Learn → practise → interview → earn
Not a generic syllabus dump. Pick a lane, climb the levels, ship labs, then walk into interviews with a customised kit. 42 CyberPath levels · 12 role maps.
Each lane links courses + levels + a downloadable interview kit (separate fee).
Entry–mid analyst roles
Triage alerts, write tickets, talk SIEM — hire-ready in months with labs + kit.
Bounties + AppSec junior
Web vulns, reports, ethical scope — monetise skills legally with programs + interviews.
Junior pentester track
Method + report language employers expect. Pair courses with the pentest interview kit.
Cloud sec / DevSecOps path
IAM, logging, hardening — higher ticket roles after fundamentals.
Climb Foundation → Core → Specialisation. Expand a stage only when you need the full level list.
Vocabulary + OS + network — without this, interviews fail on basics.
Level 1
What cybersecurity is, the CIA triad, threat actors, and how the industry is organized.
Level 2
Hardware, operating systems, processes, memory, file systems and virtualization.
Level 3
TCP/IP, OSI, IP addressing, ports, DNS, HTTP and how data moves across networks.
Level 4
Command line, users, permissions, services, logs and the registry on Linux and Windows.
Level 5
Python, Bash and PowerShell scripting for automation, parsing and tool building.
Security domains that show up in every junior JD.
Attack + defend literacy employers expect on day one.
Level 9
OWASP Top 10, injection, XSS, access control flaws, SSRF and secure coding.
Level 10
OS hardening, privilege escalation concepts, patching, EDR and endpoint security.
Level 11
Domains, Kerberos, NTLM, Group Policy, AD attack paths and AD hardening.
Level 12
Methodology: reconnaissance, scanning, enumeration, exploitation and reporting — legally.
Blue-team depth — SOC, IR, detections that pay.
Level 14
Evidence acquisition, disk, memory and network forensics, timelines and chain of custody.
Level 15
IR lifecycle: preparation, detection, containment, eradication, recovery and lessons learned.
Level 16
SIEM, log analysis, detection engineering, alert triage and SOC workflows.
Pick a lane that pays — cloud, DFIR, AppSec, research.
Level 18
IAM, shared responsibility, cloud misconfigurations, logging and posture management in AWS, Azure and GCP.
Level 19
Android and iOS architecture, OWASP MASVS, app analysis and secure storage.
Level 20
Professional, scoped engagements across network, web and AD with high-quality reporting.
Level 21
Adversary emulation, C2 concepts, OPSEC and objective-based operations.
Level 22
Defensive architecture, detection, hunting, hardening and resilience.
Level 23
Intelligence lifecycle, IOCs vs TTPs, ATT&CK mapping and intel sharing.
Level 24
Threat modeling, SAST, DAST, SCA, secrets scanning and secure CI/CD.
Level 28
REST, GraphQL, OAuth/OIDC, JWT hardening, rate limits, and API gateway patterns.
Level 29
IAM, PAM, federation, SAML/OIDC, MFA, Zero Trust identity, secrets and service accounts.
Level 30
Deep CI/CD, IaC scanning, SAST/DAST/SCA, SBOM, secrets detection, supply-chain gates.
Level 31
Image scanning, K8s RBAC, network policies, runtime detection, admission control.
Level 32
Wi‑Fi architecture, WPA2/WPA3, wireless auth, Bluetooth/BLE, RFID/NFC basics.
Level 33
IoT/embedded, firmware, ICS/SCADA, OT segmentation, critical infrastructure.
Level 34
GRC, ISO 27001/27002, SOC 2, NIST CSF/RMF, CIS, PCI, GDPR, Indian DPDP Act.
Level 35
STRIDE, attack surface, secure SDLC, design reviews, control validation.
Level 36
Sigma, ATT&CK mapping, hunting, purple team loops, SOAR concepts.
Level 37
Enterprise-scale reference architectures, Zero Trust design, documentation.
Level 38
LLM apps, prompt injection, RAG, vector DBs, OWASP LLM Top 10, AI governance.
Level 39
AI agents, tool permissions, multi-agent threats, OWASP agentic Top 10.
Level 40
Dependencies, SBOM, signing, provenance, dependency confusion, build pipeline integrity.
Level 41
Adversary emulation, purple exercises, detection improvement loops.
Specialist depth for mid/senior offers and hard interviews.
Level 25
Memory corruption, buffer overflows, mitigations (ASLR/DEP), and exploit development in labs.
Level 26
Zero Trust, secure network design, identity architecture and risk-based design.