Tier 1
Foundation — vendor-neutral baseline
Bring every security hire to a shared baseline of threats, controls, and SOC operations. Vendor-neutral so the certification still reads as relevant if your stack changes.
Build a credentialed security team
Cybersecurity Certification Training & Courses for IT Teams
Standardize your security team on the certifications auditors and SOC leaders look for. CompTIA Security+, ISC2 CCSP, ISACA CISM, Microsoft SC-200, Cisco CCNP Security. Every path comes with team admin reporting, with practice exams on the paths that carry them, and the pentesting, Cisco security, Splunk, and CySA+ paths include hands-on labs.
28
Certifications
10
Vendors
3
Tier roadmap
Audit-ready security team
The vendor-neutral foundations and platform certs SOC leaders and auditors look for.
CertificationsCybersecurity28 certs across 10 vendors
Spotlight
Most popular cybersecurity certifications
6 certificationsThe cybersecurity certifications IT directors most often standardize their teams on — vendor-neutral foundations plus the platform-specific certs your stack requires.
Security+
Retiring AssociatePracticeSY0-701
ThreatsAttacks and VulnerabilitiesTechnologies and Tools
The CompTIA Security+ certification validates the knowledge and skills of IT professionals in security, risk management, and data protection.
Exam investment: $425
CC – Certified in Cybersecurity
EntryPracticeCC
Security PrinciplesSecurity GovernanceIdentity and Access Management (IAM) Concepts
ISC2 Certified in Cybersecurity (CC) is an entry-level cybersecurity certification for newcomers, IT professionals, career changers, students and recent graduates.
Exam investment: $200
CISM – Certified Information Security Manager
ProfessionalPracticeCISM
Information Security GovernanceRisk ManagementInformation Security Program Development and Management
The Certified Information Security Manager (CISM) certification validates an individual's expertise in information security management, risk management, and incident response, and is ideal for IT professionals who want to demonstrate their expertise in managing and overseeing information security programs.
Exam investment: $575 for members $760 for non-members
CCSP – Certified Cloud Security Professional
ProfessionalPracticeCCSP
Cloud ConceptsArchitecture and DesignCloud Data Security
The CCSP validates advanced cloud security knowledge for designing, managing and securing cloud data, applications and infrastructure.
Exam investment: $599
Security Operations Analyst Associate (SC-200)
AssociatePracticeSC-200
Threat managementIncident responseSecurity operations
The Microsoft Certified: Security Operations Analyst Associate certification validates the skills and knowledge of security operations analysts to detect and respond to threats, and to configure and use threat detection tools, and who should pursue this certification are security operations analysts, security engineers, and security consultants.
Exam investment: $165
CCNP Security
ProfessionalLabsPractice350-701 SCOR, 300-710 SNCF, and 300-715 SISE
Network security design and implementationThreat detection and mitigationNetwork infrastructure security
The CCNP Security certification validates the skills required to secure and manage network infrastructure, and to respond to security threats.
Exam investment: Core exam: $400, Concentration exam: $300
CompTIA
3 certificationsCySA+
ProfessionalLabsPracticeCS0-004
Threat and vulnerability managementSoftware and systems securitySecurity operations and monitoring
The CompTIA Cybersecurity Analyst (CySA+) certification validates the skills and knowledge required to analyze and respond to cybersecurity incidents, as well as to identify and mitigate security risks.
Exam investment: $425
SecurityX
ExpertLabsPracticeCAS-005
threat managementcryptographyidentity management
The SecurityX certification by CompTIA is designed to validate the skills and knowledge necessary to perform core security functions and pursue an IT security career.
Exam investment: $529
Pentest+
ProfessionalLabsPracticePT0-003
Penetration testingVulnerability assessmentSecurity controls
The CompTIA PenTest+ certification validates the skills and knowledge required to plan and scope penetration tests, understand legal and compliance requirements, analyze results, and create reports.
Exam investment: $425
Fortinet
3 certificationsNSE 5 in Security Operations
ProfessionalPracticeFCP_FAZ_AN-7.6
FortiOSSecurity OperationsIncident Response
The Fortinet NSE 5 in Security Operations certification validates the skills and knowledge of security professionals in configuring, managing, and monitoring Fortinet security solutions.
