Cybersecurity Certifications

Compare 44 security certifications across GRC, offensive security, network defence, IAM and forensics, with real search demand, exam formats and practice question counts.

ProvidersEC-Council, CREST, CompTIA, OffSec, IAPP, ISACA, ISC2, APMG International, Microsoft, Amazon Web Services, Arista, Cisco, Cloud Security Alliance, Check Point, CrowdStrike, Fortinet, HPE Aruba, Oracle, Google Cloud, Splunk, Zscaler, CyberArk, HashiCorp, Salesforce
LevelsAssociate, Expert, Professional, Foundation
Total60 certifications
Practice questions15,756
Avg. exam length159 min
Avg. passing score72%

Cybersecurity certifications, compared

Security has more certifications than any other area of IT, and the numbers here explain why: forty-four of them, spanning governance and risk, offensive testing, network defence, identity, forensics and cloud security. They also explain why choosing is hard — the sheer volume of search demand is concentrated in a handful of entry-level credentials, while the credentials that carry the most professional weight are barely searched for at all.

The market splits into two different games

There is a sharp dividing line inside this category, and crossing it badly is the most expensive mistake available here. The first group is broad, employer-recognised and easy to search for: general security fundamentals, networking foundations, and the ethics certification that opens the offensive track. The second group is narrow, technically deep, and far less searched for — but it is the group that hiring managers in senior security roles actually respect.

The demand table below makes this visible. The highest-volume credential in the category has six times the search demand of the most respected one in the same list. That is not a contradiction. It means the market is made of two different populations: a large one entering the field, and a small one already inside it.

Governance versus operations versus offensive

Security roles split cleanly into three families, and the certifications split with them. Governance and risk management certifications cover the managerial side: frameworks, audit, control design, incident governance. Operations certifications cover the day-to-day: detection engineering, network defence, cloud security posture. Offensive certifications cover the craft of breaking into systems, and they are the ones with hands-on performance exams rather than multiple choice.

Which family you should target depends less on taste than on the job description you want next. Read the responsibilities in a posting you would actually apply for, and pick the family that matches them.

What to check before you register

Security credentials vary enormously in how they validate you. A multiple-choice exam measures preparation. A performance-based exam measures whether you can do the job. Both are legitimate, but they are not interchangeable, and a hiring manager reads the difference. Every certification on this page shows its format, and Certilum's practice engine scores you per domain so you can see where you would actually lose points.

How to choose a security certification

Security certifications have the highest failure rate of any category, and almost always for the same reason: people pick a credential that does not match the job they want. Work through this in order.

  1. 1

    Establish the fundamentals first

    If your role involves networks, endpoints or identity, those fundamentals are assumed knowledge everywhere else in this category. Certifications that assume them will not teach you what you are missing.

  2. 2

    Match the family to the job title

    Governance, operations and offensive security lead to different roles with different day-to-day work. Pick the family whose responsibilities appear verbatim in the job postings you want.

  3. 3

    Check the experience requirement, not just the exam

    Several credentials in this category require a minimum number of years in specific domains before the certificate is issued. You can sit the exam earlier, but you cannot hold the credential — and employers check the credential.

  4. 4

    Validate your weak domain, not your strong one

    Most candidates study what they already know. Use the per-domain scoring to find the two domains costing you the most points and study only those. The domain weights are not uniform, so the same number of lost points costs very differently depending on where they fall.

The most searched certifications in Cybersecurity

Estimated monthly searches for the keyword each certification competes for, ordered by demand. Total across this category: approximately 504,900 searches a month. Demand is not the same as difficulty, but it is a good proxy for how many people are considering each exam.

