Free
$0
- "The Invoice That Wasn't": a full phishing investigation
- Guided, Assisted and Solo modes
- Its real-world project and resume entry
- No sign-up
Work real-feeling incidents at a bank, a hospital, a law firm and a retailer. You use the tools yourself, handle the people, and face an attacker who reacts to every move. Then you build it for real and add it to your resume.
No sign-up · about 35 minutes · runs in your browser · a mentor guides your first time

Every scenario plays three ways, so complete beginners and experienced IT people both feel at home.
Sam walks you through every step and explains why it matters, in plain English. No background needed.
Your goals are listed and a nudge is one click away. You decide the order and how to use the tools.
No help, and the attacker keeps moving. Contain it in time and the skill is marked Proven.
Most labs teach you to solve a puzzle. Night Shift teaches you to do the job: tools, people, pressure and proof.
Read email headers, detonate attachments, write your own log searches, isolate laptops, patch and rescan, change AI guardrails. Nothing is pre-filled.
Interview users and managers. Mid-incident, an employee asks to restart their infected laptop and your boss wants a status update. Handle it well, or learn why not.
Block their domain too early and they switch domains. Reset a password but leave the session open and they set up mail forwarding. Order matters.
Replay a scenario and the people, machines, attacker addresses and numbers change. You practice the skill, not memorize answers.
Pick a role. See what job postings ask for, which scenarios build each skill, and the certifications that cover the same ground.
Every scenario unlocks a real-world project with free tools, clear steps and a resume entry. Prove it Solo to unlock a harder stretch level.
Skills transfer to the tools employers name, like Splunk, Microsoft Sentinel, CrowdStrike, Microsoft Entra ID, Tenable Nessus and AWS. Night Shift is independent and not affiliated with any vendor.
Set in four fictional workplaces: a retailer, a credit union, a hospital and a law firm.

AI security, hands-on: run the attacks yourself, fix permissions and guardrails, then retest until it's safe and still useful.
Each path lines up scenarios and real-world projects with what employers list in job postings, plus the certifications that cover the same ground.
Linked to Security+, CySA+, SecAI+, SC-200, SC-300, AWS Security, CISA, AIGP and more.
One membership unlocks everything, with new scenarios every month. Cancel anytime.
$0
$15 / month
$39
Secure checkout via Payhip. See our terms and refund policy.
Yes. Start in Guided mode: Sam explains each step and why in everyday language, and the Field Guide explains every term. There's a larger-text button too. Nurses, teachers, lawyers and retirees use it.
It builds the skills and judgment entry-level roles ask for, and every scenario turns into a real project you build with free tools and can put on your resume honestly. It doesn't guarantee a job, and it isn't work experience, so describe it as training.
Join on Payhip and download that month's Night Shift Pro file from your member library. It opens in any browser, even offline. Each month brings a new edition with new scenarios; your progress carries over in the same browser.
Yes, anytime, from your Payhip account. You keep your current edition until it expires and won't be charged again.
It trains the whole job: tools, procedure, people, pressure and proving your fix worked. The attacker reacts to you, scenarios change on every replay, and each one ends with a real-world project.
Yes, in your own browser on that device. Nothing is sent to us.
New free tools, search strings that find unadvertised roles, and honest notes on what hiring managers are asking for right now. Unsubscribe anytime.