Cybersecurity
Learning Paths
Structured modules from fundamentals to elite operator, plus exam prep for CISSP, ISO 27001 and Security+.
Prepare for a certification
Exam-focused paths for experienced professionals. Exam prep only: certifications are issued by the certifying bodies.
🏗️ Foundation
4 modulesStart here. Build the mental models every security professional needs — how computers communicate, binary, OS basics, and the security mindset.
Master the OSI model, TCP/IP, DNS, subnetting, and packet analysis. Networks are the battlefield of cybersecurity.
Become fluent in the hacker's operating system. Bash scripting, file systems, permissions, processes, SSH, and system administration.
Build and understand an Information Security Management System (ISMS) — risk management, the 93 Annex A controls, and certification-exam readiness.
💻 Core Skills
6 modulesWrite tools, automate tasks, build exploits. Python is the scripting language of security professionals.
Understand how web applications are built — HTML, HTTP, JavaScript, APIs, authentication — so you can better understand how to break them.
SQL, PostgreSQL, MySQL, NoSQL. Learn databases from a security angle — including SQL injection and database hardening.
CIA Triad, cryptography, PKI, threat modeling, OWASP Top 10, incident response — the core concepts that define the field.
Learn how mobile apps actually get compromised: insecure storage, exported components, deep link abuse, and the OWASP Mobile Top 10.
Turn ISMS theory into practice: launch the project, write real policies, build a working risk register, and implement Annex A controls across the organization.
⚔️ Advanced Security
6 modulesXSS, SQLi, CSRF, SSRF, XXE, IDOR — attack and defend real web applications using Burp Suite and hands-on labs.
Full penetration testing methodology: recon, scanning, exploitation, privilege escalation, post-exploitation, and professional reporting.
Binary exploitation, reverse engineering, malware analysis, shellcoding, and CTF competition skills for elite-level practitioners.
Learn why industrial and IoT environments flip IT's usual security priorities: the Purdue Model, legacy protocols like Modbus, common device vulnerabilities, and the air-gap myth.
Learn to plan, conduct, and report a management system audit — from ISO 19011 principles through evidence collection, nonconformity classification, and the certification body's own accreditation requirements.
Exam-prep for the (ISC)2 CISSP: the eight CBK domains taught in the order that converts real operational experience into exam vocabulary fastest, not domain order 1-8.
Ready to Level Up?
Create a free account to track XP, unlock modules, and follow your personal path from fundamentals to elite operator.
Create Free AccountFrequently Asked Questions
Is VigilForge free?
Yes. VigilForge is completely free to use — there is no billing or subscription system. Every roadmap, lesson, hands-on lab, and the placement quiz is available at no cost.
Do I need experience to start?
No. The Guide's beginner track starts from the fundamentals, and its 12-question level test places experienced learners further along so they don't repeat what they already know.
Does VigilForge prepare me for certifications?
Yes. There are exam-focused paths for CISSP and ISO/IEC 27001 (Foundation, Lead Implementer and Lead Auditor), plus a Security+ practice exam. VigilForge is exam preparation only: certifications are awarded by the certifying bodies after you pass their exams.
Do I get a certificate?
When you complete every lesson of a path that offers one, you receive a VigilForge completion attestation with a public verification link. It shows what you studied; it is not an industry certification.
Are the hands-on labs safe and legal?
Yes. Labs and the in-browser terminal run in isolated environments built for practice. Only ever test techniques on systems you own or have written permission to test.