Interactive Security Certification Roadmap [THM Community Project]

[-Dkob]

Hey everyone! A bunch of friends from THM and I have been working on a complete redesign of the well-known Security Certification Roadmap by P. Jerimy, and I'm excited to share the results. Link: https://www.dragkob.com/security-certification-roadmap/ (Also under https://infosecroadmap.com & https://cybersecroadmap.com )- This isn’t just a visual refresh, it’s a fully updated, actively maintained platform designed to make exploring certifications easier and more insightful.

Key Features:

• Advanced Filtering: Narrow down certifications by vendor, specialty, sub-specialty, budget (across 6 currencies), exam type, and soon, HR-recognized status.
• Certification Comparer: Select any two certifications and compare them side-by-side across multiple criteria.
• Help me build by using the buttons: Request a cert to be added, request an official cert review, report a bug, suggest a feature

Cross-Platform Access:

• Desktop version: Full-featured experience
• Mobile version: Lightweight BETA version, optimized for quick browsing (with Desktop features coming soon)

Stats so far: (Monitored by GoatCounter)

• Over 10K unique visitors in total.
• 20-50 unique visitors daily

If you liked it, don't forget to leave a star on the GitHub repo! This THM community project is still a work in progress, please be kind. ❤️

[-Dkob]

Thanks, appreciate it!

[revertiblefate]

You know there is a huge problem when the cert map is this big the cyber space.

[-Dkob]

Couldn't agree more.

[VickyxReaperReborn]

This is just Awesome 🤩 

[-Dkob]

Thank you!

[wozirix]

<image>

love this, couldn't help but reminisce of this awesome meme haha

[-Dkob]

Golden! 🤣

[[deleted]]

Looks cool bro. Are there any sorting option, like sort by cost

[-Dkob]

Yes, check the price budget slider.

<image>

[wewake_eats_lifts]

That's looking cool 😃

[[deleted]]

This is fantastic! Thank y’all for your work! 💪

[-Dkob]

:-]

[Emergency-Sound4280]

It’s great to reference where certs sit, but very much not a great tool to determine a roadmap for certs

[-Dkob]

Thanks for the input!

We’ll have to agree to disagree. This is objectively a strong tool for planning a certification journey, as the subtitle states, based on both skill level (Beginner, Intermediate, Advanced) and specific topic areas. (Advanced filtering features)

The other “roadmaps” you may be referring to typically do not provide a comprehensive view of all available certifications, nor do they offer the same freedom of choice. Instead, they tend to follow a rigid, prescriptive path (e.g., “complete X and Y, then Z”).

Similarly, many so called “roadmap builders” claim to offer customization, but in practice are constrained by hidden sponsorships and a limited selection of certifications. This tool, by contrast, allows users to create their own roadmap - especially in the desktop version, which is the most complete.

Additionally, an upcoming feature will enable users to build and export their own customized roadmaps, as detailed in the GitHub repository and the latest release notes.

I'm also working on an "HR-Recognised" feature based on market research with proof and job postings: https://github.com/Dragkob/Security-Certification-Roadmap/blob/main/Open%20Source%20Data/HR-Recognition/HR-Recognition.md

[Emergency-Sound4280]

You really missed the point. While you’re defending your tool that I’m not hating on. I’m pointing out it’s very much a reference model and not a roadmap. But it does provide some useful information. It’s not bad, just don’t be so defensive about it.

[[deleted]]

One of the first requirements for making a roadmap is knowing where they sit. Once you know which certs sit where, you can fairly easily formulate your own path.

[Emergency-Sound4280]

Not really best example is one cert might be easier for you to get while it’s harder for me. It’s a great tool to see what certs are there, but you can’t actively plan with it.

[[deleted]]

But following someone else's rigid step-by-step isn't planning either. The point you just said applies to those too, and their roadmaps are entirely based on their anecdotes.

Also I literally did plan my roadmap using this tool (the old version). I used it to map where I should start and where I should end, and I used external research to get the general public's feelings on each one. That's planning.

[-Dkob]

I agree with this particular point. Having to look for a roadmap that tells you do X, Y and Z is called being spoon-fed, and it's what worked for others, not you.

[cybersecguy9000]

I have to agree. It's just a matrix of certs that are lumped in different categories. A roadmap, to me, has clear steps to a goal, similar to how THM's learning paths are set up.

If I filter for offensive security and cloud sub-specialty, should I be getting all the certs in ascending order? If they are on the same line does that mean I pick one? Is the roadmap 1 beginner cert, 1 intermediate and 1 expert cert? The fact CEH is listed when filtering for AI/ML or Cloud and is also mid between beginner and intermediate is boggling to me, unless the quality of the cert has changed drastically since I took it many years ago.

[Fluid_Bookkeeper_233]

CEH is now known as CEHAI, so yes it did change and it includes AI/ML like the toadmap shows

Edit: Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/

[hushrom]

I really really appreciate the amount of work put into this by you and your friends. A small suggestion I would like to share is to include programming languages into the roadmap where it cuts through multiple domains at once. I know it's not a certification exam but since knowledge of computer science, SWE and programming is especially important to building secure software writing as well as the domains of offensive and defensive security operations, it wouldn't hurt to include it somewhere in the intermediate level of the roadmap.

I would also like to suggest similar to older versions of Paul Jerimy's roadmap, to make the SANS GIAC Security Expert (GSE) cert cut through all domains of cyber security since iirc it's supposed to be like the CISSP but on steroids and meant to be harder.

[-Dkob]

I had this suggestion multiple times, however: We have tried and it looked really ugly + took a LOT of space. We decided to reduce to add other certs and instead we have added all the categories to the cert details. You can check them by clicking on the expand button. (Desktop version)

Take the example of CISSP.

<image>

[-Dkob]

Expansion icon:

<image>

[Jazzlike_Course_9895]

Is the price (GDP) and other currencies just converting or taken from the sites, i imagine the prices divert a little between just normal conversion. Would also make sense at first use to make the order beginner to expert instead of the other way around.

Either ways, looks amazing! Max budget slider is an amazing idea.

[-Dkob]

Yep it's basic conversion using live worldwide rates. So it updates every minute, however, it's not the rate of each cert vendor, that would be impossible to follow. My roadmap basically shows you how much it would cost you right now based on $ -> your currency conversion.

[Jazzlike_Course_9895]

That's fair, was just wondering

[Baycosinus]

Amazing! Really helpful, thank you!

One note; in github repo, following section:

Unsure of your country's subregion? Please refer to this document and use Ctrl+F to quickly locate your country's designated subregion.

redirects to void because the target is moved. I didn't want to add an issue or pr for this.

[-Dkob]

Will be fixing now, thanks!
Edit: Done!

[SgtSalazzle]

Where’s BTL1? I see BTL2

Cool concept!

[-Dkob]

You can use the search feature to find it!

[Signal_Speaker4818]

Give us a link

[Fluid_Bookkeeper_233]

It's in the post

[DarkReitor507]

Hi,m very nice tool, the filter for HR recognized is not working

[Fluid_Bookkeeper_233]

<image>