Peachycloud Security: hands-on AI, AppSec and cloud security training

Built by the Shukla Duo (Anjali & Divyanshu), leads of the OWASP EKS Goat and OWASP GKE Goat projects. We teach cloud security by attacking and defending real infrastructure — not slides.

Anjali founded Kubernetes Village, leads OWASP EKS Goat, and is a recognised AWS Community Builder. We presented OWASP EKS Goat: Hands-On AWS EKS Security at Black Hat USA 2026 Arsenal, and have run Arsenal sessions at Black Hat Europe. We volunteer at Cloud Village at DEF CON.

We also host Container Security Village at the Seasides conference in Goa — a dedicated track where Kubernetes and containers meet security, now in its second edition — and deliver the EKS Goat: AWS EKS Security Masterclass there as a full-day training.

Training

All trainings: the current catalogue, including live instructor-led batches and free workshops.
Practical Security Engineering for Tech Teams: 2 days, OWASP Top 10, containers, DevSecOps, AWS security and AI security, with security reviews. Labs run in the browser.
Corporate training: the same material delivered privately for a team.
1:1 training: individual sessions and career mentoring.
Free hands-on labs: browser-based, no signup.

Start here

Video tutorials — a chapter-by-chapter AWS EKS Security Masterclass built on OWASP EKS Goat, plus standalone walkthroughs on IAM exploitation, WAF bypass, container scanning and SBOM tooling.
Browse by topic — AWS, GCP, Kubernetes, containers, supply chain, DevSecOps, AI security.
Cloud security engineer roadmap — what to learn, in what order.

Free tools, no signup

IaC Security Scanner — checks Terraform, Kubernetes manifests, Dockerfiles and CloudFormation against 200+ rules. Runs entirely in your browser; your files are never uploaded anywhere.

Open source

OWASP EKS Goat and OWASP GKE Goat are deliberately vulnerable Kubernetes environments for practising attack and defence. Alongside them: EKSi-lite, Very Vulnerable Lambda Application, and Awesome Cloud Security Interview.

All projects · GitHub

Where we have spoken

Black Hat USA Arsenal 2026, Black Hat Europe Arsenal (2023, 2025), Nullcon (2021–2024), BRUCON 2024, OWASP AppSec Days Singapore 2025, CSA Summit 2024, Kubernetes Security Bangalore 2025, Seasides Goa 2025, c0c0n, and BSides Bangalore, Ahmedabad and Singapore. Full list of talks

Interview preparation

Cloud security interview questions and scenarios covering AWS and GCP concepts, Kubernetes RBAC, threat modelling and incident response. Interview guide

Training for teams

Corporate training for security and platform teams, and instructor-led training covering AWS, GCP, Kubernetes, containers and DevSecOps. Corporate training · Instructor-led training · Talk to us

Writing

Write-ups on cloud attack paths, WAF bypasses, CTF walkthroughs and threat modelling. Read the blog

YouTube · GitHub · All links · hello@peachycloudsecurity.com

PeachycloudsecurityPCS

YouTube Channel

AI Sec, AppSec & Cloud Security Engineering

AWS Security | GCP Security | Cloud Native Security | AppSec | DevSecOps | AI Security

Hands-on Labs for Security Engineering by The Shukla Duo

5+

Trainings

40+

YouTube Videos

Free

Labs

Career

Guide & Mentorship

17-18 OCT'26 · 35 seats

17-18 October 2026 · 35 seats · OnlinePractical Security Engineering for Tech Teams · OWASP Top 10, Containers, DevSecOps, AWS Security & AI with Security ReviewsHands-on Labs, Not Slides

Upcoming Trainings

01

17-18 OCT'2609:00-18:00 IST

placeholder

Practical Security Engineering for Tech Teams

OWASP Top 10, Containers, DevSecOps, AWS Security & AI with Security Reviews

Anjali Shukla

Divyanshu Shukla

2Days

35Seats

20%Early bird off

Reserve your spot →

02

Coming soon

Hands-on

Practical Kubernetes Attack Defense Training

Escape containers, enumerate a cluster and steal secrets, then harden it with RBAC, network policy, admission control, service mesh and runtime detection.

Anjali Shukla

Divyanshu Shukla

Not scheduled yet

03

Coming soon

Hands-on

AWS Attack & Defend Security for Startups

The AWS mistakes small teams actually ship: over-permissive IAM, public S3, exposed metadata and long-lived keys. Attack each one, then fix it without a platform team.

Anjali Shukla

Divyanshu Shukla

Not scheduled yet

04Free

Coming soon

Hands-on

Offensive Container Security

Break out of a container, then close every door you just walked through - namespaces, capabilities, and the image layers attackers dig through.

