ZEKASTRA Cyber
Cybersecurity
How attacks against accounts, devices and websites work, how to notice them and what reduces the risk. Short training modules, threat profiles, decision scenarios, tools that run in your browser, checklists and the standards they rest on.
Runs locallyTools work in your browser. No account, no tracking of what you enter.
01
Learn
Ten short modules on passwords, phishing, backups, the home network, websites and the first hour of an incident, each with a self-check.
02
Threat profiles
Phishing, ransomware, injection, access flaws and more: how each works and how to reduce the risk.
03
Decision scenarios
Realistic situations to decide on: the urgent invoice, the parcel text, a found USB stick and more. Each choice is explained.
04
Security tools
Password strength, file hash, link anatomy, e-mail headers, HTTP headers and JWT. All run in the browser.
05
Checklists
Accounts, devices, home network, a small organisation, a website, and the first hour of an incident.
06
Glossary
Short definitions from authentication to zero-day.
07
Standards and law
NIST, ISO/IEC 27001, CIS, OWASP and MITRE ATT&CK, with the Turkish provisions on cybersecurity, computer offences and personal data.
Where to start
For yourself
Begin with the accounts checklist: a password manager and multi-factor authentication close the most common routes in.
For a small organisation
Read the ransomware and payment-fraud profiles, then work through the small-organisation checklist and write the one-page incident plan.
For a website you run
Paste your response headers into the audit tool and follow the website checklist.
How this section works
- Defensive only. Attacks are explained so they can be recognised and prevented; there are no ready-to-use attack instructions.
- Sources named. Technical statements point to standards, vendor documentation or the legal text.
- Limits stated. Each tool says what its result does not prove.
- Nothing collected. The tools run on your device; checklist progress stays in your browser.
This section is for defence and learning. Do not test systems you do not own or have written permission to test: unlawful access to an information system is an offence (Turkish Penal Code, Article 243).