Click a cert to cycle:
Earned
In progress
Planned
The interactive chart needs a wider screen — here is the full certification list, grouped by domain. Open on a desktop for the visual roadmap and the drag-and-drop builder.
No certifications match your search.
Drag any cert box from the chart above into the canvas below. Drag from the blue dot on the box to connect it to another. Your created roadmap is automatically saved in this browser.
Notes and musings on certain certification providers, based on personal experience/research. Not exhaustive.
Fairly well regarded in the InfoSec community, but better known in government or military circles than in private sector.
mile2.com/role-based-certification-roadmapExam prices drop with membership, which carries an annual fee - this can be worthwhile especially for students and recent graduates. ISACA certifications require provable years of work experience; education can fulfill some but not all of this requirement.
isaca.org/credentialingSeveral certifications require either provable work experience or completion of official paid training to qualify for the exam. Without work experience, the required training can be very expensive - often over $1,600 for a single course tied to one cert.
EC-Council also practices dynamic pricing based on visitor data, meaning different people may see different prices for the same product. Checking the site in an incognito browser, on a mobile device, or from a different IP address may show a better price.
eccouncil.org/train-certifyCertifications are well valued but expensive. Most exams alone cost around $1,000, and the associated training can range from a few thousand to ten thousand dollars. Self-funding this training is generally not recommended — most people obtain it through an employer or school.
giac.org/certificationsA list of potentially useful adjacent resources
Found a broken link, wrong price, or a cert that no longer exists?
Open a GitHub Issue directly.
Or, ideally, submit a Pull Request to update the roadmap.
The Security Certification Roadmap is an attempt to map out a good number of useful cybersecurity related/adjacent certifications, taxonomized by sectors within the industry and difficulty to attain. The II denotes that this is a second take on the original, rewritten in Javascript and significantly updated to reflect changes over the past 2+ years.
Original Author: Paul Jerimy - pauljerimy.com/security-certification-roadmap
Source - GitHub · Last official update: July 2024
This fork: Source - GitHub · Last update: August 2026