CertificationProviderLevelSearches / moFormat
CompTIA Security+comptia security+ certificationCompTIAProfessional75,00090 q · 90 min · 75%Practice
Cisco Certified Network Associatecisco certified network associate certificationCiscoAssociate55,000100 q · 120 min · 80%Practice
ISC2 CISSPisc2 cissp certificationISC2Expert40,000150 q · 180 min · 70%Practice
CompTIA Network+comptia network+ certificationCompTIAProfessional35,00090 q · 90 min · 80%Practice
ISACA CISMisaca cism certificationISACAProfessional18,000150 q · 240 min · 70%Practice
CompTIA PenTest+comptia pentest+ certificationCompTIAExpert15,00090 q · 165 min · 83%Practice
CompTIA CySA+comptia cysa+ certificationCompTIAExpert15,00085 q · 165 min · 83%Practice
ISC2 SSCPisc2 sscp certificationISC2Professional12,000125 q · 180 min · 70%Practice
ISC2 CCSPisc2 ccsp certificationISC2Professional12,000150 q · 240 min · 70%Practice
ISACA CRISCisaca crisc certificationISACAProfessional12,000150 q · 240 min · 65%Practice
AWS Certified Security – Specialtyaws certified security – specialty certificationAmazon Web ServicesProfessional9,00065 q · 170 min · 75%Practice
Certified Ethical Hacker v13certified ethical hacker v13 certificationEC-CouncilAssociate9,000125 q · 240 minPractice

Ethical Hacking9 certifications

Certified Ethical Hacker v13

Certified Ethical Hacker v13

EC-CouncilEC-Council

Master cutting-edge ethical hacking techniques with CEH v13, featuring advanced AI-driven threat detection and automated penetration testing skills for modern cybersecurity professionals.

125 Questions
CEH
240 min
Min Score 75
Certified Red Team Manager

Certified Red Team Manager

CRESTCREST

Master red team leadership with CREST, the globally trusted cyber security certification body. This advanced credential validates your ability to plan, manage, and execute complex adversarial simulation operations that drive real organizational resilience.

60 Questions
CCRTM
115 min
Min Score 66
Certified Red Team Specialist

Certified Red Team Specialist

CRESTCREST

Master offensive security techniques with the CREST Certified Red Team Specialist certification, validating your ability to lead advanced adversary simulations and penetration tests.

60 Questions
CCRTS
115 min
Min Score 66
Certified Tester - Application

Certified Tester - Application

CRESTCREST

Validate your application security skills with CREST's Certified Tester - Application. A globally recognized penetration testing certification.

150 Questions
CCT APP
115 min
Min Score 66
Certified Tester - Infrastructure

Certified Tester - Infrastructure

CRESTCREST

Validate infrastructure testing skills with CREST's Certified Tester Infrastructure certification for IT professionals.

60 Questions
CCT INF
115 min
Min Score 66
CompTIA PenTest+

CompTIA PenTest+

CompTIACompTIA

CompTIA PenTest+ validates offensive security skills in penetration testing and vulnerability management. This 90-question exam covers engagement planning, reconnaissance, vulnerability discovery, attack execution, and post-exploitation reporting for real-world professional cyber defense.

90 Questions
PT0-003
165 min
Min Score 83
Offensive Security Certified Professional

Offensive Security Certified Professional

OffSecOffSec

Master the art of penetration testing with the industry-standard OSCP certification, focusing on hands-on exploitation, vulnerability assessment, and advanced Active Directory attack methodologies.

20 Questions
OSCP
1425 min
Min Score 70
Practitioner Security Analyst

Practitioner Security Analyst

CRESTCREST

Validate your practical penetration testing and security analysis skills with the CREST Practitioner Security Analyst (CPSA) certification. This globally recognized credential is for professionals actively performing technical security assessments.

120 Questions
CPSA
120 min
Min Score 60
Registered Penetration Tester

Registered Penetration Tester

CRESTCREST

Master CREST Registered Penetration Tester with expert guidance. Validate your hands-on ethical hacking and red teaming skills.

120 Questions
CRT
150 min
Min Score 60

GRC12 certifications

Certified Information Privacy Manager

Certified Information Privacy Manager

IAPPIAPP

Master the operational implementation of privacy programs. The CIPM certification validates your ability to manage, maintain, and demonstrate compliance within a global privacy framework.

90 Questions
CIPM
150 min
Min Score 70
Certified Information Privacy Professional/US

Certified Information Privacy Professional/US

IAPPIAPP

Master the complex landscape of United States privacy laws, regulatory requirements, and data protection frameworks with the industry-leading CIPP/US certification from IAPP.

