Everything you might want to know.
Common questions about cohorts, PDFs, self-paced courses, and the shop. Something we haven't answered? Reach out.
General
About Encrypticle and how we work
Is this a job-guaranteed bootcamp?
No. Encrypticle is a training program, not a placement service. What you get: real skills, a verifiable certificate, a portfolio (bug bounty submissions, VDR reports, capstone). What you do with those is up to you.
How is this different from Udemy or Coursera?
Live cohorts vs recorded playlists. Small batches vs 50,000 enrollees. Taught by someone doing security work right now vs someone who taught it 5 years ago. Hinglish delivery vs American English.
What is Encrypticle exactly?
Encrypticle is a cybersecurity education platform focused on practical, hands-on training for Indian learners. We run live cohorts (Bug Bounty, Ethical Hacking), sell PDF handbooks and self-paced courses, and publish free content on the blog and YouTube. Founded and run by a working AppSec practitioner.
Where is Encrypticle based?
Gurugram, India. All operations are remote — students join live cohorts from anywhere in India (and occasionally abroad). We're legally registered in India and issue GST-compliant invoices for all Indian purchases.
Who's behind Encrypticle?
Jagdeep Singh — an Application Security Engineer with 4.5+ years in IT and dedicated security work, active bug bounty hunter across HackerOne, Bugcrowd, Intigriti, and YesWeHack. Holds CEH, CRTP, PWPA, APIsec CP, CRTA. More on the instructor page.
Why Hinglish and not full English?
Because most Indian learners actually think in Hinglish. American accents on YouTube add a real friction cost — you spend energy parsing pronunciation instead of understanding concepts. Slides, notes, and code stay in English (for portability and search), but explanations happen in the language people are most comfortable in.
Is Encrypticle certified by any government or university?
No — Encrypticle is a private education platform, not a UGC-recognized institution. Our certificates carry weight because employers can verify them and because they're backed by actual demonstrated work (labs, reports, capstone). If you need a government-recognized diploma, this isn't that; if you need industry-relevant skills that hiring managers respect, this is.
Do you offer job placement?
No — we're a training platform, not a placement agency. What we do give you: a certificate, a portfolio (bug bounty submissions, VDR reports, capstone project), a strong alumni Discord where job leads get shared, and interview prep guidance. What we don't do: guarantee jobs. Anyone who does is lying.
Can I get a demo lesson before I enroll?
Yes — most cohorts have 2-3 free preview lessons available on the cohort page. We also publish free lessons and writeups on the blog and YouTube. Watch a few before deciding. If you can't stand the teaching style, don't enroll.
What makes Encrypticle certificates valuable?
Three things. One — they're issued only when you complete real, graded work (80% labs + capstone), not just for showing up. Two — every certificate has a public verification URL with QR code so employers can confirm authenticity in one click. Three — the person signing the certificate is actively working in the field, not a career educator.
How often is the content updated?
Cohort curricula are refreshed every batch — the security landscape moves too fast to reuse a static syllabus. Tool versions, common bug classes, and program policies get updated based on what's actually happening on bounty programs. PDFs and self-paced courses get major refreshes at least once per year.
Can I share or resell the PDFs?
No. PDFs are licensed for personal use only — you can't upload them to Telegram groups, share on drives, or resell them. Every PDF is watermarked with your account details. We don't threaten people with legal notices, but sharing directly cannibalizes the work that lets us keep prices reasonable for the next student.
Is there a Discord community?
Yes — but it's members-only (cohort students and PDF buyers). We don't run a free public Discord because those tend to become noise-heavy and hard to moderate. The paid-members Discord has active daily discussion, weekly writeups, job leads, and direct access to Jagdeep.
Do you accept guest writers?
Occasionally, for the blog. If you've found something genuinely interesting (a novel bug class, a good CTF writeup, a war story from your first year in security), pitch us at contact@encrypticle.com with a rough outline. We don't pay for guest posts but we credit fully and link back generously.
What are the support hours?
