The PDF guide
356 pages, 52 chapters, progressive explanations, 30 guided case studies, and 36 illustrations. Vulnerabilities, obsolescence, firmware, OT, and CISO oversight in one learning path.
Loading page…
Practical guide + companion toolkit
Vulnerability management, from the first alert to a verified fix.
A self-study path to understand, practise and organise vulnerability management. A 356-page guide and a companion kit of data, scripts, exercises and solutions, in the English edition of the CyberLifeCycle guide.
Guide and toolkit adapted in English · English edition · November 2026
Launch offer
€99Including tax · one-time payment
Planned price after launch: €149 including tax
Secure payment on Stripe
- 356
- guide pages
- 52
- chapters
- 44
- labs with solutions
- 30
- guided case studies
The learning path
Learn to assess a case, then manage the whole process.
The running example connects inventories, sources, assessment, decisions and evidence of remediation. Understand what you have observed, what you can conclude and what still needs verification.
- 01
Understand and inventory
CVEs, vendor sources, versions, CPEs, PURLs and SBOMs: establish the foundations, identify components and understand coverage limits.
- 02
Assess and prioritise
Investigate false positives, backports and exploitation conditions. Use CVSS 3.1/4.0, EPSS and KEV alongside the system context.
- 03
Fix and verify
Track releases, baselines and deployments. Organise actions, exceptions, rollback and evidence required for closure.
- 04
Automate with controls
Connect Python, n8n and agents to a verifiable method. Put AI inside a harness, tests and human review.
Inside the toolkit
The guide and resources to put the method into practice.
Exercises and solutions
44 labs, 60 exercises, 100 questions and three final projects. Fictional datasets let you practise without using customer inventories.
The companion ZIP toolkit
Python scripts, data, templates, schemas, Docker configurations, n8n workflows and skill resources. Procedures and expected results guide each exercise.
Editable resources
The manuscript, figures, and PDF build resources give you a working base to adapt to your own practice.
From tools to evidence
A laboratory to understand the entire workflow.
The multi-container application, its two API releases and its cache demonstrate a targeted fix. The guide connects Syft, Trivy, Dependency-Track, Wazuh, n8n and agents to evidence and decisions, with procedures to build your own environment.
The toolkit includes the files and procedures to build your practice environment: application, inventories, analysis, and remediation tracking.
Explore the platform and laboratoryBefore choosing the toolkit
How do I follow the learning path?
Work through the PDF guide at your own pace, then practice each step with the companion toolkit's datasets, exercises, and worked solutions.
Can I start without being a cybersecurity expert?
Yes. The path starts with the fundamentals and progresses towards assessment, tools and oversight. Advanced exercises need a terminal and the stated prerequisites. You can start the Python/SQLite core without a VM or an AI API key.
Is a French edition available?
Yes. Choose the French edition on the French page, at the same price.
Do I need to buy all the tools mentioned?
The Python/SQLite core and educational code are open source. Optional extensions have their own licences, including n8n under the Sustainable Use License. External model services are separate from the core.
Does the toolkit include a monitoring service?
The toolkit helps you learn and build your own method. Managed monitoring is a separate service: CyberLifeCycle tracks your scope, assesses alerts and provides the agreed reports.
Who can answer a question about the toolkit?
Email contact@cyberlifecycle.fr with questions about the content or receiving your files.
Launch offer
The guide and toolkit: €99 including tax.
Planned price after launch: €149 including tax · Guide and toolkit adapted in English
Buy the English edition for €99Would you rather entrust your monitoring to a specialist?
You provide your inventories or SBOMs. CyberLifeCycle handles targeted monitoring, assessment, priorities, alerts and reports for the agreed scope and frequency.