Peachycloud Security: hands-on AI, AppSec and cloud security training

Built by the Shukla Duo (Anjali & Divyanshu), leads of the OWASP EKS Goat and OWASP GKE Goat projects. We teach cloud security by attacking and defending real infrastructure — not slides.

Anjali founded Kubernetes Village, leads OWASP EKS Goat, and is a recognised AWS Community Builder. We presented OWASP EKS Goat: Hands-On AWS EKS Security at Black Hat USA 2026 Arsenal, and have run Arsenal sessions at Black Hat Europe. We volunteer at Cloud Village at DEF CON.

We also host Container Security Village at the Seasides conference in Goa — a dedicated track where Kubernetes and containers meet security, now in its second edition — and deliver the EKS Goat: AWS EKS Security Masterclass there as a full-day training.

Training

Start here

Video tutorials — a chapter-by-chapter AWS EKS Security Masterclass built on OWASP EKS Goat, plus standalone walkthroughs on IAM exploitation, WAF bypass, container scanning and SBOM tooling.
Browse by topic — AWS, GCP, Kubernetes, containers, supply chain, DevSecOps, AI security.
Cloud security engineer roadmap — what to learn, in what order.
Vibe coding security checklist — how AI-coded apps get hacked: exposed databases, hardcoded secrets, IDOR and more.

Free tools, no signup

IaC Security Scanner — checks Terraform, Kubernetes manifests, Dockerfiles and CloudFormation against 200+ rules. Runs entirely in your browser; your files are never uploaded anywhere.

Open source

OWASP EKS Goat and OWASP GKE Goat are deliberately vulnerable Kubernetes environments for practising attack and defence. Alongside them: EKSi-lite, Very Vulnerable Lambda Application, and Awesome Cloud Security Interview.

All projects · GitHub

Where we have spoken

Black Hat USA Arsenal 2026, Black Hat Europe Arsenal (2023, 2025), Nullcon (2021–2024), BRUCON 2024, OWASP AppSec Days Singapore 2025, CSA Summit 2024, Kubernetes Security Bangalore 2025, Seasides Goa 2025, c0c0n, and BSides Bangalore, Ahmedabad and Singapore. Full list of talks

Interview preparation

Cloud security interview questions and scenarios covering AWS and GCP concepts, Kubernetes RBAC, threat modelling and incident response. Interview guide

Training for teams

Corporate training for security and platform teams, and instructor-led training covering AWS, GCP, Kubernetes, containers and DevSecOps. Corporate training · Instructor-led training · Talk to us