How It Works

Real Engagements. Real Mentors. Real Reports.

The Hackening delivers structured, mentor-guided cybersecurity engagements. Students conduct supervised penetration testing against real MSP environments, producing professional-grade reports within defined ethical and professional guardrails.

What The Hackening Is

This is not a classroom exercise. It is not a CTF.

It is supervised, real-world cybersecurity work, conducted by students under the direct mentorship of experienced practitioners, delivered to MSPs who have explicitly authorized the engagement.

Every engagement has a defined scope, a named mentor, and a documented deliverable. Every student is matched to engagements appropriate to their skill level. Every finding is validated by a mentor before it reaches the MSP.

The hackening classroom in session
THE FIVE-STEP MODEL

The Five Step Model From Scope to Delivery

Each engagement follows the same five-step structure. This is the program’s discipline — and its protection for students, MSPs, and the program’s reputation.

01

Engagement Scoping

Each engagement is scoped and approved in advance with the participating MSP. Clear boundaries, authorized targets, and expected deliverables defined before work begins.

Scope Agreement Defined Boundaries Authorized Targets
02

Student Assignment

Students matched to engagements appropriate to skill level. Every student works under direct mentor supervision.

Skill-Matched Mentor Paired No Independent Operation
03

Supervised Execution

Students conduct penetration testing within the approved scope. All activities follow defined ethical, legal, and professional standards.

Direct Supervision Within Scope Only Ethical Standards
04

Report Delivery

Professional-grade pen test reports documenting findings, risk assessments, and recommendations. Mentors validate all findings before delivery to the MSP by the student.

Professional Reports Actionable Findings Mentor Reviewed
05

Review & Feedback

Structured feedback for the student, outcomes review for the MSP, and program-level learning capture that improves the next engagement.

Mentor Validated Student Feedback MSP Delivery
THE GUARDRAILS

Students do not operate independently or outside approved scopes

Mentors validate findings and guide all communications. The Hackening does not provide unsupervised testing, unrestricted access, or testing without explicit authorization. These guardrails protect students, MSPs, and the program’s integrity.

Scope

Defined in Advance

Every engagement scoped and authorized in writing before work begins. No scope creep, no improvisation.

Supervision

Mentor-Validated

Mentors review all findings and guide all communications. Students do not contact MSPs independently during engagements.

Ethics

Professional Standards

All work follows defined ethical, legal, and professional standards. Authorization, documentation, and accountability at every step

The Deliverable

MSPs receive a professional-grade penetration test report containing findings, risk assessments, and prioritized recommendations.

The same caliber of deliverable a paid engagement would produce — written by a student, validated by a mentor, governed by the program.

The Outcome

Real Client-Facing Experience.

Real client-facing experience. A professional report with their name on it. A reference from an experienced mentor. Evidence — not just credentials — that they can do the work.

Sample Report — Illustrative Findings Only
Confidential
Penetration Test Report
[Client MSP Name Redacted]
Prepared by[Student Name] · Cohort XX
Validated by[Mentor Name, Certification]
Date[Engagement Date]
2
Critical
5
High
8
Medium
4
Low
Unpatched SMB service — remote code execution vector
Default admin credentials on perimeter firewall
RDP exposed to internet without MFA enforcement
Outdated TLS configuration on mail server
Internal DNS zone transfer misconfiguration

Ready to Learn More?

Whether you’re a student, a practitioner who wants to mentor, or an MSP considering participation, the next step is the same: get in touch.