Hack The Box Academy

What it is

HTB Academy is Hack The Box's course platform, separate from the open ended practice machines the main site is famous for. Content is organised into short modules, such as Linux Fundamentals, Introduction to Networking, Web Requests, and Security Monitoring and SIEM Fundamentals, grouped into general, offensive and defensive tracks. Modules are then bundled into job role paths, for example SOC Analyst and Penetration Tester. Each module comes with its own lab machines in HTB's infrastructure and an in-browser workstation (Pwnbox), so you do not need to build a home lab to start.

Free versus paid

Academy uses a currency called cubes to unlock modules. According to the official FAQ, new accounts receive cubes at sign-up, and Tier 0 (fundamentals) modules cost 10 cubes and give 10 cubes back when you finish them, which makes the fundamentals effectively free. Beyond that you buy cubes or subscribe. As of 2026-09, the HTB help centre lists monthly plans at $18 (Silver), $38 (Gold) and $68 (Platinum), annual plans at $490 (Silver Annual, all modules up to Tier II) and $1,260 (Gold Annual, up to Tier III), and a Student plan at $8 a month for students and professors at academic institutions, with access to all modules up to Tier II. HTB has changed its pricing model before, so check the current plans page before paying. Modules you unlock with cubes stay unlocked.

Time needed

A single fundamentals module usually takes a few evenings. A full job role path is a commitment of months, not weeks, and is best treated as a long, structured course rather than something to rush.

Certifications

Several job role paths end in one of HTB's own practical certifications, such as the HTB Certified Defensive Security Analyst (CDSA) for blue team work and the HTB Certified Penetration Testing Specialist (CPTS) for offensive work. Both are hands-on exams in a lab that end with a written report rather than a multiple choice test. The list of certifications and their prices changes, so read the certifications page directly.

Who it suits

People who already have some fundamentals, from TryHackMe, a networking course or their degree, and want structured depth in one direction. Students aiming at SOC or analyst work should look closely at the defensive modules, which are sometimes overlooked in favour of the better known offensive content.

Ethics and scope

Every lab runs in HTB's own isolated infrastructure, built to be tested. Only test systems you own or are explicitly authorised to test: your own lab, a CTF, or an in-scope bug bounty programme. What you learn on Academy is not permission to test anything else, and running security tools against systems without written authorisation is illegal in most countries regardless of intent.

Common questions

Is it beginner friendly? The fundamentals modules are, and they are the effectively free part, but the offensive and defensive paths assume you can already use a Linux shell comfortably. Do I need the main Hack The Box platform too? No. Academy is self contained, though many people use Academy for structured learning and the main platform for open ended practice later. Is the Student plan worth it? If you qualify, it is the cheapest route to the Tier II modules that most job role paths are built from.