Email support (contact@encrypticle.com): usually replied within 24 hours (48 hours on weekends). Discord for enrolled students: Jagdeep is active most days but not always same-day; expect a 24-hour turnaround for detailed questions. Live cohort sessions: fixed weekend slots (times published on the cohort page).
Do you offer corporate or team training?
Yes — we run private cohorts and workshops for security teams, dev teams learning AppSec, and companies onboarding new hires. Format is flexible (single-day workshop, multi-week program, or a full custom cohort). Email contact@encrypticle.com with your team size, goals, and rough timeline and we'll take it from there.
Do you have a physical office or classroom?
No — everything is online. This lets us keep prices reasonable and reach students anywhere in India. If demand ever grows enough that in-person cohorts make sense, we'll consider it, but not before.
What if the content isn't for me?
See our refund policy. Short version: if you email us within 7 days of purchase explaining a genuine mismatch between what was advertised and what you got, we'll review case-by-case. Watching the free previews before buying is the best filter.
Cohorts
Live batches, sessions, and enrolment
I'm a complete beginner. Can I keep up?
V3 (Ethical Hacking) is beginner-friendly if you're comfortable using a computer, know basic Linux commands, and can read code without necessarily writing it. If you don't have any of that yet, start with the free YouTube content for a month and then join. V2 (Bug Bounty) assumes some prior exposure.
Everything is in Hinglish?
Live sessions and recordings are in Hinglish — Hindi sentence structure with technical terms kept in English (SQL injection stays SQL injection, not "database mein ghusna"). Slides, notes, and written material are in English so you can screenshot them, share them, and search them.
Do I get a certificate?
Yes. Every completed cohort gets a signed Encrypticle certificate with a unique number. The PDF has a QR code linking to a public verification page at encrypticle.com/verify/[number] — recruiters can confirm authenticity without contacting you.
What's the format — live or recorded?
Cohorts are live. Weekly sessions run over Zoom/Meet with an active Q&A window at the end of each class. Sessions are recorded and posted to your dashboard within 24 hours so you can revisit anything you missed.
How many hours per week should I set aside?
Plan for 6-8 hours per week during an active cohort. Roughly: 3 hours of live sessions (usually a weekend), 2-3 hours of labs and homework, and 1-2 hours reading writeups or reviewing recordings. Students who put in less than 5 hours generally fall behind by week 3.
What if I miss a live session?
Miss it happens. Recordings go up within 24 hours and stay in your dashboard for the length of your enrollment. You can ask questions in Discord asynchronously and Jagdeep answers within a day. Try not to miss more than 2 sessions in a row — the material builds quickly and catch-up gets painful.
Do I get lifetime access to recordings?
You get access to recordings for 12 months from the cohort start date. That's enough to revisit anything you need for interviews or a re-attempt at the labs. Lifetime access isn't promised because the content itself gets refreshed — outdated recordings would do more harm than good.
What's the class size?
We cap cohorts at 30 students. This is deliberate. Small enough that Jagdeep knows your handle in Discord, remembers your writeups, and can give feedback on your reports. Large batches make everyone anonymous and the Q&A dies by week 3.
Which topics does V3 (Ethical Hacking) cover?
V3 is the beginner-friendly track. Weeks 1-2: Linux fundamentals + networking. Weeks 3-4: web app basics + OWASP Top 10. Weeks 5-6: recon, enumeration, and exploitation basics. Weeks 7-8: intro to bug bounty, report writing, and capstone. Full syllabus on the cohort page.
Which topics does V2 (Bug Bounty) cover?
V2 assumes you know the basics and goes deep on real hunting. Recon at scale, Burp Suite mastery, IDORs and access control, business logic flaws, chaining, and report writing that actually pays. Not a "hack the box" style — this is oriented around real-world programs on HackerOne, Bugcrowd, Intigriti, YesWeHack.
What if I can't afford the fee?
Reach out to contact@encrypticle.com with a short note about your situation — student, unemployed, coming from a background where paying up-front isn't realistic. We have a small number of scholarship seats each batch and sometimes offer EMI-style split payments for genuine cases. No forms, no essays — just be honest.
Are there prerequisites?