Anjali Shukla

Divyanshu Shukla

Not scheduled yet

05Free

Coming soon

Hands-on

AWS EKS Security Masterclass with OWASP EKS Goat

Attack a deliberately vulnerable EKS cluster with OWASP EKS Goat, then apply the RBAC and network policy fixes that would have stopped you.

Anjali Shukla

Divyanshu Shukla

Not scheduled yet

06

Coming soon

Hands-on

Hands-On AI, LLM & MCP Red Teaming

Red team the AI surface: prompt injection, RAG poisoning, and the tool-use and MCP paths that turn a model into a foothold. Then put the guardrails back.

Anjali Shukla

Divyanshu Shukla

Not scheduled yet

Level Up Your Team's Cloud Security Skills

Professional training programs for teams and individuals

Corporate Training

Customized cloud native security training for your team

Instructor-Led Training

2-day live batch, 17-18 October 2026 - browser labs, no setup

1:1 Training

Personalized, one-on-one sessions on your topic and schedule

Recent Conference

Live Hack

AI Security

Red Team

LLM

We Are Breaking This AI System Right Now

CyBe AI Summit'26

Live on-stage red team attack against a running AI system, with no script and no guaranteed outcome. The audience locks in a prediction before the attack begins. Track 02, Cybersecurity for AI. Presented with Riyaz Walikar and Gaurav Gulati.

Sep 4, 2026NIMHANS Convention Centre, Bengaluru, India

Anjali & Divyanshu

Workshop

Container Security

Workshop

Free

Offensive Container Security: From Ideas to Impact, Turning Knowledge into Action

Pre-BSides Jaipur Workshop

Free, four-hour workshop ahead of BSides Jaipur 2026 on offensive container security, from the ideas to the practical steps that turn them into action. 10:00 AM onwards, with a giveaway and a special discount for attendees.

Aug 16, 2026Online (Discord)

Divyanshu

Arsenal

Kubernetes

EKS

AWS

OWASP EKS Goat: Hands-On AWS EKS Security

Black Hat USA Arsenal'26

Arsenal demo of OWASP EKS Goat: a deliberately vulnerable AWS EKS environment for practising attack paths and the controls that stop them. Arsenal Station 8, Business Hall.

Aug 6, 2026Las Vegas, USA

Anjali & Divyanshu

Latest Videos

CH-5.2.2 – Using IMDSv2 to Exfiltrate Credentials | AWS EKS Security Masterclass with OWASP EKS Goat

⎈ Kubernetes Security

CH-5.2.2 – Using IMDSv2 to Exfiltrate Credentials | AWS EKS Security Masterclass with OWASP EKS Goat

In this hands-on lab, we walk through how IMDSv2 can be leveraged to access IAM role credentials when an attacker gains access to an EC2-hosted application.

CH-5.2.1 – Enumerate & Exploit Web Application Lab| AWS EKS Security Masterclass with OWASP EKS Goat

⎈ Kubernetes Security

CH-5.2.1 – Enumerate & Exploit Web Application Lab| AWS EKS Security Masterclass with OWASP EKS Goat

In this hands-on lab, we walk through enumerating and exploiting a vulnerable web application (Jenkins v2.441) running inside an AWS EKS cluster.

EKSAWSPentesting

CH-5.2 – Lab: Exploiting Sample Application in AWS| AWS EKS Security Masterclass with OWASP EKS Goat

⎈ Kubernetes Security

CH-5.2 – Lab: Exploiting Sample Application in AWS| AWS EKS Security Masterclass with OWASP EKS Goat

Welcome to Section 5.2 of the AWS EKS Security Masterclass with OWASP EKS Goat! In this video, we launch the attack section of our masterclass.

EKSAWSPentesting

Latest from the Blog

EKS Moved to Containerd: GuardDuty's Runtime Alerts Stayed Behind

Understanding why GuardDuty runtime alerts lagged when EKS moved to containerd and why that matters for security monitoring.

Jan 20, 2024•Divyanshu

Threat Modeling

Threat Modeling 102: Applying STRIDE to Payments Architecture

Practical application of STRIDE threat modeling methodology to payments architecture for identifying and mitigating security risks.

Jan 18, 2024•Divyanshu

Integrating SES with AWS Cognito

Learn how to integrate Amazon SES with AWS Cognito User Pools for custom email functionality in your authentication flow.

Jan 10, 2024•Anjali

Not sure which training fits?

Tell us your experience level, what you are trying to secure, and when you are free. We will help you pick the right one.