Security Onion Solutions
Training
Security Onion Solutions is the only official training provider of the Security Onion software.
Choose from On-Demand (Free and Premium) or Instructor-Led training.
In-person classes are multi-day comprehensive training courses which include many hands-on labs. Each course is designed with real-world examples and case studies that reinforce Security Onion work role tasks. Each instructor-led course provides in-depth content with a hands-on approach to learning. You will learn methods and techniques to sift through your data to find anomalies, malicious traffic, and then action on the results. Students receive printed course materials and a Certificate of Completion to show they are ready to make their adversaries cry!
We also offer online training via On-Demand training modules. They are a cost-effective alternative to instructor-led training, but do not include the hands-on labs that our instructor-led classes offer. The On-Demand courses demonstrate techniques that you will be able to implement immediately. The On-Demand content allows you to learn at your own pace and repeat sections as often as you would like. Students have six months access to each course to take at their own pace.
FAQs
Q: Who teaches the On-Demand and Instructor-Led courses?
A: Courses are taught by Security Onion Certified Instructors.
Q: Do I need a computer to attend training in person?
A: Security Onion Solutions provides student computers for in-person classes and a cloud lab environment for virtual classes.
Q: What materials will I need for the course?
A: All students in instructor-led courses receive official course material on the first day of class.
Q: How long do I have access to the On-Demand courses?
A: You will have full access for 6 months after purchase.
Course List
| Course Title | Course Summary | Delivery Method | Course Length | ||
|---|---|---|---|---|---|
| Beginner | Security Onion Essentials |
Get started by taking the FREE Security Onion Essentials training. This course is a prerequisite to other courses listed. |
On-Demand | 2h | |
Security Onion in Production |
This course is geared for administrators of Security Onion. Students will gain a foundational understanding of the platform - how to architect, deploy, manage and tune their Security Onion grid. |
On-Demand * † | 2h 30min | ||
Practical Analysis |
This course is geared for those interested in seeing how Security Onion is used practically to triage alerts, hunt for threats, as well as build new detections. |
On-Demand * † | 1h 45min | ||
| Intermediate | Detection Engineering |
This course is geared for those wanting to understand how to build a Detection Playbook with Security Onion. Students will gain both a theoretical and practical understanding of building detections in Security Onion, reinforced with real-life examples from network and host datasources. |
On-Demand * † | 2h 30min | |
Three-Course Bundle |
This course bundle contains everything you need to get up and running with Security Onion! |
On-Demand * † | 6h 30min | ||
Fundamentals for Analysts & Admins |
Analysts and administrators will gain fundamental knowledge of the Security Onion platform. Students will complete case studies and labs to reinforce techniques that will allow them to navigate through various data types in order to find evil. This course also prepares students to pass the Security Onion Certified Professional (SOCP) exam. |
Instructor-Led * ‡ | 32 Hours | ||
Fundamentals for Analysts & Threat Hunters |
Analysts and threat hunters will gain hands-on experience finding evil in host, network, and alert traffic. |
Instructor Led * ‡ | 32 Hours | ||
| Advanced | Detection Engineering and Analysis In-Depth |
Analysts and Security Engineers will employ detection techniques to close detection gaps in your Security Onion grids. |
Instructor-Led * ‡ | 32 Hours |
* The Security Onion Essentials course is a prerequisite for all courses.
† Course access is limited to 6 months, based on registration date.
‡ Security Onion Solutions provides one class computer for an in-person course or online lab environment for a virtual course.
Upcoming Instructor-Led Training Events
- Security Onion for Analysts and Threat Hunters Virtual - Aug 25 - 28, 2026
Learn core analyst techniques and how to apply them with Security Onion in this 4-day course, August 25-28, 2026.
Aug 25, 2026, 8:00 AM EDT - Aug 28, 2026, 5:00 PM EDT
Register - Security Onion Fundamentals for Analysts & Admins Oct 2026 @BSidesAugusta
Learn how to architect, manage, deploy, and effectively use Security Onion in this 4-day course in Augusta, GA, Oct 19 - Oct 22, 2026
Oct 19, 2026, 8:00 AM EDT - Oct 22, 2026, 5:00 PM EDT
Register
Free On-Demand
Get started by taking the free Security Onion Essentials training.
This course is a prerequisite to the premium on-demand courses.
Security Onion Essentials 2026 - Introduction
Security Onion 14.2K subscribers