Exam investment: $200
NSE 4 FortiOS
ProfessionalPracticeFCP_FGT_AD-7.6
Deployment and system configurationFirewall policies and authenticationContent inspection
The NSE 4 FortiOS certification validates the ability to configure, operate, and administer FortiGate devices to secure networks and applications.
Exam investment: $200
NSE 6 in Secure Networking
ProfessionalPracticeFCP_FMG_AD-7.6
network securityfirewall managementVPN configuration
The Fortinet NSE 6 in Secure Networking certification validates an individual's ability to design, implement, and manage secure network infrastructures using Fortinet solutions.
Exam investment: $200
Microsoft
3 certificationsCybersecurity Architect Expert (SC-100)
ExpertPracticeSC-100
Designing Zero Trust strategiesEvaluating security postureDesigning security operations
The Microsoft Certified: Cybersecurity Architect Expert validates your skills in designing and maintaining a secure computing environment.
Exam investment: $165
Security, Compliance, and Identity Fundamentals (SC-900)
EntryPracticeSC-900
Security FundamentalsCompliance and GovernanceIdentity and Access Management
The Microsoft Certified: Security, Compliance, and Identity Fundamentals certification validates a candidate's understanding of security, compliance, and identity concepts, as well as their ability to identify and mitigate security threats.
Exam investment: $99
Identity and Access Administrator Associate (SC-300)
AssociatePracticeSC-300
Identity and access managementAzure Active DirectoryConditional Access
The Microsoft Certified: Identity and Access Administrator Associate validates the skills to design, implement, and manage identity and access management systems, including identity protection, access management, and identity governance.
Exam investment: $165
Linux
1 certificationSecurity Essentials
EntryLabsPractice020-100
Security ConceptsEncryptionDevice and Storage Security
The Linux Professional Institute Security Essentials certificate covers preliminary knowledge across important fields of IT security, with a focus on protecting data, devices, networks, and identity.
Exam investment: $120
AWS
1 certificationAWS Certified Security – Specialty
SpecialistPracticeSCS-C03
Incident responseLogging and monitoringInfrastructure security
The AWS Certified Security – Specialty certification validates your skills and knowledge in designing and implementing secure applications and systems on the AWS platform.
Exam investment: $300
OffSec
2 certificationsKali Linux Certified Professional (KLCP)
ProfessionalPracticePEN-103
Kali Linux operating systemBasic Linux usageDebian package management
PEN-103 is a beginner-level course and study guide for the Kali Linux Certified Professional (KLCP) certification exam.
Exam investment: $150
Offensive Security Certified Professional (OSCP)
ProfessionalLabsPracticePEN-200
Enumeration and information gatheringVulnerability scanning and assessmentEncryption and cryptography
PEN-200 is OffSec’s hands-on ethical hacking and penetration testing certification course for aspiring penetration testers and security professionals.
Exam investment: $1,699
ISC2
2 certificationsCISSP – Certified Information Systems Security Professional
ProfessionalPracticeCISSP
Security and Risk ManagementAsset SecuritySecurity Architecture and Engineering
CISSP validates an information security professional’s deep technical and managerial knowledge to design, engineer and manage an organization’s overall security posture.
Exam investment: $749
SSCP – Systems Security Certified Practitioner
AssociateLabsPracticeSSCP
Security Concepts and PracticesAccess ControlsRisk Identification
The SSCP is designed for practitioners with proven technical skills and practical, hands-on security knowledge in operational IT roles.
Exam investment: $249
ISACA
2 certificationsCISA – Certified Information Systems Auditor
ProfessionalPracticeCISA
Information Systems AuditingGovernance and Management of ITInformation Systems Acquisition
The ISACA CISA certification validates an individual's ability to audit, control, and monitor information systems, and is designed for IT professionals with experience in auditing, risk management, and control.
