Choose a path. Every resource free.
Filter by the certification you are aiming at, or browse everything. Start with fundamentals or advance straight to career specializations.
Fundamentals
Subject knowledge every path assumes. Skip what you already have — skipped nodes come out of the percentage.
Networking fundamentals
Addressing, subnetting, routing, switching and the protocols everything else sits on.
Cybersecurity fundamentals
Threats, attacker behaviour, defence concepts and the vocabulary the whole field assumes.
Operating system fundamentals
Linux and Windows internals, file systems, permissions and processes.
Command line and scripting
Shell fluency and enough Python to automate the boring half of the job.
Cloud fundamentals
Shared responsibility, core services, virtual networking and identity.
Cryptography fundamentals
Hashing, symmetric and public key crypto, certificates and TLS.
Web and HTTP fundamentals
Requests, responses, sessions and cookies — the ground under every web attack.
Choose a Path
Career paths. Each shows how much of its groundwork you have covered.
Network Security Engineer
Firewalls, segmentation, VPN and secure routing. Built around the free Fortinet NSE track.
Network Analyst
Traffic analysis, packet capture and troubleshooting what the network is really doing.
Application Security
Secure coding, the OWASP Top 10 and testing web applications.
Cloud Engineer
Cloud fundamentals, networking and infrastructure as code.
Cloud Security Engineer
Identity, workload protection and posture management across providers.
SOC Analyst
Alert triage, SIEM, detection logic and the rhythm of a security operations desk.
Incident Responder
Containment, eradication, recovery and the report afterwards.
Penetration Tester
Recon, exploitation and privilege escalation, with the reporting that makes it useful.
Digital Forensics Analyst
Evidence handling, disk and memory analysis, defensible chain of custody.
GRC and Compliance Analyst
Frameworks, risk assessment and audit.
Identity and Access Engineer
Authentication, authorisation, federation and zero trust.
DevSecOps Engineer
Pipeline security, secrets management, shifting checks left.
OT and ICS Security
Industrial protocols and the constraints that make plant networks unlike IT.