90 Questions
CIPP/US
90 min
Min Score 75
Certified Information Privacy Technologist

Certified Information Privacy Technologist

IAPPIAPP

Master the integration of privacy principles into the software development lifecycle and technical systems with the IAPP CIPT certification.

90 Questions
CIPT
150 min
Min Score 75
Certified Threat Intelligence Manager

Certified Threat Intelligence Manager

CRESTCREST

Elevate your cybersecurity career with the CREST Certified Threat Intelligence Manager (CCTIM), validating advanced skills in leading intelligence-led operations.

120 Questions
CCTIM
120 min
Min Score 70
CompTIA SecurityX

CompTIA SecurityX

CompTIACompTIA

CompTIA SecurityX is the industry leading advanced enterprise security certification, validating the skills to architect, engineer, and manage resilient hybrid cloud environments, implement Zero Trust, and lead security operations with a risk-based mindset.

90 Questions
CAS-005
165 min
Min Score 75
ISACA CDPSE

ISACA CDPSE

ISACAISACA

ISACA CDPSE validates technical privacy skills to design, build, and operate privacy solutions. It bridges governance, risk, data lifecycle, and privacy engineering for enterprise environments. This vendor-neutral credential demonstrates privacy compliance and data protection expertise.

120 Questions
CDPSE
210 min
Min Score 75
ISACA CGEIT

ISACA CGEIT

ISACAISACA

ISACA's CGEIT validates expertise in enterprise IT governance, covering strategic alignment, resource optimization, benefits realization, and risk management. Designed for experienced leaders, this credential demonstrates the ability to align IT value with enterprise objectives and meet board-level governance expectations.

150 Questions
CGEIT
240 min
Min Score 75
ISACA CISM

ISACA CISM

ISACAISACA

CISM is a prestigious certification for information security managers, focusing on governance, risk management, program development, and incident response to protect enterprise information assets.

150 Questions
CISM
240 min
Min Score 70
ISACA CRISC

ISACA CRISC

ISACAISACA

The ISACA CRISC certification validates your ability to identify and manage enterprise IT risk and implement resilient security controls. It demonstrates governance, risk analysis, and risk response expertise for IT professionals and business leaders.

150 Questions
CRISC
240 min
Min Score 65
ISC2 CISSP

ISC2 CISSP

ISC2ISC2

CISSP is the premier cybersecurity certification from ISC2 for experienced professionals, validating expertise in designing, implementing, and managing a world-class security program across eight domains, including risk management, cloud security, cryptography, and incident response.

150 Questions
CISSP
180 min
Min Score 70
NIST Cybersecurity Framework Foundation

NIST Cybersecurity Framework Foundation

APMG InternationalAPMG International

Master the foundational principles of the NIST Cybersecurity Framework for effective risk management and organizational resilience.

40 Questions
nist-cybersecurity-framework-foundation
40 min
Min Score 60
Registered Threat Intelligence Analyst

Registered Threat Intelligence Analyst

CRESTCREST

Master the collection, analysis, and dissemination of cyber threat intelligence with CREST's Registered Threat Intelligence Analyst certification.

120 Questions
CRTIA
180 min
Min Score 70

Network Defense31 certifications

Microsoft Certified: Cybersecurity Architect Expert

Microsoft Certified: Cybersecurity Architect Expert

MicrosoftMicrosoft

Master the art of designing zero trust architectures and advanced security strategies to protect enterprise assets across cloud, hybrid, and multi-cloud environments.

40 Questions
SC-100
120 min
Min Score 70
AWS Certified Security – Specialty

AWS Certified Security – Specialty

Amazon Web ServicesAmazon Web Services

Validate your ability to design and implement secure AWS solutions. This rigorous certification assesses deep knowledge of data protection, infrastructure security, and incident response.

65 Questions
SCS-C03
170 min
Min Score 75
Arista Network Detection & Response Specialist

Arista Network Detection & Response Specialist

AristaArista

Validate your expertise in Arista NDR (Awake Security). Master threat detection, investigation, and automated response to become a certified specialist in network detection and response.

