Choose the certification context for shared learning, mock exams, study planning, and materials.
CompTIA · Fundamentals
CompTIA Tech+ (formerly ITF+) is a broad introduction to IT: hardware, software, networking, security basics, and troubleshooting. It's the starting point of Module 1, building the foundational vocabulary and concepts every later certification builds on, with no prerequisites.
CompTIA · Core
CompTIA Network+ validates the networking fundamentals every IT professional needs: topologies, protocols, cloud concepts, security, and troubleshooting. It's an optional, deeper follow-up to Tech+ for anyone who wants a stronger networking foundation before moving on.
CompTIA · Core
CompTIA Security+ is the industry-standard entry-level cybersecurity certification, covering threats, attacks, architecture, implementation, and operations. It's vendor-neutral and widely recognised by employers, often the first professional cert a cybersecurity hire is expected to hold.
TryHackMe · Subscription
Hands-on cyber security training in the browser, with guided paths, labs and challenges. Cybersteps covers a TryHackMe Premium subscription; here you find what it includes and can request or extend it.
Select certificationMicrosoft · Fundamentals
Azure Fundamentals is Microsoft's entry point into cloud computing, covering core Azure concepts, services, pricing, and governance. No prior Azure experience is needed, making it the natural first step before any role-based Azure certification.
Microsoft · Fundamentals
SC-900 introduces Microsoft's security, compliance, and identity portfolio: Entra ID, Defender, Purview, and the Zero Trust model. It's a fundamentals-level cert for anyone starting out in a security or compliance role within the Microsoft ecosystem.
Microsoft · Associate
SC-200 certifies the skills of a Microsoft security operations analyst: threat detection, investigation, and response using Microsoft Sentinel, Defender XDR, and Defender for Cloud. It targets SOC analysts and incident responders already working in a Microsoft security stack. The exam mixes case studies with standalone questions.
Microsoft · Associate
SC-300 covers designing, implementing, and operating identity and access solutions with Microsoft Entra ID: authentication, authorization, governance, and hybrid identity. It's built for identity administrators responsible for securing an organisation's Microsoft 365 and Azure tenant. Every answer is verified against current Microsoft Learn.
BSI · Professional
Der IT-Grundschutz-Praktiker ist ein Nachweis des BSI für die praktische Umsetzung von IT-Grundschutz nach dem BSI-Standard 200-x. Er richtet sich an IT-Sicherheitsbeauftragte und Berater:innen, die Institutionen bei Strukturanalyse, Schutzbedarfsfeststellung und Basis-Absicherung unterstützen.
Microsoft · Associate
SC-500 is Microsoft's newest security engineer certification, covering security across cloud workloads and, increasingly, AI systems: Copilot, agents, and Microsoft Foundry alongside traditional cloud posture management (Entra Agent ID, Copilot Studio, Foundry guardrails, Purview DSPM). It targets security engineers responsible for an organisation's Azure and AI footprint end to end. Every answer is verified against current Microsoft Learn.
Microsoft · Associate
AZ-104 covers the day-to-day administration of Microsoft Azure: Microsoft Entra users and groups, access and governance, storage, compute, virtual networking, and monitoring and backup. It targets administrators who implement, manage, and monitor an organisation's Azure environment. 400 practice questions across 5 domains, 15 study modules and 218 flashcards, every answer verified against current Microsoft Learn.
PECB · Professional
International standard for Information Security Management Systems (ISMS). Covers requirements for establishing, implementing, maintaining, and continually improving an organisation's information security programme.
PECB · Professional
Plan, implement, operate and improve an Information Security Management System (ISMS) based on ISO/IEC 27001:2022, from project initiation and risk management to the certification audit.
Hack The Box · Professional
Blue-team certification for SOC analysts, covering hands-on incident handling, log and endpoint analysis, SIEM and threat hunting. Studied on HTB Academy; here you find the overview and can request a Hack The Box voucher.
Select certificationCompTIA · Professional
CompTIA CySA+ (CS0-004) is an intermediate certification for security analysts, covering security operations, vulnerability management, incident response and reporting. It's vendor-neutral, builds on Security+ and focuses on analysing logs, tool output and threat data in a SOC.
Hack The Box · Professional
Red-team certification for penetration testers, covering the full engagement lifecycle from enumeration through Active Directory compromise to a commercial-grade report. Studied on HTB Academy; here you find the overview and can request a Hack The Box voucher.
Select certificationHack The Box · Professional
Offensive AI security certification, covering attacks against LLMs and AI-integrated applications: prompt injection, model manipulation, AI red-teaming methodology and a commercial-grade report. Studied on HTB Academy; here you find the overview and can request a Hack The Box voucher.
Select certificationIHK · Professional
Der Cyber Security Advisor (IHK) ist eine Weiterbildung der IHK für IT-Sicherheitsberatung im Mittelstand: von der Risikoanalyse über technische und organisatorische Maßnahmen bis zur Kommunikation mit Entscheider:innen. Er richtet sich an Berater:innen und IT-Verantwortliche, die Unternehmen praxisnah zu Informationssicherheit beraten.
Propose another certification. If we approve it, Cybersteps covers the cost.
Request funding
