CCSP (ISC2)
CCSP by ISC2: the six cloud-security domains, exam format and passing score, the five-year experience rule, cost, renewal and whether this cert is worth it.
expert
Cybersecurity
Cybersecurity certifications
Security certifications from entry level to expert - CompTIA Security+, CISSP, CISM and other vendor-neutral and specialist credentials.
Cybersecurity is one of the most certification-driven fields in tech, and the credentials map closely to career stage. Entry-level roles screen for a recognised baseline; analyst and SOC roles want proof of detection and response skills; senior and leadership roles expect experience-backed certifications. The trick is to take them in the right order rather than collecting them.
This hub brings the main security certifications together with side-by-side comparisons and step-by-step career paths, so you can see where each one fits and what to take next. Every page is source-checked and links to the official provider - and we never publish exam dumps.
10exams compared
693free practice questions
50guides & resources
12side-by-side comparisons
Start here
Where to start
The decisions to make before you commit to a syllabus.
-
Start: CompTIA Security+
The most widely requested entry-level baseline; no experience required and a common government baseline.
-
Build skills: a home lab
Practise log analysis, alert triage and incident response - the evidence employers actually want.
-
Step up: CompTIA CySA+
An analyst-level credential focused on security operations, detection and response (SOC roles).
-
Senior: CISSP or CISM
After ~5 years of experience: CISSP for technical leadership, CISM for security management and governance.
Progression
Certification pathway
A rough progression by level, not a strict order - start where your experience fits.
The catalogue
All Cybersecurity exams
Every exam we track in this field - each card links straight to its free practice questions, guides and fee breakdown.
Certified Ethical Hacker (CEH)
Certified Ethical Hacker (CEH): exam format, cost, eligibility, difficulty and an honest take on whether this offensive-security certification is worth it.
intermediate
CISA (ISACA)
CISA by ISACA: the five domains and official weights, the 150-question exam, the five-year audit experience rule, cost, and whether it is worth it in 2026.
advanced
CISM (ISACA)
CISM by ISACA: exam format, the four domains, experience requirement, cost and whether this security-management certification is worth it in 2026.
advanced
CISSP (ISC2)
CISSP by ISC2: exam format, the eight domains, the work-experience requirement, cost and whether this senior cybersecurity certification is worth it.
expert
CompTIA CySA+ (CS0-003)
CompTIA CySA+ (CS0-003): exam format, cost, focus areas, difficulty and how this analyst-level certification compares to Security+ in 2026.
intermediate
CompTIA Security+ (SY0-701)
CompTIA Security+ (SY0-701): exam format, cost, the five domains, difficulty and whether this entry-level cybersecurity certification is worth it.
intermediate
Offensive Security Certified Professional (OSCP)
Offensive Security Certified Professional (OSCP): the 24-hour hands-on exam format, cost, the PEN-200 course, difficulty, and whether the cert is worth it.
expert
AWS Certified Security - Specialty (SCS-C03)
AWS Certified Security - Specialty (SCS-C03): exam format, cost, all six domains, difficulty, renewal, and how it compares with CCSP for cloud security roles.
expert
CompTIA PenTest+ (PT0-003)
CompTIA PenTest+ (PT0-003): exam format, cost, all five domains, renewal with 60 CEUs, and an honest comparison with OSCP and CEH before you commit.
intermediate
Head-to-head
Compare these certifications
Side-by-side verdicts for the pairs candidates actually weigh.
- AWS Cloud Practitioner vs CompTIA Security+: which first IT certification?
- CCSP vs CISSP: which ISC2 security certification should you take?
- CEH vs CompTIA Security+: offensive hacking or security foundations?
- CISA vs CISM: which ISACA certification should you take?
- CISSP vs CISA: which security certification should you choose?
- CISSP vs CISM: which security certification should you take?
- CISSP vs Security+: which cybersecurity certification fits you?
- OSCP vs CEH: which offensive security certification should you take?
- CompTIA Security+ vs CySA+: which should you take first?
- Security+ vs Network+: which CompTIA cert should you take first?
- AWS Security Specialty vs CCSP: which cloud security certification should you take?
- CompTIA PenTest+ vs OSCP: which penetration-testing certification should you take?
Where they lead
Related career paths
Step-by-step routes from a first certification to the roles it unlocks.
- How to become a cybersecurity analyst with certifications
- How to become a CISO with certifications
- How to become a network engineer with certifications
- How to become a penetration tester with certifications
- How to become a security engineer: build defences, not just watch them
- How to become a SOC analyst with certifications
Questions
Frequently asked questions
- Which cybersecurity certification should I start with?
- Security+ for almost everyone. It is the most-requested entry-level baseline and gives you the vocabulary the rest of the field builds on. CISSP and CISM are senior, experience-gated certifications for later.
- Do I need a degree to work in cybersecurity?
- Not necessarily. Many analysts come from IT support or self-taught backgrounds. A recognised baseline certification plus a home lab you can talk about often matters more than a specific degree.
- Which cybersecurity certification pays the most?
- Senior certifications like CISSP and CISM consistently rank among the highest-paid - but that reflects the senior career stage they certify, not the badge alone.
- Are AI-generated practice questions allowed for security exams?
- Not for CompTIA exams (Security+, CySA+, Network+), which prohibit them. Our practice questions are original concept checks only for bodies that permit them, and are never real exam questions.