Blue Team Level 1 (BTL1)

Assessment

One 24-hour practical incident-response exam with immediate grading.

Exam length

24 hours

Questions

Task-based questions from an investigation

Passing

Not captured in this check

Price

£399 GBP — Training and exam price as displayed on the official page (£399.00 GBP). No USD price was shown.

Included

4 months of on-demand course access (330+ lessons), 23 browser labs with 100 hours of lab time, one exam attempt and one free resit.

Retakes

One free resit included; further resits can be purchased.

Validity

Lifetime (per the official FAQ)

Renewal

None stated

Prerequisites

No exam entry requirements. Recommended experience shown as 0–2 years.

Who it suits

Editorial judgment
Beginners who want a practical, lab-based exam covering phishing analysis, SIEM, forensics and incident response, at a mid-range price.

Notes and caveats

The official page gives two time estimates: "approximately 30 hours to complete" in the course summary and "typically between 40 to 50 hours" in the FAQ. The provider states that on average 70% of students pass on their first attempt; that figure is the provider's own and is not independently verified. The former securityblueteam.io domain did not resolve on the check date.

Official page ↗

Related guides

• Practical SOC certifications compared: BTL1, CCDL1, HTB CDSA and TryHackMe SAL1
• SOC analyst training paths by starting point, with real costs

Compare with

• CompTIA Security+
• CyberDefenders Certified CyberDefender Level 1 (CCDL1)
• TryHackMe Security Analyst Level 1 (SAL1)
• EC-Council Certified SOC Analyst (C|SA)

All certifications in one table · Build a training plan

Sources

1. Centri (BTL1): www.centri.org/certifications/blue-team-level-1 — checked 2026-10-22, direct HTTP fetch and rendered in a headless browser