Exam investment: $575 for ISACA members, $760 for non-members
CRISC – Certified in Risk and Information Systems Control
ProfessionalPracticeCRISC
Risk IdentificationRisk AssessmentRisk Response and Mitigation
The Certified in Risk and Information Systems Control (CRISC) certification validates an IT professional's ability to identify and manage risk, design and implement information system controls, and maintain ongoing monitoring and reporting of IT risk.
Exam investment: $575 for ISACA members, $760 for non-members
Cisco
2 certificationsCCNA Cybersecurity
AssociateLabsPractice200-201 CCNACBR
Security monitoringNetwork intrusion analysisSecurity policies and procedures
The CCNA Cybersecurity certification validates the skills and knowledge required to detect and respond to cybersecurity threats, and is ideal for security analysts, incident responders, and security engineers who want to demonstrate their skills in threat detection, analysis, and response.
Exam investment: $300
CCST Cybersecurity
EntryLabsPractice100-160
Network securityThreat intelligenceIncident response
The Cisco Certified Support Technician (CCST) Cybersecurity certification is designed to validate foundational skills in cybersecurity.
Exam investment: $125
Splunk
3 certificationsSplunk Certified Cybersecurity Defense Analyst
ProfessionalLabsPracticeSPLK-5001
Security Operations Center RolesSIEM Best PracticesThreat Hunting With Splunk
SPLK-5001 validates that a security analyst can run day-to-day SOC work inside Splunk: triaging alerts with SPL, hunting for adversary behavior, and building investigations on Enterprise Security correlation searches, risk-based alerting, and asset and identity frameworks.
Exam investment: $130
Splunk Core Certified Power User
EntryLabsPracticeSPLK-1002
Searching and reportingSPL commandsWorkflow actions
The Splunk Core Certified Power User certification validates entry-level power user skills for Splunk Enterprise and Splunk Cloud platform software.
Exam investment: $130
Splunk Core Certified User
EntryLabsPracticeSPLK-1001
Perform searchesUse fields and lookupsCreate alerts
Splunk Core Certified User is an entry-level certification for demonstrating foundational understanding of Splunk Enterprise and Splunk Cloud.
Exam investment: $130
Decision aid
First security cert: how Sec+, CC, and SSCP compare
The single most-asked question from IT directors building a security team: which entry-level cert should new hires earn first? Here's how the three candidates compare on scope, level, and exam investment.
| Certification | Best for | Level | Exam |
|---|---|---|---|
Security+ | The default vendor-neutral baseline — strongest market recognition, satisfies DoD 8570 IAT II, broadest coverage of threats and controls. | Entry / Associate | $404 |
CC – Certified in Cybersecurity | Lowest-friction on-ramp for career-changers and IT generalists rotating into security. Free exam vouchers via ISC2's One Million CC initiative. | Entry | Free (ISC2 1M CC) |
SSCP – Systems Security Certified Practitioner | Hands-on operators with 1+ year experience — sysadmins, network admins, and SOC analysts who want a more technical baseline than Security+. | Entry / Associate | $249 |
CCST Cybersecurity | Brand-new technicians without IT experience — the shortest on-ramp before the team commits to Security+ or the CCNA Cybersecurity track. | Entry | $125 |
Security+
The default vendor-neutral baseline — strongest market recognition, satisfies DoD 8570 IAT II, broadest coverage of threats and controls.
- Level
- Entry / Associate
- Exam
- $404
CC – Certified in Cybersecurity
Lowest-friction on-ramp for career-changers and IT generalists rotating into security. Free exam vouchers via ISC2's One Million CC initiative.
- Level
- Entry
- Exam
- Free (ISC2 1M CC)
SSCP – Systems Security Certified Practitioner
Hands-on operators with 1+ year experience — sysadmins, network admins, and SOC analysts who want a more technical baseline than Security+.
- Level
- Entry / Associate
- Exam
- $249
CCST Cybersecurity
Brand-new technicians without IT experience — the shortest on-ramp before the team commits to Security+ or the CCNA Cybersecurity track.
- Level
- Entry
- Exam
- $125
Hands-on Cybersecurity practice
Human-led training is the point: engineers practice real skills with expert guidance, not just video playback.
