OffSec and Deloitte Portugal announced a strategic partnership on March 30, 2026.
The partnership aims to strengthen the technical capabilities of organizational security teams.
OffSec is a global leader in hands-on cybersecurity training.
Deloitte Portugal provides cybersecurity support across multiple industries.
The collaboration will deliver practical training combining OffSec’s curriculum and Deloitte’s industry experience.
Training will include instructor-led sessions, on-demand content, and hands-on labs.
The partnership will develop new training programs tailored to specific industry needs.
The initiative addresses the rising demand for skilled cybersecurity professionals.
Luís Abreu, Cybersecurity Partner at Deloitte Portugal, commented on the partnership’s significance.
Virginia Santos, Regional Sales Manager Europe at OffSec, emphasized the importance of practical training.
OffSec maintains Kali Linux, a leading operating system for penetration testing.
OffSec’s Learning Library includes 7,000 hours of content, 1,800 videos, and 4,200 hands-on labs.

OffSec, a global leader in hands-on cybersecurity training, has formed a strategic partnership with Deloitte Portugal to enhance the technical capabilities of security teams across organizations. The collaboration combines OffSec’s practical, lab-based training curriculum with Deloitte Portugal’s industry-specific cybersecurity expertise. Together, they will deliver tailored training programs, including instructor-led sessions, on-demand content, and hands-on labs, to equip professionals with real-world skills. The initiative aims to address the growing demand for highly skilled cybersecurity talent amid increasingly sophisticated threats. Luís Abreu of Deloitte Portugal emphasized the partnership’s role in building resilient security teams, while Virginia Santos of OffSec highlighted the importance of practical, attacker-minded training. OffSec, known for its extensive learning resources and maintenance of Kali Linux, will contribute its technical expertise to this effort.
The partnership reflects a broader industry trend of bridging the cybersecurity skills gap through structured training and certifications. By leveraging Deloitte’s multi-sector experience and OffSec’s hands-on approach, the collaboration seeks to foster long-term security maturity in organizations. The focus on practical application and industry-specific needs underscores the evolving requirements for cybersecurity professionals in modern enterprise environments.

This partnership between OffSec and Deloitte Portugal presents a compelling narrative about addressing the cybersecurity skills gap through practical, industry-aligned training. At its strongest, the collaboration leverages OffSec’s technical rigor and Deloitte’s sector-specific insights to create a scalable model for upskilling security teams. The emphasis on hands-on learning and real-world application aligns with the growing recognition that theoretical knowledge alone is insufficient in cybersecurity. The inclusion of Kali Linux, a widely respected tool, further bolsters OffSec’s credibility, while Deloitte’s established reputation in consulting lends institutional weight to the initiative.
However, the narrative also invites scrutiny of potential patterns. The framing of the partnership as a solution to a "talent gap" could be seen as an appeal to urgency (ARC-0012 Fear Appeal), leveraging the perceived escalation of cyber threats to position training as an indispensable investment. While the need for skilled professionals is real, the language risks oversimplifying complex systemic issues—such as workforce retention, compensation disparities, or the broader education pipeline—into a problem solvable by training alone. Additionally, the collaboration’s focus on "security maturity" and "resilient digital ecosystems" may carry an implicit assumption that technical proficiency is the primary barrier to organizational security, potentially sidelining cultural or governance challenges.
Rooted in the paradigm of cybersecurity as a perpetual arms race, this narrative assumes that continuous upskilling is the key to staying ahead of threats. Yet, it leaves unexamined whether the industry’s reliance on certifications and training programs might inadvertently create dependency on vendors like OffSec or consulting firms like Deloitte. Who benefits most from this model? While organizations gain access to skilled professionals, the long-term costs—financial, operational, and cognitive—of perpetual training cycles remain unaddressed. Second-order consequences could include the commodification of cybersecurity labor, where professionals are pressured into endless certification treadmills to remain employable.
Bridge questions: How might this partnership address the broader structural issues in cybersecurity education, such as accessibility and diversity? What metrics will determine the success of these training programs beyond participation rates? If the primary beneficiaries are large enterprises with resources to invest in training, how does this impact smaller organizations or underrepresented regions?
Counterstrike scan: A coordinated influence campaign pushing this narrative might emphasize the existential threat of cyberattacks to justify expensive training solutions, while downplaying alternative approaches like policy reforms or open-source education. However, the content here does not exhibit signs of manipulation; it presents a legitimate industry response to a documented skills shortage, with transparent goals and stakeholder perspectives. The alignment with a hypothetical attack playbook is minimal, as the focus remains on practical outcomes rather than fear-driven urgency.