Security Blue Team is a UK-based company that provides practical, hands-on defensive cybersecurity training, certifications, and online labs for individuals and corporate teams.
Security Blue Team is a UK-based cybersecurity education company specializing in practical, hands-on defensive security training. From their base in London, they offer structured courses, certifications, and real-world labs focused on blue team skills such as SOC analysis, threat hunting, DFIR, and security operations. Their best-known offerings include the Blue Team Level 1 (BTL1) and Blue Team Level 2 (BTL2) certifications, as well as the Blue Team Labs Online (BTLO) platform, which provides browser-based labs and challenges for individuals and corporate teams.
A charge from Security Blue Team may appear on your bank or card statement when you purchase a course or exam voucher, subscribe to the Blue Team Labs Online platform, or enroll a team in corporate training. Common scenarios include recurring monthly or annual BTLO subscriptions, one-time payments for BTL1/BTL2 courses or exam attempts, bundle purchases, or discounted promotions. You may also see small temporary authorization holds when you first add or update a payment card; these typically disappear within a few business days and are not actual charges. If you signed up for a free or discounted trial of BTLO, it may convert into a paid subscription at the end of the trial period if not cancelled in time.
To verify or resolve questions about a Security Blue Team charge, first log into your account at securityblue.team or blueteamlabs.online and check your billing/subscriptions section and email receipts. Look for order confirmations or invoice emails sent around the charge date, including to any work or secondary email addresses you may have used. If you still don’t recognize the payment, contact their support team via the support portal or email (commonly support@securityblue.team) with the last 4 digits of your card, charge date, currency, and amount—do not send full card numbers. They can confirm what the charge relates to, help with cancellations or refunds where eligible, and correct common billing issues such as duplicate payments, failed renewals, or account-access problems.
Bank Statement Variations
1 known variations
These are the raw merchant codes that appear on bank and credit card statements that we've identified as belonging to Security Blue Team.
What types of charges might I see from Security Blue Team on my bank statement?
You might see charges for individual courses (such as Blue Team Level 1 or Level 2), exam vouchers, or access to learning paths, which are usually one-time payments. You may also see recurring monthly or annual subscriptions for Blue Team Labs Online (BTLO), often labeled with “Security Blue Team,” “Blue Team Labs,” or a similar descriptor. Corporate customers might see larger, invoice-based charges for team licenses or private training. Small temporary authorisation amounts may also appear when you first add or update a payment method, but these should drop off automatically.
What are common subscription prices or charge amounts from Security Blue Team?
Security Blue Team typically charges one-time fees for certification courses and exams (for example, BTL1 and BTL2 are commonly in the low-to-mid hundreds of GBP/USD range), and recurring fees for BTLO subscriptions. Individual BTLO subscriptions are usually billed monthly or annually, with monthly charges often in the tens of GBP/USD and annual plans at a discounted rate compared to paying monthly. Corporate or team subscriptions can be higher and are often billed annually based on the number of seats. Exact prices and currencies can vary by region and promotion, so the most accurate amounts will be listed in your account billing page or original order receipt.
Why do I see a monthly or annual recurring charge from Security Blue Team?
Recurring charges usually come from an active Blue Team Labs Online (BTLO) subscription or another ongoing training plan you enrolled in. When you sign up, you choose a billing cycle (monthly or yearly), and your card is automatically charged at the start of each new period until you cancel. If you don’t remember signing up, double-check whether you created an account for a lab platform, used a work email, or started a trial that later converted into a paid subscription. You can confirm your active subscriptions and next billing date in your account’s subscription or billing settings.
How do I cancel or pause my Blue Team Labs Online (BTLO) or other Security Blue Team subscriptions?
To cancel a subscription, log into your BTLO or Security Blue Team account and go to the Account, Billing, or Subscriptions section, then select the option to Cancel or Manage your plan. Cancellation normally stops future renewals but keeps your access active until the end of the current paid period; partial refunds for unused time are generally not offered. If you signed up via an organisation or reseller, you may need to contact your training coordinator or that provider instead. If you cannot access your account, contact Security Blue Team support with your name, email used on the account, and recent charge details so they can assist.
How can I request a refund or dispute an unexpected Security Blue Team charge?
Security Blue Team’s refund policy typically allows refunds only within a defined window after purchase and before significant course or lab usage, and may exclude exam attempts or heavily used lab access. If you believe you were charged in error, first verify that you or someone in your household didn’t purchase a course or subscription using your card. Then contact Security Blue Team support (for example via support@securityblue.team or the help/contact page on securityblue.team) with your order ID, charge date, and amount. They can review your account, explain the charge, and let you know whether a refund, credit, or adjustment is possible under their current policies.
Why do I see a small £0–£2 or $0–$2 Security Blue Team charge that later disappears?
Small amounts like £0–£2 or $0–$2 are usually temporary authorisation holds used by the payment processor when you add or update a card, or when they verify your payment method before a subscription renewal. These are not actual fees and should be reversed automatically within a few business days, never posting as a final charge. If an authorisation hold remains pending for more than a week, contact your bank or card issuer to confirm its status. You can also reach out to Security Blue Team support with a screenshot of the pending transaction if you’re concerned.
How can I verify which course, exam, or account a Security Blue Team charge is linked to?
Start by logging into any Security Blue Team or Blue Team Labs Online accounts you may have (including those tied to work or secondary email addresses) and check the Orders, Billing, or Invoices section for a transaction matching the date and amount. Search your email inboxes for terms like “Security Blue Team,” “Blue Team Labs Online,” “BTL1,” or “BTL2” around the charge date to find receipts or enrollment confirmations. If you still cannot match the charge, contact support with the last 4 digits of your card, the exact amount, date, and currency; they can look up the corresponding account and purchase. For family or shared cards, also check whether another authorised user signed up for training or labs.
How do I contact Security Blue Team about a billing or payment issue?
You can usually reach Security Blue Team via their support email (commonly support@securityblue.team) or through the contact or help page on securityblue.team, where you can submit a ticket. When contacting them, include your full name, the email associated with your account, your country, and details of the charge (date, currency, and amount), but never send full card numbers. They may also provide support via their community channels (such as Discord) for general course queries, but account-specific billing issues are best handled through official support. Response times can vary, but you should receive an email acknowledgement and follow-up with clarification or next steps.