Skip to content

Certifications

Every certification we track, from entry-level to expert. Filter by level, provider, domain or the role you're aiming for.

Prefer a picture? Career map or matrix view

55 certifications

Entry

Foundation certifications for career starters

6 certifications

CompTIA

Entry

CompTIA Security+

Vendor-neutral proof of core security administration skills, tested partly through performance-based tasks and mapped by CompTIA to DoD 8140 work roles

Exam
$439
Study
3-6 months

ISC2

Entry

ISC2 Certified in Cybersecurity

Proves you understand core security concepts with no work experience required, on an adaptive exam rewritten in September 2026 with AI topics

Exam
$199
Study
2-3 months

CompTIA

Entry

CompTIA Network+

Vendor-neutral proof that you can address, configure, secure and troubleshoot business networks, tested with performance-based tasks on a 90-minute exam

Exam
$399
Study
3-4 months

INE Security

Entry

INE Security Junior Penetration Tester

Proves you can scan, exploit and pivot through a live lab, answering 45 questions during a 48-hour practical exam

Exam
$250
Study
2-4 months

Centri

Entry

Blue Team Level 1

Proves you can investigate phishing, forensic, threat intelligence and SIEM evidence in a 24-hour practical incident response exam

Exam
$529
Study
3-6 months

Intermediate

Professional certifications for skill development

19 certifications

EC-Council

Intermediate

Certified Ethical Hacker

Tests recognition of attack techniques across nine domains in a 125-question exam, with an optional six-hour hands-on Practical leading to CEH Master

Exam
$950
Study
4-6 months

ISC2

Intermediate

Systems Security Certified Practitioner

Proves a year of hands-on security administration, from access control to cryptography, on a two-hour adaptive exam across seven evenly weighted domains

Exam
$249
Study
3-6 months

ISC2

Intermediate

Associate of ISC2 (CISSP Pathway)

The designation ISC2 grants for passing the CISSP exam before you have five years of experience, with six years to qualify

Exam
$749
Study
4-8 months

CompTIA

Intermediate

CompTIA Cybersecurity Analyst+

Tests a security analyst's ability to detect threats, prioritize vulnerabilities and handle incidents using real tool output, now on the CS0-004 exam

Exam
$439
Study
3-6 months

CompTIA

Intermediate

CompTIA PenTest+

Covers a full penetration test from scoping to report, including Active Directory, cloud and AI attacks, through scenario-based questions rather than a live lab

Exam
$439
Study
2-3 months

GIAC

Intermediate

GIAC Security Essentials

Proves hands-on defensive skill across Windows, Linux, networks and cloud in a four-hour open-book exam that includes CyberLive virtual machine tasks

Exam
$999
Study
4-6 months

GIAC

Intermediate

GIAC Certified Incident Handler

Proves you can detect, contain and investigate attacks by understanding the tools behind them, with hands-on CyberLive tasks in live virtual machines

Exam
$999
Study
4-6 months

Hack The Box

Intermediate

Certified Defensive Security Analyst

Proves you can investigate intrusions across several lab networks for seven days, then write an incident report an instructor grades

Exam
$210
Study
3-6 months

TCM Security

Intermediate

Practical Network Penetration Tester

Five-day external-to-domain-controller pentest, followed by a written report and a live debrief with TCM Security assessors

Exam
$499
Study
3-6 months

Okta

Intermediate

Okta Certified Professional

Proves day-to-day Okta administration through six hands-on use cases in a live Identity Engine org, with no multiple-choice questions

Exam
$250
Study
2-4 months

EC-Council

Intermediate

Certified Application Security Engineer - Java

Tests secure Java development across the whole lifecycle, from abuse cases and threat modeling to Spring Security, error handling and Tomcat hardening

Exam
$450
Study
3-5 months

GIAC

Intermediate

GIAC Certified Web Application Defender

Proves you can prevent and detect common web application flaws, from injection to OAuth and API abuse, the defender's counterpart to GWAPT

Exam
$999
Study
3-5 months

OffSec

Intermediate

OffSec Wireless Professional

A 3h45m proctored practical in which you recover wireless keys by hand and reach the access point in two of three live scenarios

Exam
$799
Study
2-4 months

INE Security

Intermediate

INE Security Certified Incident Responder

Practical incident response exam where you investigate a simulated corporate breach and answer scenario questions drawn from the evidence

Exam
$450
Study
3-5 months

GIAC

Intermediate

GIAC Web Application Penetration Tester

Proves you can test web applications as an attacker would, on a GIAC exam that includes hands-on CyberLive tasks in live virtual machines

