// Cyber Security Roadmap
Step by step guide to becoming a Cyber Security Expert in 2026

Follow this interactive roadmap โ€” click any topic to learn more about it. Based on the globally recognized roadmap.sh cybersecurity path, adapted and curated by BEN SEC.

Fundamentals
Core Skills
Networking
Security Skills
Advanced / Cloud
Certifications
๐Ÿ” Cyber Security Expert
01 โ€” Fundamental IT Skills
๐Ÿ–ฅComputer Hardware Components
๐Ÿ”ŒConnection Types & Functions
๐Ÿ”งOS-Independent Troubleshooting
๐Ÿ“ฆBasics of Popular Suites
๐ŸŒBasics of Computer Networking
๐ŸšฉCTFs (Capture The Flag)
Popular Suites & Office Tools
๐Ÿ“งGoogle Suite
๐Ÿ’ผMS Office Suite
โ˜๏ธiCloud
CTF Platforms
๐ŸŽฏTryHackMe
โš”๏ธHackTheBox
๐Ÿ’ฃVulnHub
๐ŸpicoCTF
๐ŸŽ„SANS Holiday Hack
02 โ€” Operating Systems
๐ŸชŸWindows
๐ŸงLinux
๐ŸŽMacOS
Learn for Each OS
โš™๏ธInstallation & Configuration
๐Ÿ’ปNavigating GUI and CLI
๐Ÿ”‘Understand Permissions
๐Ÿ“ฅInstalling Software & Apps
๐Ÿ“Performing CRUD on Files
โŒจ๏ธCommon Commands
03 โ€” Networking Knowledge
๐Ÿ“กOSI Model
๐Ÿ”—Common Protocols & Uses
๐ŸšชCommon Ports & Uses
๐Ÿ”SSL and TLS Basics
๐Ÿ—„Basics of NAS and SAN
๐ŸงฎBasics of Subnetting
IP Terminology
๐ŸŒPublic vs Private IP
๐Ÿ”Localhost / Loopback
๐Ÿ“ŠCIDR / Subnet Mask
๐ŸšฆDefault Gateway
Network Terminology
VLAN
DMZ
ARP
VM
DHCP
DNS
NAT
VPN
Network Protocols
SSH
RDP
FTP / SFTP
HTTP / HTTPS
SSL / TLS
Virtualization
๐Ÿ“ฆVMware
๐Ÿ“ฆVirtualBox
๐ŸงฑHypervisor Types
Troubleshooting Tools
nmap
nslookup
ping / arp
tracert
ipconfig
netstat
tcpdump
dig
04 โ€” Security Skills & Knowledge
๐Ÿ”บCIA Triad
๐Ÿ“ฒMFA & 2FA
โ›“Cyber Kill Chain
๐ŸšซZero Trust Core Concepts
๐Ÿ•ต๏ธThreat Intel & OSINT
๐Ÿ”Vulnerability Management
๐Ÿ›กBasics of IDS and IPS
๐ŸŸฆ๐ŸŸฅBlue / Red / Purple Teams
๐Ÿ”ฌBasics of Forensics
๐Ÿ’‰Penetration Testing Rules
๐ŸŒOWASP Top 10
๐Ÿฆ How Malware Works & Types
โฌ†๏ธPrivilege Escalation
๐ŸฏHoneypots
๐ŸšจIncident Response Process
Attack Types
๐ŸŽฃPhishing / Whaling / Smishing
๐ŸŽญSocial Engineering
๐Ÿ’ฅDoS / DDoS
๐Ÿ‘คMITM Attack
๐Ÿ’‰SQL Injection / XSS / CSRF
๐Ÿ”จBrute Force / Password Spray
๐Ÿ“คBuffer Overflow
โ˜ ๏ธDNS Poisoning / Evil Twin
๐Ÿ’€Zero Day Attacks
Cryptography Basics
Salting & Hashing
PKI
Public vs Private Keys
Obfuscation
Key Exchange
Frameworks & Standards
MITRE ATT&CK
NIST Framework
ISO 27001
CIS Controls
Security Tools & Monitoring
๐Ÿ“ŠSIEM / SOAR
๐Ÿ›กEDR / DLP / Antivirus
๐Ÿ”ฅFirewall & Next-Gen Firewall
๐Ÿ“‹Event Logs / Syslogs / Netflow
๐ŸฆˆWireshark / Packet Capture
๐Ÿ‰Kali Linux / ParrotOS
05 โ€” Cloud Skills & Knowledge
โ˜๏ธSecurity in the Cloud
๐Ÿ“œInfrastructure as Code
โšกServerless Security
Cloud Services & Models
SaaS / PaaS / IaaS
Public / Private / Hybrid
โ˜๏ธAWS / GCP / Azure
S3 / Google Drive / OneDrive
Cloud vs On-Premises
Basics of Cloud Deployment
06 โ€” Programming Skills
๐ŸPython
๐Ÿ’ปBash / PowerShell
๐ŸนGo
๐ŸŸจJavaScript
07 โ€” Certifications
๐ŸŸข Beginner Certifications
๐ŸŒฟCompTIA A+
๐ŸŒฟCompTIA Network+
๐ŸŒฟCompTIA Linux+
๐ŸŒฟCCNA
๐Ÿ†“ISC2 CC (Free!)
๐Ÿ†“Google Cybersecurity Cert
๐ŸŸก Intermediate Certifications
๐Ÿ”CompTIA Security+
๐Ÿ”CompTIA CySA+
๐Ÿ•นeJPT
๐Ÿ”ด Advanced Certifications
โš”๏ธCEH โ€” Certified Ethical Hacker
๐ŸนGPEN / GWAPT (GIAC)
๐Ÿ’ฃOSCP โ€” OffSec Certified Pro
๐ŸŽฏCREST
๐Ÿ›CISA
๐Ÿ›กGSEC (GIAC Security Essentials)
๐ŸŸฃ Expert Certifications
๐Ÿ‘‘CISSP
๐ŸŒŒCISM (ISACA)
๐Ÿง CompTIA CASP+
๐Ÿ† Cyber Security Expert โ€” Keep Learning