Stage01
1-2 weeks
Understand computers
Learn hardware, files, browsers, applications, accounts, permissions, virtualization, and how the internet connects devices.
Ready whenSet up a virtual machine and explain what happens when you open a website.
Cybersecurity roadmap · absolute beginnerStart from zero.
Start from zero.
Build real skills.
You do not need Linux, networking, or coding experience. Follow one clear path from basic computer knowledge to safe hands-on cybersecurity practice.
8clear stages
6-12months at your pace
Zeroexperience required
Explore certificationsChoose your next
Choose your next
cybersecurity destination.
See every roadmap in one place. OSCP+ and Security+ are ready now; upcoming paths remain clearly marked while their content is being reviewed.
OffSecAvailable
OSCP+
Offensive security, exploitation, Active Directory, and reporting.
IntermediateView roadmap
CompTIAAvailable
Security+
All five SY0-701 domains, practical labs, PBQ preparation, and exam readiness.
BeginnerView roadmap
INE SecurityComing soon
eJPT
A practical first penetration-testing certification.
BeginnerPreview
TCM SecurityComing soon
PNPT
Network penetration testing, Active Directory, reporting, and debriefing.
IntermediatePreview
Hack The BoxComing soon
CPTS
Deep practical methodology across enterprise environments.
IntermediatePreview
ISC2Coming soon
CISSP
Security leadership, architecture, governance, and risk.
AdvancedPreview
Start from zeroNew to cybersecurity?
New to cybersecurity?
Begin here.
After exploring the available destinations, build the shared foundation used across defensive security, penetration testing, cloud, governance, and security engineering. Every stage below now opens a direct course or hands-on lab from an official learning platform.
Complete beginner roadmap · direct learning resources
Follow the stages in order
Complete the course or lab, practise the skills, and move forward only when you can produce the evidence listed in the stage. Some platforms require a free learner account.
Stage02
3-5 weeks
Learn operating systems
Use Windows and Linux confidently: terminal navigation, users, groups, processes, services, filesystems, permissions, updates, and logs.
TryHackMe · Free accountLinux Fundamentals interactive labsMicrosoft Learn · Free pathWindows client fundamentals
Ready whenComplete the same administration tasks from both a graphical interface and a terminal.
Stage03
4-6 weeks
Build networking foundations
Study TCP/IP, OSI, IPv4, subnetting, switching, routing, DNS, DHCP, ARP, NAT, ports, protocols, Wi-Fi, VPNs, and firewalls.
Ready whenDraw a packet path from your device to a web server and troubleshoot each layer.
Stage04
3-5 weeks
Automate small tasks
Start with Python plus Bash or PowerShell. Focus on variables, conditions, loops, functions, files, APIs, regular expressions, and readable scripts.
Ready whenBuild three small tools for log parsing, file checks, or network inventory.
Stage05
4-6 weeks
Learn security fundamentals
Understand risk, threats, vulnerabilities, controls, CIA, identity, encryption, hardening, patching, backups, logging, incident response, and safe handling of data.
Ready whenThreat-model a small home or office network and recommend layered controls.
Stage06
Ongoing
Practice only in safe labs
Use systems you own or purpose-built training environments. Practise packet analysis, hardening, log review, vulnerability validation, and incident investigation.
TryHackMe · Free accountOffensive Security Intro labTryHackMe · Free accountDefensive Security Intro lab
Ready whenDocument each lab with scope, commands, evidence, findings, and lessons learned.
Stage07
After foundations
Choose a direction
Explore defensive security, penetration testing, cloud security, application security, governance and risk, digital forensics, or security engineering.
Ready whenComplete two small projects in your preferred track before choosing a certification.
Stage08
Continuous
Build proof of skill
Create a portfolio with lab reports, diagrams, scripts, write-ups, and improvements. Then select a certification that matches the role you want.
Ready whenPublish a clean portfolio and follow the dedicated certification roadmap when ready.
After stage 6
Explore before you specialize.
Try small projects in more than one area. Your preferred daily work should decide your direction.
Blue team
Monitoring, detection, incident response, hardening, and threat hunting.
Offensive security
Authorized assessment, web security, exploitation, Active Directory, and reporting.
Security engineering
Secure systems, cloud, application security, automation, and architecture.
Risk & compliance
Governance, audit, privacy, business risk, policy, and third-party assurance.
About CyberPath
A clearer path into cybersecurity.
CyberPath was created by Saad Douiri to turn overwhelming learning objectives into simple, practical paths. Start with the general roadmap, then move into a dedicated certification only when it supports your goal.
All practice must stay inside systems you own, purpose-built labs, or environments where you have explicit permission. Read our Responsible Use and Editorial Policy.