Exam
$999
Study
3-5 months

Advanced

Advanced certifications for experienced professionals

22 certifications

ISC2

Advanced

Certified Cloud Security Professional

Vendor-neutral proof that you can secure cloud architecture, data and operations, and handle the legal and contract side of cloud services

Exam
$599
Study
4-8 months

ISC2

Advanced

Certified in Governance, Risk and Compliance

ISC2's credential, called CAP until 2023, for taking an information system through control selection, assessment, authorization and monitoring

Exam
$599
Study
4-6 months

OffSec

Advanced

OffSec Certified Professional

Proctored 24-hour practical with an Active Directory set; passing now awards lifetime OSCP plus a three-year OSCP+

Exam
$1,699
Study
3-6 months

CompTIA

Advanced

CompTIA SecurityX

CompTIA's senior engineering and architecture exam, formerly CASP+, scored pass/fail and built almost entirely on scenario and requirements-based objectives

Exam
$544
Study
6-12 months

Amazon Web Services

Advanced

AWS Certified Security - Specialty

Proves you can secure a multi-account AWS organization, from detection and incident response to KMS keys, now tested on the SCS-C03 exam

Exam
$300
Study
4-6 months

GIAC

Advanced

GIAC Penetration Tester

Proves you can plan and run an enterprise penetration test, from reconnaissance to Kerberos and Entra ID attacks, in an exam with CyberLive tasks

Exam
$999
Study
4-6 months

Hack The Box

Advanced

Certified Penetration Testing Specialist

Proves you can attack web, external and internal Active Directory targets over ten days, then write a commercial-grade report

Exam
$210
Study
4-8 months

Centri

Advanced

Blue Team Level 2

Proves you can run a 72-hour intrusion investigation, from malware analysis to threat hunting, and write a hand-marked report

Exam
$2,648
Study
6-12 months

GIAC

Advanced

GIAC Certified Forensic Examiner

Proves you can reconstruct what a user did on a Windows system from registry, browser, email, USB and cloud storage artifacts, partly in hands-on tasks

Exam
$999
Study
4-6 months

GIAC

Advanced

GIAC Network Forensic Analyst

Proves you can trace an attack from network evidence alone, using packet captures, NetFlow, proxy logs and protocol analysis, in a hands-on CyberLive exam

Exam
$999
Study
4-6 months

Zero-Point Security

Advanced

Certified Red Team Operator

Proves you can run adversary simulation with Cobalt Strike; the £399 course includes unlimited free exam attempts

Exam
$529
Study
3-6 months

GIAC

Advanced

GIAC Certified Forensic Analyst

Proves you can investigate intrusions across a Windows enterprise using memory forensics, filesystem timelines and NTFS analysis, partly tested in live virtual machines

Exam
$999
Study
4-6 months

GIAC

Advanced

GIAC Certified Intrusion Analyst

Proves you can read network traffic at the header level and write detection rules, tested partly through hands-on CyberLive tasks

Exam
$999
Study
4-6 months

Expert

Elite certifications for industry leaders

8 certifications

ISACA

Expert

Certified Information Security Manager

Verifies that you can run an information security program, and ISACA checks five years of security management experience before granting it

Exam
$760
Study
6-12 months

ISACA

Expert

Certified Information Systems Auditor

Proves you can plan and run risk-based IT audits, and it is granted only after five years of verified audit, control or security work

Exam
$760
Study
6-12 months

GIAC

Expert

GIAC Reverse Engineering Malware

Proves you can reverse-engineer Windows malware and malicious documents with disassemblers and debuggers, including unpacking samples and defeating anti-analysis tricks

Exam
$999
Study
6-9 months

OffSec

Expert

OffSec Web Expert

Proves you can find chained web vulnerabilities by reading source code, then automate the full attack in one unattended script within 48 hours

Exam
$1,749
Study
4-8 months

OffSec

Expert

OffSec Experienced Penetration Tester

Proves you can breach a defended corporate network and reach a set objective in a proctored 48-hour practical that never expires

Exam
$1,749
Study
6-12 months

ISACA

Expert

Certified in the Governance of Enterprise IT

Recognizes enterprise IT governance leaders, covering frameworks, investment benefits, resources and risk, after five verified years in governance roles

Exam
$760
Study
6-12 months

OffSec

Expert

OffSec Exploit Developer

Proves you can reverse engineer Windows binaries and write exploits that bypass DEP and ASLR, across three tasks in a 48-hour proctored exam

Exam
$1,749
Study
6-12 months