSecOps engineer
Cloud security engineer
Network security engineer
Secure software developer
Cryptography engineer
AI security specialist
Data protection analyst
Security auditor
Head of security (CISO)
Sources: ISC2 Cybersecurity Workforce Study, U.S. Bureau of Labor Statistics, hh.ru and public industry salary reviews for 2025–2026. All figures are monthly — roubles in Russia, dollars worldwide. These are market ranges rather than a promise from the school: pay depends on experience, city and employer.
// Fees and intake
Classes run all year, but a student cannot join in the middle of a course — the group would already be ahead. So intake happens in windows, and the next one opens in mid-January.
Full-stack + AI — from the basics to a finished product with AI inside
from 9 500 ₽a month
Tracks A and B, Web for Pentesters, Red Team and the AI intensive — the only courses of their kind in the city
New Year discount — 15 %1 November to 10 January
13 600 ₽a month
16 000 ₽ regular price
The same syllabus, taught entirely in English
New Year discount — 15 %1 November to 10 January
15 470 ₽a month
18 200 ₽ regular price
Every tier means 8 classes of 90 minutes a month in a group of 8–12 students.
Red Team / Blue Team — the professional course
A separate format for students and adults: 3 years, three 150-minute classes a week, in Russian only.
17 600 ₽a month
// How payment works
The consultation before you start is free
// The next intake
The places are few for a reason: past twelve students the teacher stops getting to everyone at the keyboard, and the whole school rests on exactly that. So the list opens early, and places go to those who asked first.
// Questions
If your question is not here, leave a request and we will answer it.
Yes — the English group runs entirely in English: the explanation, the materials, the exercises and the debrief. The syllabus is identical to the Russian group; only the language changes. This is the first cybersecurity course in Nalchik taught this way.
// Find your track
There are 7 programmes, and you do not have to compare them yourself. Answer three questions and we will show you where to begin.
Question 1 of 3
// Apply
Leave your contacts and a question if you have one. We will call back, work out which programme fits, go through the schedule and hold a place in the next group.