Invest in the work.
Pricing
One membership covers every released track and module. Pay monthly or yearly. Training a team? Send a team inquiry. Billing opens with the first paid modules.
Free
Free
- Modules
- Module 00 in each track, as released
- Hands-on labs on SIFT
- In the free module
- Practice questions
- No
- Community on Skool
- Yes
- Completion documentation
- No
- Named authors and provenance records
- Yes
- Seat management and invoicing
- No
Join the grouphttps://www.skool.com/dfir
Individual
$149 per month or $1,290 per year
- Modules
- Every released module in every track
- Hands-on labs on SIFT
- All
- Practice questions
- Yes
- Community on Skool
- Yes
- Completion documentation
- Yes
- Named authors and provenance records
- Yes
- Seat management and invoicing
- No
Join the grouphttps://www.skool.com/dfir
Teams
On request
- Modules
- Every released module, per seat
- Hands-on labs on SIFT
- All
- Practice questions
- Yes
- Community on Skool
- Yes
- Completion documentation
- Yes, with team reporting (planned)
- Named authors and provenance records
- Yes
- Seat management and invoicing
- Planned; confirmed before purchase
Join the grouphttps://www.skool.com/dfir
Billing opens December 14, 2026.
Know what is separate.
SIFT is free; you supply the host it runs on. Where a module needs cloud spend, the module states it before you start.
Lessons, community and billing will run on Skool. Enrollment opens with the first modules. How Skool works.
Refunds and cancellation
Billing, renewals, cancellation and refunds run through Skool under Skool's terms. Cancel any time from your Skool account; access continues to the end of the paid period.
Pricing FAQ
- Do I need a membership to take the free module?
- No. Module 00 in each track opens to anyone with a Skool account as it releases.
- What happens to my access if I cancel?
- You keep access until the end of the period you paid for. Completion documentation you earned stays yours.
- Can my employer pay?
- Yes. Individual membership can be expensed on a card. For five or more people, send a team inquiry and we will quote seats.
Keep your judgment. Build your skills.
The examiner's work
starts with the evidence.
Last reviewed