45 Questions
ACE:NDR
90 min
Min Score 80
Azure Security Engineer Associate

Azure Security Engineer Associate

MicrosoftMicrosoft

Validate your skills in securing Azure workloads, identity, and access. This associate-level certification proves you can protect hybrid and cloud environments with Microsoft Defender for Cloud and Sentinel.

55 Questions
AZ-500
120 min
Min Score 70
CCNP Security

CCNP Security

CiscoCisco

Validate advanced security skills with Cisco CCNP Security. Master core security technologies and earn a top-tier networking certification.

100 Questions
350-701
120 min
Min Score 83
Certificate of Cloud Security Knowledge v5

Certificate of Cloud Security Knowledge v5

Cloud Security AllianceCloud Security Alliance

Master cloud security fundamentals and best practices with the industry-recognized CCSK v5, covering governance, data protection, and infrastructure security in multi-cloud environments.

60 Questions
CCSK
120 min
Min Score 80
Check Point Certified Security Administrator (CCSA) R82

Check Point Certified Security Administrator (CCSA) R82

Check PointCheck Point

Master Check Point R82 security management, gateway configuration, and policy implementation to secure enterprise networks with industry-leading threat prevention and VPN technologies.

100 Questions
156-215.82
90 min
Min Score 70
Cisco Certified CyberOps Professional

Cisco Certified CyberOps Professional

CiscoCisco

Master Cisco CCNP Cybersecurity. Validate advanced skills in security architecture, engineering, and core network security technologies for enterprise environments.

100 Questions
350-201
120 min
Min Score 83
Cisco Certified Cybersecurity Associate (CyberOps)

Cisco Certified Cybersecurity Associate (CyberOps)

CiscoCisco

Master Cisco CCNA Cybersecurity fundamentals: network security, access control, and threat defense for associate-level roles.

100 Questions
200-201
120 min
Min Score 83
Cisco Certified Network Associate

Cisco Certified Network Associate

CiscoCisco

Cisco CCNA validates foundational networking skills including IP connectivity, security, automation. Ideal for entry-level network engineers seeking industry-recognized certification.

100 Questions
200-301
120 min
Min Score 80
Cisco Enterprise Advanced Routing and Services (ENARSI)

Cisco Enterprise Advanced Routing and Services (ENARSI)

CiscoCisco

Validate advanced routing and services expertise with Cisco 300-410 ENARSI. This CCNP Enterprise concentration exam covers EIGRP, OSPF, BGP, VPNs, infrastructure security, and services for administering complex enterprise networks.

60 Questions
300-410
90 min
Min Score 82
CompTIA CySA+

CompTIA CySA+

CompTIACompTIA

Validate your cybersecurity analytics skills with CompTIA CySA+. Master threat detection, incident response, and vulnerability management to advance your career.

85 Questions
CS0-004
165 min
Min Score 83
CompTIA Network+

CompTIA Network+

CompTIACompTIA

CompTIA Network+ validates the essential networking skills needed to configure, manage, and troubleshoot networks. This vendor-neutral certification covers wired, wireless, cloud, and security, preparing IT professionals for entry-level network administration roles.

90 Questions
N10-009
90 min
Min Score 80
CompTIA Security+

CompTIA Security+

CompTIACompTIA

CompTIA Security+ validates essential cybersecurity skills for modern IT roles. This vendor-neutral certification covers threat mitigation, secure architecture, security operations, and governance, helping professionals protect networks, respond to incidents, and build resilient enterprise security programs.

90 Questions
SY0-701
90 min
Min Score 75
CrowdStrike Certified Falcon Practitioner

CrowdStrike Certified Falcon Practitioner

CrowdStrikeCrowdStrike

Validate your proficiency in the CrowdStrike Falcon platform, demonstrating essential skills in endpoint security, threat intelligence, and incident response capabilities.

60 Questions
CCFP
90 min
Min Score 70
Fortinet Certified Professional - FortiGate

Fortinet Certified Professional - FortiGate

FortinetFortinet

Master FortiGate security implementations, networking, and SD-WAN technologies to earn your Fortinet Certified Professional credential and validate advanced firewall management skills.