For V3 (Ethical Hacking): comfortable using a computer, basic Linux commands, ability to read code even if you don't write it. That's it. For V2 (Bug Bounty): you should have done a few TryHackMe/HTB rooms, understand HTTP requests, and be familiar with Burp Suite basics — otherwise the first two weeks will feel too fast.
What tools and setup do I need?
A laptop with at least 8 GB RAM (16 GB recommended) and 40 GB free disk space. We provide setup guides for the Kali VM or WSL install in Week 0. Burp Suite Community Edition is free and sufficient for the entire cohort. No paid tools are required.
Will there be homework and labs?
Yes — every week has 1-2 hands-on labs and a weekly writeup submission. Labs are graded by Jagdeep with specific feedback (not just "good job"). Writeups are peer-reviewed inside Discord. You genuinely can't coast through — the labs are how you learn.
How is progress tracked?
Each week has a lab submission plus a written explanation of what you found and how. Your dashboard shows completion status per module. Cohort completion (and the certificate) requires 80% lab submission and a completed capstone.
What happens after the cohort ends?
You keep dashboard access (recordings, notes, capstone feedback) for 12 months. You stay in the alumni Discord permanently — which is where new cohort mentors get picked and where job leads get shared. Many V1 students still hang out there daily.
Can I switch between cohorts?
Yes — if you enrolled in V3 but realise it's too basic for you, we can upgrade you to V2 by paying the difference (as long as V2 hasn't already started). If life happens mid-cohort, we can pause your access and roll you into the next batch. Email us within the first 2 weeks and we'll sort it out.
Do you have EMI or payment plans?
For most Indian cards, Razorpay offers 3/6/9-month EMI at checkout — the option shows up automatically for eligible cards. For scholarship / need-based split payments outside of card EMI, email contact@encrypticle.com before enrolling. We don't advertise it because we don't want it abused, but genuine cases get accommodated.
Shop & Checkout
Buying, payment, and refunds
What's the refund policy?
Full refund available within 7 days of enrollment, as long as you've watched less than 20% of the released content. Full details at /legal/refund. After that window, refunds are case-by-case for genuine reasons.
Careers
Getting hired in security
Can a complete beginner get a security job after your cohort?
Honestly — usually not immediately. Most beginners need 6-12 months after their first cohort to build a real portfolio, land a first internship or freelance gig, and become "hireable" for a junior role. The cohort accelerates you significantly, but it doesn't skip the grind. Anyone selling a "job in 30 days" pipeline is misleading you.
What roles should I target as a starter?
Realistic entry roles for a fresher with cohort + portfolio: VAPT trainee, security intern, SOC analyst L1, junior AppSec engineer, junior consultant. Roles like "Red Team Engineer" or "Senior Pentester" are 2-4 years away. Aiming for the right level early makes a huge difference to interview outcomes.
Do certifications matter for hiring?
For juniors — yes, but not the way people think. Certs get you past resume filters. They don't get you the offer. CEH is fine for filters but doesn't impress technical interviewers. OSCP genuinely does. CRTP is respected in the AD/red team space. Portfolio + demonstrable work matters more than the number of certs stacked on LinkedIn.
Which certifications are worth doing?
In rough order of ROI for a beginner: OSCP/OSCP+ (hands-on offensive, hard, widely respected), CRTP (Active Directory), eJPT (cheap entry cert, doesn't hurt), CEH (filter cert, get it if the JD asks). Skip most vendor-specific certs unless the job explicitly needs them. Bug bounty submissions on real programs are worth more than half these certs combined.
Do I need a CS degree to break in?
No. Plenty of working security engineers have BCA, B.Sc. IT, or unrelated degrees. What matters is demonstrable skill. A CS degree helps for certain corporate filters and for MNCs with strict HR rules — but for product companies, security consultancies, and bug bounty, portfolio > degree. Don't let the lack of a degree stop you from starting.
Should I start with bug bounty or a job first?
Do both in parallel. Bug bounty is the fastest way to build a portfolio — even 3-4 valid submissions dramatically improve your interview conversion. But bounties alone aren't enough income for most people starting out, and a full-time job teaches you things bounties don't (working with dev teams, dealing with real production systems). Get a junior job, hunt on evenings and weekends.
