Ethical Hacking & Penetration Testing

A coach that teaches by asking — not by lecturing

The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's Ethical Hacking & Penetration Testing course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.

An authorized penetration test is the controlled rehearsal of an intrusion. A professional, commissioned in writing by a system's owner, works the way an attacker would — reading the public footprint, mapping the surface, analysing weaknesses, proving the gravest of them at the mildest sufficient level — and converts the rehearsal into findings the owner can close.

This course teaches that discipline end to end. The permission law that makes the work lawful; the engagement lifecycle that makes it evidence; reconnaissance and enumeration as the attacker practises them and the defender audits them; vulnerability analysis as argued priority rather than scanner output; and the weakness families of web applications, networks, identity, people, buildings, wireless and rented cloud ground.

Then it teaches the second half of the craft. Exploitation as the ethics of the smallest true proof; detection — what testing and intrusion look like in the logs; reporting at evidence strength, one truth in two documents; remediation closed by retest rather than correspondence; professional conduct; and the standing defensive programme a single test should leave behind.

It works in two movements. First, Module 1 — See It as an Intruder Does: Permission, Method and the Weakness Map — work through Concepts 1–9, finishing with The Authorized Assessment; then, Module 2 — Prove It Small, Then Close It for Good — work through Concepts 10–18, finishing with The Closure Dossier.

Both capstones produce real artifacts — the assessment pack for a regional builders' merchant chain: scope ruling, lifecycle plan, exposure review, layered map, analysed findings and proof plans; and the closure dossier: proofs at exact strength, detection graded, retest verdicts in the proper language, and the standing programme the client keeps.

The authorization discipline is part of the course. Nothing is tested without written permission, ever: every engagement in the book is authorized client work, every exercise is paper-based, laboratory-based or set inside a fictional authorized engagement, and the teaching stays at the professional level — methodology, vulnerability classes, and what a proof demonstrates. It contains no step-by-step intrusion recipes against real systems, no payloads, and no procedures for unauthorized access of any kind.

The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies. Learners who already know the material can test out concept by concept.

Ethical Hacking & Penetration Testing is part of The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning has delivered since 2002.