60 Questions
NSE4_FGT_AD-7.6
90 min
Min Score 70
Fortinet NSE 7 - Enterprise Firewall 7.6 Administrator

Fortinet NSE 7 - Enterprise Firewall 7.6 Administrator

FortinetFortinet

Master advanced FortiGate security operations, including complex routing, high availability, and enterprise-grade firewall policy management to secure large-scale network infrastructures.

35 Questions
FCSS_EFW_AD-7.6
120 min
Min Score 70
HPE Aruba Certified Professional - Campus Access

HPE Aruba Certified Professional - Campus Access

HPE ArubaHPE Aruba

Validate your expertise in designing, implementing, and managing Aruba campus access solutions, focusing on advanced wireless LAN technologies and robust network infrastructure for modern enterprise environments.

75 Questions
HPE7-A01
120 min
Min Score 65
ISC2 CCSP

ISC2 CCSP

ISC2ISC2

ISC2 CCSP is the premier cloud security certification for experienced professionals. It validates advanced knowledge in cloud data security, architecture, application security, operations, and compliance, proving the ability to secure cloud environments, reduce risk, and align security with business goals.

150 Questions
CCSP
240 min
Min Score 70
ISC2 Certified in Cybersecurity

ISC2 Certified in Cybersecurity

ISC2ISC2

Kickstart your cybersecurity career with ISC2 Certified in Cybersecurity, an entry-level credential validating foundational security principles, governance, and operational readiness.

120 Questions
CC
120 min
Min Score 70
ISC2 SSCP

ISC2 SSCP

ISC2ISC2

ISC2 SSCP validates hands-on security administration skills across access controls, network security, incident response, and risk monitoring. This globally recognized certification proves you can implement, operate, and protect critical information systems in modern enterprises.

125 Questions
SSCP
180 min
Min Score 70
Microsoft Certified: Azure Network Engineer Associate

Microsoft Certified: Azure Network Engineer Associate

MicrosoftMicrosoft

Master Azure networking by designing, implementing, and managing secure, scalable, and high-performance cloud connectivity solutions for enterprise-grade infrastructure and application delivery.

50 Questions
AZ-700
100 min
Min Score 70
Microsoft Certified: Security Operations Analyst Associate

Microsoft Certified: Security Operations Analyst Associate

MicrosoftMicrosoft

The Microsoft Certified: Security Operations Analyst Associate (SC-200) validates your ability to monitor, investigate, and respond to threats using Microsoft Sentinel, Microsoft Defender XDR, and Defender for Cloud. Earn this certification to demonstrate expertise in security operations and threat hunting.

50 Questions
SC-200
100 min
Min Score 70
Oracle Cloud Infrastructure 2026 Security Associate

Oracle Cloud Infrastructure 2026 Security Associate

OracleOracle

Master the essentials of securing Oracle Cloud Infrastructure, covering identity management, network protection, data encryption, and threat detection to safeguard enterprise cloud environments effectively.

30 Questions
1Z0-1115-26
90 min
Min Score 65
Oracle Cloud Infrastructure 2026 Security Professional

Oracle Cloud Infrastructure 2026 Security Professional

OracleOracle

Master advanced security implementations on Oracle Cloud Infrastructure to protect cloud workloads, manage identities, and ensure robust data compliance across distributed enterprise environments.

50 Questions
1Z0-1104-26
90 min
Min Score 68
Practitioner Threat Intelligence Analyst

Practitioner Threat Intelligence Analyst

CRESTCREST

Validate your ability to analyze threat intelligence data and operationalize cyber threat intelligence (CTI) for organizational defense with this CREST certification.

120 Questions
CPTIA
120 min
Min Score 66
Professional Cloud Network Engineer

Professional Cloud Network Engineer

Google CloudGoogle Cloud

Master advanced Google Cloud networking concepts, including VPC design, hybrid connectivity, and network security to architect and manage robust cloud infrastructure.

50 Questions
GCP-PCNE
120 min
Min Score 72
Professional Cloud Security Engineer

Professional Cloud Security Engineer

Google CloudGoogle Cloud

Validate your expertise in securing Google Cloud environments with the Professional Cloud Security Engineer certification. This exam covers IAM, network defense, data protection, monitoring, and compliance for real-world enterprise security challenges.