How do I build a portfolio without work experience?
Three sources: bug bounty submissions (even N/A responses show effort — real hunters have plenty), CTF writeups on your blog or Medium, contributions to open-source security tools (small PRs to well-known tools count). GitHub with 5-10 real repos beats an empty profile with a fancy title. Depth matters more than volume.
What's a realistic first salary in India?
For a Tier-1 city (Bangalore, Gurgaon, Hyderabad) as a fresher AppSec / VAPT trainee at a services company: ₹3-6 LPA. At a product company or startup with a strong portfolio: ₹6-12 LPA. FAANG-tier: 15+ LPA for a strong junior, but those roles are rare and highly competitive. Numbers are current as of 2026 and rising slowly.
Are remote security jobs common?
Increasingly yes. Product companies and consultancies now regularly hire fully remote AppSec, red team, and consulting roles. For freshers it's a bit harder — most junior roles still expect at least hybrid attendance. Once you have 1-2 years of experience, remote becomes very accessible, including international remote roles paying in USD/EUR.
Which Indian companies hire in security?
Broad categories: product companies (Razorpay, Zomato, Swiggy, Cred, Groww, PhonePe, Paytm, Ola, Meesho, and many more each have security teams); security-focused consultancies (NII, Payatu, Bugsmirror, TrustSec, Lucideus/SAFE, XenonStack, and dozens of smaller firms); MNC captives (Amazon, Google, Microsoft, Salesforce, Deloitte, EY, PwC, KPMG all have India security teams); defence/gov contractors for specific specialisations. Product > consultancy for career acceleration in the long run.
Should I move abroad?
Depends on your goals. Salaries abroad (US, Europe, UAE, Singapore) are significantly higher — often 3-5x post-tax comparable roles in India. But: cost of living is also higher, career growth is often faster in India at the mid-senior level in product companies, and remote international work now lets you get abroad salaries without relocating. Optimize for the specific role, not the country.
How do security interviews actually go?
Junior AppSec/VAPT interviews usually have 3-4 rounds. Round 1: HR screen. Round 2: technical basics (OWASP Top 10, networking, sample vulnerability walkthrough). Round 3: hands-on — either a take-home report, a live pentest exercise on a scoped target, or a whiteboard code review. Round 4: culture/managerial fit. Preparing means: knowing your portfolio deeply, being able to walk through 2-3 CVEs or bugs end-to-end, and reading recent OWASP releases.
Should I do a Master's degree?
For security, usually no — the ROI on a Master's is poor compared to 2 years of focused industry work + certs + bounties. The exceptions: (1) you want to move abroad and need it for a visa, (2) you want to go into security research/academia, or (3) you're a career switcher whose current degree is very far from tech. Otherwise, save the money and the time.
What's the career progression in security?
Rough timeline in India: Year 0-2 junior/trainee VAPT or SOC analyst. Year 2-4 mid-level security engineer / consultant, specialising (AppSec, red team, cloud, DFIR). Year 4-7 senior engineer or team lead, owning security programs. Year 7+ principal engineer, security architect, manager, or founder. Specialisation matters more than title — a great AppSec engineer with 4 years is worth more than a generalist with 8.
Can bug bounty be a full-time career?
For a small number of top hunters — yes. For most people — no, and it shouldn't be your goal early on. Steady bounty income requires you to be top-tier globally. What bounty is good at: teaching you real-world offensive skills, building a portfolio, generating side income of ₹20k-2L/month realistically. Treat it as an accelerator to a career, not the career itself.
How long does it typically take to land the first job?
From "I just discovered security exists" to first offer: 12-24 months for most people doing it seriously (studying + labs + cohort + certs + bounty submissions in parallel). From "I have solid basics and a cohort under my belt" to first offer: 3-9 months depending on portfolio and market conditions. Faster if you already have IT/development background; slower if this is a career change from a non-technical field.
Talk to a real person.
Not everything fits in an FAQ. If you have a specific question about your situation, drop us a line and we'll get back to you within a couple of days.