Antisyphon Training
A training provider running a pay-what-you-can model starting at $0, alongside conventionally priced advanced DFIR courses taught by well-known practitioners.
Type: Bootcamp & intensiveWorking practitionersCareer changers
Offered by Antisyphon Training
The facts
- Cost
- Pay-what-you-can classes start at $0.00. On the pay-what-you-can catalogue, under $295 excludes cyber-range access; $295 or more adds six months of range access, a certificate and six months of recordings; $575 or more adds twelve months of range access. The advanced DFIR course Advanced Endpoint Investigations is separately priced at $575 on demand and $725-$1,850 live.Figure read 2026-09-12 from www.antisyphontraining.com
- Prerequisites
- Varies by course; the pay-what-you-can classes are introductory.
- Format
- Live and on-demand courses, typically 16 hours for the DFIR offerings, with an optional cyber range at the higher payment tiers.
- Length
- Usually two days live, or self-paced on demand.
- Renewal
- No renewal or recertification requirement is published for this entry.
- Accreditation
- No accreditation is claimed for this entry, and none should be inferred.
- Who it suits
- A self-funded learner who wants live instruction from serious practitioners and will pay what they can afford rather than what a list price demands.
- Audience
- Working practitioners · Career changers
- Official page
- www.antisyphontraining.com
Strengths
- A genuine sliding scale starting at zero is close to unique in this field, and it is not a marketing device — the $0 tier is real.
- Instructors include recognised DFIR practitioners, some of whom author material for other providers in this directory.
- Payment tiers are transparent about exactly what each one includes.
- Far cheaper than SANS at every tier, for live instruction from working practitioners.
Limitations
- The pay-what-you-can catalogue skews toward SOC and blue-team fundamentals. The deeper DFIR course is NOT pay-what-you-can — it is $575 to $1,850.
- No accredited credential results from any of it.
- Live courses are tied to Antisyphon's calendar and sometimes to a conference.
- The lowest payment tier excludes the cyber range and the certificate, so $0 buys the lecture and not the practice environment.
Sources
Costs, prerequisites and exam formats in this field change often, and several providers price by region, cohort or employer agreement. Every figure on this page carries the date it was read and a link to the page it was read from. Confirm current terms with the provider before you spend anything.