PRACTICAL ROADMAP Beginner to Expert

The Ultimate Cybersecurity Learning Path

Welcome! This path is designed to take you from beginner to expert level in cybersecurity, following a fully practical approach that stays away from boring theoretical paths. I highly recommend starting from Level 1 if you have never studied cybersecurity or an IT-related field before. Remember to have fun while learning!

Level 1

Pre-Security

This is the foundational level. It covers the essential IT and computing concepts you need before diving into cybersecurity. You'll learn about operating systems (Windows and Linux), networking, Active Directory, and other core topics that prepare you for upcoming security concepts.

Practical Help Desk

Foundational 10 Days FREE
View Course
Level 2

Cybersecurity Fundamentals

This is your first step into the world of cybersecurity. The course introduces key concepts like the CIA triad, offensive vs defensive security, common cybersecurity tools, vulnerabilities, exploits, threats, malware, cryptography, security frameworks, and more.

Practical Security Fundamentals

Foundational 7 Days FREE
View Course
Level 3

Core Programming Languages

This level covers the essential programming languages used in cybersecurity: HTML, JavaScript, SQL, and PHP. These languages are important for understanding web security, identifying vulnerabilities, interacting with databases, and working with shells. Learners are expected to spend only a few days here to grasp the basic fundamentals of each language. The goal is not to become an expert programmer, but to gain just enough knowledge to understand how these languages function in security contexts.

HTML

Web Core 2 Days FREE
View Resource

JavaScript

Web Core 3 Days FREE
View Resource

SQL

Database 3 Days FREE
View Resource

PHP

Backend 3 Days FREE
View Resource
Bonus Level

Standout Skills

Take it whenever you like

Soft Skills for the Job Market

Career 4 Days FREE
View Course

AI 100: Fundamentals

AI Core 2 Days FREE
View Course
Level 4

The Primary Cybersecurity Fields

This level introduces you to two main cybersecurity paths: offensive and defensive. The offensive path covers core hacking concepts such as information gathering, exploitation, web attacks, and privilege escalation. The defensive path focuses on security frameworks, threat intelligence, network and endpoint protection, SIEMs, digital forensics, incident response, and phishing defense.

Junior Penetration Tester

Offensive Path 3 Months 51$
View Path (THM)

SOC Level 1

Defensive Path 2 Months 34$
View Path (THM)
Level 5

Your Junior Professional Certification

This level helps you earn your first professional certification, covering both offensive and defensive security. It builds your knowledge and skills through hands-on learning, practice, and multi-day practical exam that closely simulates real-world cybersecurity scenarios.

CJCA

HTB Junior Associate 3 Months 120$
View Certification
Level 6

Your Senior Professional Certifications

This level takes you from a junior to a senior cybersecurity professional. It includes two advanced certifications, one in offensive security and one in defensive security. These certifications are more challenging than the previous ones, with more complex topics and longer exams that push your skills further and help elevate your expertise to the next level. Practice tracks for each certification are provided as well.

CPTS

PenTest Specialist 5 Months 250$
View CPTS Cert

CPTS Preparation Track

Prep Track 1 Month 25$
View HTB Track

CDSA

Defensive Analyst 3 Months 235$
View CDSA Cert

CDSA Preparation Track

Prep Track 1 Month 25$
View HTB Track
Level 7

Picking a Specialization

At this point, you will have a good understanding of the main cybersecurity fields and how they branch into different areas. You now also have a general idea about what prerequisites each cybersecurity specialization requires. You can now choose one or more specializations to focus on and learn deeply. This helps you stay focused and build strong skills. All certifications and paths at this level, like in previous levels, are practical and simulate real-world environments.

Red Teaming

Red Teaming

Offensive 1 Month 17$
View Path

CRTP

Active Directory 2 Months 250$
View Cert

CRTE

Advanced Red Team 5 Months 300$
View Cert

Web App PenTesting

PWPA

Web Security 1 Month 200$
View Cert

CWES

HTB Web Specialist 3 Months 235$
View Cert

BSCP

PortSwigger 6 Months 100$
View Cert

AI Hacking

AI Security

AI Hacking 1 Month 17$
View Path

PAPA

AI PenTest 1 Month 250$
View Cert

COAE

Offensive AI Expert 3 Months 250$
View Cert

Mobile App PenTesting

PMPA

Mobile Security 1 Month 200$
View Cert

IoT PenTesting

PIPA

IoT Security 1 Month 200$
View Cert

Advanced Defensive Security

SOC Level 2

Defensive Path 2 Months 34$
View Path

Security Operations (SOC) 201

SOC Ops 1 Month 30$
View Course

Security Engineering

Security Engineer

Engineering 1 Month 17$
View Path

Advanced Endpoint Security

Advanced Endpoint Investigations

Investigations 2 Months 34$
View Path

Malware Analysis

PMRP

Reverse Engineering 1 Month 400$
View Cert

GRC

Breaking into GRC

Governance & Risk 2 Days FREE
View Course