Peachycloud Security: hands-on AI, AppSec and cloud security training

Built by the Shukla Duo (Anjali & Divyanshu), leads of the OWASP EKS Goat and OWASP GKE Goat projects. We teach cloud security by attacking and defending real infrastructure — not slides.

Anjali founded Kubernetes Village, leads OWASP EKS Goat, and is a recognised AWS Community Builder. We presented OWASP EKS Goat: Hands-On AWS EKS Security at Black Hat USA 2026 Arsenal, and have run Arsenal sessions at Black Hat Europe. We volunteer at Cloud Village at DEF CON.

We also host Container Security Village at the Seasides conference in Goa — a dedicated track where Kubernetes and containers meet security, now in its second edition — and deliver the EKS Goat: AWS EKS Security Masterclass there as a full-day training.

Training

Start here

Video tutorials — a chapter-by-chapter AWS EKS Security Masterclass built on OWASP EKS Goat, plus standalone walkthroughs on IAM exploitation, WAF bypass, container scanning and SBOM tooling.
Browse by topic — AWS, GCP, Kubernetes, containers, supply chain, DevSecOps, AI security.
Cloud security engineer roadmap — what to learn, in what order.

Free tools, no signup

IaC Security Scanner — checks Terraform, Kubernetes manifests, Dockerfiles and CloudFormation against 200+ rules. Runs entirely in your browser; your files are never uploaded anywhere.

Open source

OWASP EKS Goat and OWASP GKE Goat are deliberately vulnerable Kubernetes environments for practising attack and defence. Alongside them: EKSi-lite, Very Vulnerable Lambda Application, and Awesome Cloud Security Interview.

All projects · GitHub

Where we have spoken

Black Hat USA Arsenal 2026, Black Hat Europe Arsenal (2023, 2025), Nullcon (2021–2024), BRUCON 2024, OWASP AppSec Days Singapore 2025, CSA Summit 2024, Kubernetes Security Bangalore 2025, Seasides Goa 2025, c0c0n, and BSides Bangalore, Ahmedabad and Singapore. Full list of talks

Interview preparation

Cloud security interview questions and scenarios covering AWS and GCP concepts, Kubernetes RBAC, threat modelling and incident response. Interview guide

Training for teams

Corporate training for security and platform teams, and instructor-led training covering AWS, GCP, Kubernetes, containers and DevSecOps. Corporate training · Instructor-led training · Talk to us

Writing

Write-ups on cloud attack paths, WAF bypasses, CTF walkthroughs and threat modelling. Read the blog

YouTube · GitHub · All links · hello@peachycloudsecurity.com

PeachycloudsecurityPCS

Categories

Explore cloud security topics organized by category

AI Security

Explore the intersection of artificial intelligence and cloud security, including AI-powered threat detection, LLM security, and secure AI deployments.

AWS Cloud Security

Master Amazon Web Services security with guides on IAM, VPC security, GuardDuty, Security Hub, and AWS-native security best practices.

GCP Cloud Security

Learn Google Cloud Platform security including IAM, VPC Service Controls, Security Command Center, and GCP security architecture.

Kubernetes Security

Secure your Kubernetes clusters with guides on RBAC, network policies, pod security, secrets management, and container security.

Linux & Networking for Cloud Security

Build your foundation with Linux security, network fundamentals, firewalls, and system hardening for cloud environments.

Software Supply Chain Security

Protect your software supply chain with guides on dependency management, SBOM, container image security, and CI/CD pipeline security.

General & Discussions

Motivational journeys, career discussions, general security topics, and community conversations about cloud security.

Security Engineer Interview

Prepare for security engineer interviews with mock interviews, common questions, technical deep-dives, and interview tips.

DevSecOps

Integrate security into DevOps pipelines: CI/CD security, automated testing, infrastructure as code security, and secure deployment practices.