Originally developed by MITRE®, MAD20™ certifies the world's elite infosec teams on MITRE ATT&CK and advanced cyber risk mitigation to combat dynamic and persistent threats.

A program focused on real-world skills for immediate impact on operations

MAD20™’s courses, assessments, and agile certification program focus on skills training and real-world mastery, enabling certified defenders to immediately adopt and leverage the MITRE ATT&CK® knowledge base in their work environment.


MAD20 Defenders





Living Certification™ structured to maintain a continuous advantage over time

MAD20™ is changing the game in cyber certifications with an agile Living Certification™ program that promotes defenders to continuously update their knowledge and skills against the latest threats. MAD20™ offers updated certifications when the threat landscape changes, helping certified defenders maintain a continual advantage over adversaries.



A comprehensive curriculum ensures holistic threat-informed operations

The MAD20™ curriculum helps defenders apply ATT&CK® across critical areas of cyber operations, cyber threat intelligence, testing and evaluation, and defensive measures. The curriculum is constantly growing and offers skills training and credentialing in the areas of:


ATT&CK® Cyber Threat Intelligence

SOC Assessment Cert
SOC Assessment Cert

ATT&CK® Security Operations Center Assessments


ATT&CK® Adversary Emulation Methodology


ATT&CK® Threat Hunting and Detection Engineering


ATT&CK® Purple Teaming Methodology

Get the complete course library

Unique to the industry is that MAD20™’s training courses and assessments are all based on MITRE’s groundbreaking MITRE ATT&CK Defender™ training and certification program. The MAD20 system incorporates elements of the offering developed by the MITRE Corporation, including training and assessments developed by MITRE’s own MITRE ATT&CK® subject matter experts.




Developed by the best. Utilized by the best.

Originally developed by MITRE, MAD20 certifies the world's best infosec teams on advanced cyber risk mitigation to combat dynamic and persistent threats.



ATT&CK® Fundamentals

Experts from MITRE produced the ATT&CK Fundamentals course to help forge a new breed of advantaged defenders, better prepared than ever before to stop agile adversaries.

MITRE Press Release

MITRE Engenuity Teams with MAD20 Technologies to Expand MITRE ATT&CK Defender Cybersecurity Training and Credentialing

ATT&CK® Detecting Access Token Manipulation

This course uses the lessons and tactics taught in the MAD20™ ATT&CK Threat Hunting Course and applies it to detecting T1134.001: Token Impersonation and Theft.

ATT&CK® Emulating Access Token Manipulation

This course analyzes real-world examples of adversaries performing Access Token Manipulation and discusses how we can emulate this behavior.


Upcoming Events

Live Demo - MAD20 ARENAS

Join us as we host our friends from CYBER RANGES and demonstrate MAD20 ARENAS which includes next generation cyber range capabilities used among the most elite cyber security teams globally. This event will be free to all MAD20 subscribers.

January 24, 2024

10:00 am - 11:00 am Eastern Time

MAD20 Skills Hub