Join the community of Certified MITRE ATT&CK® Defenders who have proven their real-world mastery in applying the knowledge of adversary behaviors to improve security configurations, analytics and decision-making.

One year of unlimited access to ATT&CK badges and certifications – USD 499

MAD Individual Subscriptions

MITRE ATT&CK Defender (MAD) is an ATT&CK skills training and certification program produced by MITRE’s own ATT&CK subject matter experts. Individuals can subscribe to a one-year license to the MAD Skills Hub, for access to a comprehensive on-demand training curriculum and its corresponding family of certifications, or register for live hands-on skills training sessions, scheduled periodically throughout the year. Both learning styles focus on achieving real-world mastery in the application of the ATT&CK knowledge to achieve the adversarial advantage of a threat-informed defense.  

A program focused on real-world skills for immediate impact on operations 

MAD’s courses, assessments, and agile credentialing program focus on skills training and real-world mastery, enabling certified defenders to immediately adopt and leverage the ATT&CK knowledge base in their work environment.   

Created by ATT&CK experts forging advantaged defenders 

MAD training and assessments are created by MITRE’s own ATT&CK subject matter experts, currently on a mission to forge a new breed of advantaged defenders, better prepared than ever to stop agile adversaries.   Learn from the experts in this 45min. on-demand webinar. 

Credentials structured to maintain a continuous advantage over time 

The ATT&CK team produces timely updates to the framework as the threat landscape changes.  When there are significant updates, MAD will require that the defender initiate a recertification exercise to affirm continuous proficiency against the latest threats.

A comprehensive curriculum ensures holistic threat-informed operations 

The curriculum helps defenders apply ATT&CK across critical areas of a cyber operation’s life cycle, like cyber threat intelligence, testing and evaluation, and defensive measures.  The curriculum is constantly growing and currently offers skills training and credentialing in the areas of: 

  • ATT&CK Fundamentals 
  • ATT&CK for Cyber Threat Intelligence 
  • ATT&CK for Security Operations Center Assessments 
  • ATT&CK for Adversary Emulation Methodology 
  • ATT&CK for Threat Hunting Detection Engineering 

    Subscribe to the Quick ATT&CK Facts Newsletter