Mid path
Security Testing
Find and prove weaknesses before an adversary does, then communicate them so they actually get fixed.
What the work involves
- Scope engagements and agree rules of engagement
- Execute tests without exceeding authorisation
- Prove impact with reproducible evidence
- Write findings decision-makers can act on
Core competencies
iSecPath tracks these competencies individually as you learn, so your roadmap shows the gap rather than a single overall score.
Certification mapping
iSecPath Recommended PathThis sequence reflects iSecPath's learning-path logic. It is not a set of official prerequisites — "Prerequisite" appears only where the certification provider authoritatively requires it.
ISC2 Certified in Cybersecurity (CC)
Required exam: CC
Free groundwork before any offensive study.
iSecPath recommends this step in this path. Not a provider requirement.
EC-Council Certified Ethical Hacker (CEH)
Required exam: 312-50
Broad offensive methodology coverage. EC-Council requires official training or an eligibility application.
iSecPath recommends this step in this path. Not a provider requirement.
CompTIA Cybersecurity Analyst (CySA+)
Required exam: CS0-003
Defensive analytics context that makes findings land better.
Adds adjacent depth alongside the main sequence.
iSecPath sells learning access only. The external certification exam, exam registration, exam fee and the provider's eligibility requirements are separate and are not included. Purchasing iSecPath does not grant a certification.