Peachycloud Security: hands-on AI, AppSec and cloud security training

Built by the Shukla Duo (Anjali & Divyanshu), leads of the OWASP EKS Goat and OWASP GKE Goat projects. We teach cloud security by attacking and defending real infrastructure — not slides.

Anjali founded Kubernetes Village, leads OWASP EKS Goat, and is a recognised AWS Community Builder. We presented OWASP EKS Goat: Hands-On AWS EKS Security at Black Hat USA 2026 Arsenal, and have run Arsenal sessions at Black Hat Europe. We volunteer at Cloud Village at DEF CON.

We also host Container Security Village at the Seasides conference in Goa — a dedicated track where Kubernetes and containers meet security, now in its second edition — and deliver the EKS Goat: AWS EKS Security Masterclass there as a full-day training.

Training

All trainings: the current catalogue, including live instructor-led batches and free workshops.
Practical Security Engineering for Tech Teams: 2 days, OWASP Top 10, containers, DevSecOps, AWS security and AI security, with security reviews. Labs run in the browser.
Corporate training: the same material delivered privately for a team.
1:1 training: individual sessions and career mentoring.
Free hands-on labs: browser-based, no signup.

Start here

Video tutorials — a chapter-by-chapter AWS EKS Security Masterclass built on OWASP EKS Goat, plus standalone walkthroughs on IAM exploitation, WAF bypass, container scanning and SBOM tooling.
Browse by topic — AWS, GCP, Kubernetes, containers, supply chain, DevSecOps, AI security.
Cloud security engineer roadmap — what to learn, in what order.

Free tools, no signup

IaC Security Scanner — checks Terraform, Kubernetes manifests, Dockerfiles and CloudFormation against 200+ rules. Runs entirely in your browser; your files are never uploaded anywhere.

Open source

OWASP EKS Goat and OWASP GKE Goat are deliberately vulnerable Kubernetes environments for practising attack and defence. Alongside them: EKSi-lite, Very Vulnerable Lambda Application, and Awesome Cloud Security Interview.

All projects · GitHub

Where we have spoken

Black Hat USA Arsenal 2026, Black Hat Europe Arsenal (2023, 2025), Nullcon (2021–2024), BRUCON 2024, OWASP AppSec Days Singapore 2025, CSA Summit 2024, Kubernetes Security Bangalore 2025, Seasides Goa 2025, c0c0n, and BSides Bangalore, Ahmedabad and Singapore. Full list of talks

Interview preparation

Cloud security interview questions and scenarios covering AWS and GCP concepts, Kubernetes RBAC, threat modelling and incident response. Interview guide

Training for teams

Corporate training for security and platform teams, and instructor-led training covering AWS, GCP, Kubernetes, containers and DevSecOps. Corporate training · Instructor-led training · Talk to us

Writing

Write-ups on cloud attack paths, WAF bypasses, CTF walkthroughs and threat modelling. Read the blog

YouTube · GitHub · All links · hello@peachycloudsecurity.com

PeachycloudsecurityPCS

🔗

Software Supply Chain Security Videos

2 videos

View All Videos

Protect your software supply chain with guides on dependency management, SBOM, container image security, and CI/CD pipeline security.

Software Supply Chain Security Video Tutorials

BlackHat USA Training Breaking & Defending Kubernetes with GitOps, Supply Chain & Threat Modelling

🔗 Software Supply Chain Security

BlackHat USA Training Breaking & Defending Kubernetes with GitOps, Supply Chain & Threat Modelling

Early bird registrations are now open for Black Hat USA 4-day hands-on training Breaking and Defending Kubernetes with GitOps, Supply Chain & Threat Modelling Join us (Divyanshu & Anjali).

KubernetesSupply Chain

SBOM Demo for Cysinfo Talk: Generate & Scan Vulnerabilities with Syft & Grype | No Sound

🔗 Software Supply Chain Security

SBOM Demo for Cysinfo Talk: Generate & Scan Vulnerabilities with Syft & Grype | No Sound

In this demo, you will learn how to uncover hidden vulnerabilities inside your application dependencies using Syft (SBOM generation) and Grype (vulnerability scanning).