All roadmapsRoadmap · 2026

Cybersecurity Roadmap 2026

The complete Cybersecurity roadmap in 7 stages — Foundational IT Skills, Core Cybersecurity Concepts, Security Tools and Technologies, Defensive Security, Offensive Security (Ethical Hacking), Specializations and Advanced Topics and Job Preparation and Projects. Open any stage in the mind map to see the topics and tools inside it, or download the whole roadmap as an image.

Mind map

Cybersecurity Roadmap

Click a topic to open or close it · drag to move · scroll to zoom · the download includes every topic, fully expanded

Cybersecurity roadmap, stage by stage

01Foundational IT Skills
- Computer Networking
  - TCP/IP Model
  - OSI Model
  - IP Addressing and Subnetting
  - Common Ports and Protocols
- Operating Systems
  - Linux Fundamentals
  - Windows Fundamentals
  - Command Line Interface (CLI)
- Basic Hardware Concepts
  - CPU, RAM, Storage
  - Network Interface Cards (NICs)
02Core Cybersecurity Concepts
- CIA Triad
  - Confidentiality
  - Integrity
  - Availability
- Threats and Vulnerabilities
  - Malware Types
  - Common Attack Vectors
  - Social Engineering
- Cryptography Basics
  - Symmetric Encryption
  - Asymmetric Encryption
  - Hashing
03Security Tools and Technologies
- Firewalls
  - Packet Filtering
  - Stateful Inspection
  - Next-Generation Firewalls (NGFW)
- Intrusion Detection/Prevention Systems (IDS/IPS)

Learn the Python, data and AI parts of this roadmap with free video courses, notes and a certificate.

Browse free courses →

More roadmaps

Signature-based Detection
Anomaly-based Detection

Antivirus and Endpoint Security

Signature-based Scanning
Behavioral Analysis

Virtual Private Networks (VPNs)

IPsec
SSL/TLS VPNs

04Defensive Security

Security Monitoring
- Log Analysis
- SIEM Systems (e.g., Splunk, ELK)
- Network Traffic Analysis
Incident Response
- Incident Triage
- Containment Strategies
- Eradication and Recovery
Vulnerability Management
- Vulnerability Scanning
- Patch Management

05Offensive Security (Ethical Hacking)

Reconnaissance
- OSINT Techniques
- Network Scanning (Nmap)
Exploitation
- Metasploit Framework
- Web Application Exploits
- Password Cracking
Post-Exploitation
- Privilege Escalation
- Lateral Movement

06Specializations and Advanced Topics

Cloud Security
- AWS Security
- Azure Security
- GCP Security
Application Security (AppSec)
- OWASP Top 10
- Secure Coding Practices
- SAST/DAST Tools
Digital Forensics
- Disk Forensics
- Memory Forensics
- Network Forensics

07Job Preparation and Projects

Build a Portfolio
- Capture The Flag (CTF) Challenges
- Home Lab Setup
- Personal Security Projects
Resume Building
- Highlight Skills and Projects
- Tailor to Job Descriptions
Interview Practice
- Technical Questions
- Behavioral Questions
- Scenario-based Problems
Networking and Certifications
- Industry Events
- Entry-Level Certs (e.g., CompTIA Security+)