Foundational
Core concepts and baseline workflows. Typical entry level.
How Certifications Are Grouped
Certifications are grouped using multiple dimensions so you can browse by domain, specialization, role function, and expected depth. A single certification can appear in more than one sub-area or role group.
Primary Domains
Communication and Network Security
IAM
Security Architecture and Engineering
Asset Security
Security and Risk Management
Security Assessment and Testing
Software Security
Security Operations
Sub-areas
Domain-level specializations used in chart and mind map.
- Cloud/SysOps: cloud platform hardening and operational security.
- *nix: Linux/Unix security administration and operations.
- ICS/IoT: industrial, OT, and embedded/IoT environments.
- GRC: governance, risk, compliance, assurance, and audit alignment.
- Forensics: digital evidence collection, triage, and analysis.
- Incident Handling: detection, response, containment, and recovery workflows.
- Penetration Testing: offensive assessment and adversary simulation.
- Exploitation: exploit development and advanced offensive engineering.
Role Groups
Network
Asset
Engineer
Management
Testing
Software
Blue Team Ops
Red Team Ops
IAM
Skill Levels
Intermediate
Applied knowledge with practical operation in standard environments.
Advanced
Deeper practitioner-level work for complex cases and architecture decisions.
Expert
High-complexity specialist level requiring broad context and autonomy.