Why CBT Nuggets
How CBT Nuggets is different for Cybersecurity teams
The platform features IT directors comparing training platforms ask about most often.
Customer outcome
Documented security capability across your team
Compliance-sensitive teams use CBT Nuggets to document assigned cert-prep paths, per-learner completions, and hours of training. That's the operational answer when an auditor asks 'how do you know your team is qualified?' — and it's the same reporting your VP of IT can hand a board.
Defensible coverage
Documented capability auditors and leadership look for
Taught by IT professionals
Cybersecurity training your team learns from
Built and taught by engineers with decades of experience running real-world IT infrastructure — not crowdsourced contributors.
Bob Salmans
Cybersecurity & Governance, Risk, and Compliance (GRC)
Erik Choron
Offensive Security & Security Operations
Keith Barker
Networking & Network Security
Team outcome
Audit-ready training visibility
Manager reporting gives IT leaders a clearer view of assigned training, completion progress, and certification coverage.
What the team gets: Compliance-sensitive teams have training evidence before a review, renewal, or internal governance checkpoint.
Frequently asked questions about Cybersecurity training
Common questions IT directors ask when evaluating Cybersecurity training for their team.
Which cybersecurity cert should our team start with — Sec+, CC, or SSCP?
For most teams the answer is CompTIA Security+. It has the strongest market recognition, satisfies DoD 8570 IAT II, and covers the broadest threat-and-controls baseline. Use ISC2's CC for career-changers and IT generalists rotating into security (the exam is free under the One Million CC program). Use SSCP when your hires already have a year of hands-on operator experience and want a more technical baseline. Use CCST Cybersecurity for brand-new technicians who need an even gentler on-ramp before Security+.
How do we show leadership our security team's training coverage?
CBT Nuggets gives team admins a reporting surface showing assigned training, completion, and skill coverage by team member. For board updates and compliance conversations, that becomes the documented answer to 'how do you know your team is qualified to defend the environment?' — assigned-vs-completed paths and per-learner completion evidence instead of a spreadsheet your team rebuilds every quarter.
Do you cover all the major security certifications, or just CompTIA?
Major paths across vendors: CompTIA (Security+, CySA+, Pentest+, SecurityX), ISC2 (CC, SSCP, CCSP), ISACA (CISA, CISM, CRISC), Microsoft (SC-900, SC-200, SC-300, SC-100; AZ-500 retired on 31 August 2026), Cisco (CCST Cybersecurity, CCNA Cybersecurity, CCNP Security), AWS (Security Specialty), Fortinet (FCP/FCSS), Linux Professional Institute (Security Essentials), and offensive-security paths from OffSec (OSCP, Kali Linux Certified Professional). CISSP-aligned domain knowledge is covered through CCSP and the broader ISC2 path; we don't currently offer a dedicated CISSP exam-prep course.
How long does the team need to prep for CISM, CISA, or CCSP?
Most teams budget 3–5 months from a senior security engineer's start date to a CISM, CISA, or CCSP attempt. All three are senior-bench credentials with experience requirements (5 years for CISM and CISA, 5 years for CCSP) — they're worth scheduling around your existing audit, headcount, and on-call calendar so the prep doesn't collide with peak operational load.
Can our team prep for cybersecurity exams without an existing lab environment?
Yes. Hands-on labs in the pentesting (PEN-200, PenTest+), Cisco security (SCOR, ISE), Splunk, and CySA+ paths run in the browser without your team standing up infrastructure.
Do you handle cert renewals and CPE tracking?
CBT Nuggets training counts toward CPE for the major security certifications (CISM, CISA, CCSP, CRISC, and others). Team admins can assign refresh paths as expirations approach and pull a per-engineer report of training completed during the renewal window — the same record your team would otherwise maintain in a spreadsheet.
Is offensive-security training (OSCP, Pentest+) covered?
Yes — OffSec OSCP/PEN-200, OffSec Kali Linux Certified Professional (PEN-103), and CompTIA Pentest+ are all on the cybersecurity path. These are typically pursued by red-team members or by SOC analysts moving into adversarial-emulation work; they pair well with CySA+ for the broader detection-and-response baseline.