60 Questions
GCP-PCSE
120 min
Min Score 75
Securing Networks with Cisco Firewalls (SNCF)

Securing Networks with Cisco Firewalls (SNCF)

CiscoCisco

Master the deployment, configuration, and management of Cisco Secure Firewall solutions to protect enterprise networks against advanced cyber threats and evolving security risks.

100 Questions
300-710
90 min
Min Score 75
Splunk Core Certified Power User

Splunk Core Certified Power User

SplunkSplunk

Validate your ability to perform advanced searches, create complex visualizations, and manage data models within the Splunk ecosystem to drive actionable security and operational insights.

65 Questions
SPLK-1002
60 min
Min Score 70
Zscaler Digital Transformation Administrator

Zscaler Digital Transformation Administrator

ZscalerZscaler

Validate your expertise in managing Zscaler digital trust environments, focusing on cloud security architecture, policy enforcement, and operational excellence within zero trust frameworks.

75 Questions
ZDTA
90 min
Min Score 75

Identity & Access (IAM)4 certifications

Forensics4 certifications

Start from your level

The same certifications ordered the way people actually choose them. Foundation exams assume nothing; expert exams assume years of production work.

Associate20 certifications

Professional27 certifications

Guides and articles on cybersecurity

CRISC Risk Response and Reporting Is 32% of the Exam: How to Attack It

The heaviest CRISC domain is also the one candidates most often under-prepare. Here is how the four domains are weighted and what the risk response questions actually test.

5 min read

Is the ISC2 CCSP Worth $599 in 2026? An Honest Cost-Benefit Breakdown

The CCSP costs USD 599, is CAT-examined with 100 to 150 questions, and takes three years of experience to qualify for. Here is who it pays off for, who it does not, and what it does not replace.

5 min read

CompTIA CySA+ Scenario Questions: How to Read Them and What They Test

CySA+ is 85 questions maximum in 165 minutes, weighted 34% to Security Operations and 26% to Vulnerability Management. Here is how to read the scenarios and which signals tell you what a question is really asking.

5 min read

CISM Exam Traps: The 8 Questions That Fail Most Candidates

The CISM exam is 150 multiple-choice questions in 4 hours across four management domains. Here are the eight question patterns that catch the most candidates, and how to answer each one.

7 min read

CompTIA Network Certification N10-009 Guide

Master the CompTIA Network certification N10-009 with domain weights, USD 399 fee, and 720/900 passing score.

11 min read

ISC2 CISSP Certification: Exam Guide 2024

Master the ISC2 CISSP certification with 100-150 CAT questions, 180 minutes, and USD 749 fee. Technical breakdown.

11 min read

CCNA 200-301: Exam Requirements and Study Strategy

Master the Cisco Certified Network Associate (CCNA) 200-301 exam. Technical breakdown of domains, costs, study strategies, and cognitive readiness.

8 min read

CompTIA Security+ SY0-701: Exam Guide and Study Plan

Technical breakdown of CompTIA Security+ (SY0-701): exam domains, cost, question format, and a study strategy beyond memorization.

8 min read

Frequently Asked Questions

Which cybersecurity certification has the most demand?▼

The general security fundamentals certification leads this category by a wide margin, with roughly 75,000 searches a month in our estimates — more than the next two combined. It is the standard entry point for a security role and the baseline that more advanced credentials build on.

Are offensive security certifications worth the higher cost?▼

If you want a penetration testing or red team role, yes. They are the most respected credentials here and the only ones with a genuine performance component, but they cost more, take more preparation, and lead to a narrower set of roles.

Do security certifications expire?▼

Most require annual continuing professional education credits to stay active. That is worth checking before you pick one, because the renewal is a recurring commitment and a certification you let lapse can become a negative signal rather than a neutral one.

How many questions are in a typical security certification exam?▼

It varies by vendor and by exam, and the ranges are wide. The individual certification pages list the exact published format for each exam, including the ones where the vendor only publishes a maximum question count.

How many practice questions does Certilum have for security certifications?▼

Over 11,000 questions across the 44 certifications in this category, each one tagged to the exam domain it belongs to and accompanied by a written explanation of why the correct answer is correct.

Explore other certification categories