Question 1

How long does it take to complete this cybersecurity roadmap?

Accepted Answer

Most self-taught learners take 7-11 months studying part-time (10-15 hours/week), or 4-6 months studying full-time. Ethical Hacking & Penetration Testing and Security Operations (Phases 6-7) tend to take the longest since they reward heavy hands-on lab practice.

Question 2

Do I need a networking or IT background to start this roadmap?

Accepted Answer

It helps, but isn't required — Phases 2-3 build the networking and Linux/Windows fundamentals from the ground up. What matters more is genuine curiosity about how systems break and comfort with a command line, which this roadmap develops as you go.

Question 3

Should I focus on offensive security (pentesting) or defensive security (SOC/blue team)?

Accepted Answer

Learn the breadth first — Phases 1-9 give you enough of both to know what you enjoy. Offensive roles (pentesting, red team) tend to require more prior experience to break into; defensive roles (SOC analyst) are often a more accessible first cybersecurity job, with pentesting as a common next step.

Question 4

Which certification should I get first — Security+, CEH, or OSCP?

Accepted Answer

CompTIA Security+ is the most common entry-level certification and pairs well with Phases 1-4. CEH is a broader ethical hacking credential. OSCP is hands-on and significantly harder, best attempted after real practice (Phase 6's labs) — most people shouldn't attempt it as their very first certification.

Question 5

Is this roadmap free to use?

Accepted Answer

Yes, completely free with no login or signup required. Your progress is saved locally in your browser so you can track your checklist across visits.

Question 6

Do I need to learn to code for a cybersecurity career?

Accepted Answer

Basic scripting (Phase 13, typically Python) is expected for most roles beyond entry-level SOC work — automating repetitive tasks and understanding exploit code both depend on it. You don't need to be a strong software engineer, but avoiding code entirely will limit your ceiling.

Question 7

Is it legal to practice hacking skills on my own?

Accepted Answer

Only against systems you own or are explicitly authorized to test — platforms like TryHackMe and Hack The Box (referenced in Phase 6) provide legal, purpose-built practice environments. Never test techniques against real systems, websites, or networks without written permission; doing so is a serious crime in most jurisdictions.

Question 8

Is completing this roadmap enough to get a cybersecurity job?

Accepted Answer

It covers the technical breadth employers expect, but landing a role also depends on hands-on lab experience (CTFs, home lab projects) and being able to talk through real detection and incident scenarios in an interview — exactly what Phases 14-15 (Portfolio and Interview Preparation) are built for.

Cybersecurity Roadmap

Frequently Asked Questions

Explore Related Roadmaps