Certified Ethical Hacker
Learn how attackers actually work — reconnaissance, scanning, enumeration, exploitation and reporting across systems, networks and applications — using the same tools and techniques they do.
Compare certification programs, delivery formats, labs, courseware, and exam components before choosing your next credential.
Every certification and degree programme in one list. Filter by certification, career track, or degree to narrow it down.
Showing all 43 programs
Learn how attackers actually work — reconnaissance, scanning, enumeration, exploitation and reporting across systems, networks and applications — using the same tools and techniques they do.
The practical, proctored layer on top of C|EH: real-world challenges that prove you can apply the techniques under time pressure, not just recognise them.
Run full penetration tests in enterprise environments: pivoting through segmented networks, attacking IoT and OT, writing exploits, and reporting findings on live cyber ranges.
Hands-on web application hacking — authentication and session flaws, injection, deserialisation and business logic abuse — proven in a live range rather than on multiple choice questions.
Defend the network end to end: hardening, segmentation, monitoring, traffic analysis and response, with as much attention to detection and prediction as to prevention.
Security for industrial control and operational technology environments, where legacy protocols, availability and physical safety set the constraints.
Tier I and II SOC work: log collection, SIEM use, correlation rules, alert triage and escalation of incidents that turn out to be real.
Build a threat intelligence programme: requirements, collection, analysis and dissemination of intelligence a SOC can act on.
A structured incident handling process across malware, email, network, web application, cloud and insider incidents, from preparation to lessons learned.
Digital forensics from first response to court: evidence handling, disk and memory analysis, network and cloud forensics, and investigation reporting.
Business continuity and disaster recovery: business impact analysis, recovery strategy, plan development, testing and getting operations back.
Cloud security across AWS, Azure and GCP: identity, network, storage and workload controls, logging, incident response and governance.
Bring security into the pipeline: threat modelling, secure code review, SAST and DAST, container and infrastructure-as-code security, automated in CI/CD.
Secure coding for .NET developers, mapped to the SDLC: input validation, authentication, session management, error handling and cryptography.
The same secure-SDLC discipline for Java teams, from design review through to secure deployment and maintenance.
Executive programme covering governance, risk and compliance, controls and audit, programme management, operations and security finance, for leaders moving into the CISO seat.
The route into the C|CISO body of knowledge for managers who do not yet hold five years of experience in each of the five domains.
Run AI programmes safely: lifecycle governance, risk assessment, data and vendor management, and controls that keep AI projects auditable.
Offensive security for AI systems: prompt injection, model and data attacks, and testing AI-enabled applications the way an attacker would.
Responsible AI governance: policy, transparency, bias and fairness controls, and alignment with emerging regulation.
Build blockchain applications: architecture, consensus, smart contract development and the security issues specific to on-chain code.
Blockchain in financial services: payments, tokenisation, decentralised finance models, and the risk and regulatory questions around them.
Blockchain for decision makers: what the technology can and cannot do, how to pick a use case, and how to run an adoption programme.
Technician-level foundation across network defense, ethical hacking, digital forensics and incident response, with heavy lab time and no prerequisites.
Cryptography in practice: symmetric and asymmetric algorithms, hashing, key exchange, PKI, disk and traffic encryption — and where implementations go wrong.
A broad first specialist credential covering network defense, ethical hacking and digital forensics fundamentals in a single programme.
Security awareness for every employee: passwords, phishing, devices, social media and safe handling of company data.
Phishing simulation and awareness campaigns that measure how staff respond to a real lure, then train the people who need it.
Entry-level network defense: protocols, controls, wireless, mobile and IoT basics, with no prior experience required.
The first step into offensive security: attack types, the phases of hacking and basic hands-on labs.
Foundations of digital forensics: investigation process, evidence handling and first analysis of disks, networks and logs.
How security fits into a modern delivery pipeline, for developers and operations people starting out.
Threats and controls for connected devices, from firmware and protocols to the networks they sit on.
What a security operations centre does day to day: monitoring, log analysis and the first level of alert triage.
Introduction to the intelligence cycle, sources and reporting, for analysts moving into threat intelligence work.
Cloud service and deployment models, shared responsibility, and the controls that belong to the customer.
An entry-level introduction to AI concepts, generative tools and their security implications, with no prior AI background needed.
The on-demand course library: short, single-skill courses across cybersecurity, cloud, development and AI, taken without prerequisites.
Graduate degree combining technical depth with management, delivered online and built around EC-Council certification content.
Graduate computer science degree with a security and emerging-technology concentration.
Business administration degree for security professionals moving into executive and board-facing roles.
Undergraduate degree covering the full breadth of cybersecurity practice, with certification content embedded in the coursework.
Shorter graduate credentials in focused areas, which can be applied toward a full master’s degree later.
No program matches those filters.
Filter the roadmap by experience, job role, or career track to see which certifications fit your next step. Programs run from foundational to leadership level, each mapped to the roles it prepares you for.
Showing all 32 certifications
No experience required
No certification in this stage matches the selected filters.
1–2 years, basic computer knowledge
No certification in this stage matches the selected filters.
More than 2 years, networking knowledge
No certification in this stage matches the selected filters.
Core cybersecurity knowledge
No certification in this stage matches the selected filters.
5 years and above
No certification in this stage matches the selected filters.
The roadmap shows the certification path only. For the full catalog, including awareness and specialist programs, browse the full course catalog.
Final availability and included components depend on the selected program and the current EC-Council product bundle.
Online training designed for professionals who need flexibility.
Live training delivered through an approved instructor-led experience.
Three things worth settling with an advisor before you pay for a program.
Review role alignment, experience level, format, and current eligibility.
Validate courseware, labs, exam voucher, schedule, and activation details.
Receive clear next steps before enrollment, payment, and platform access.
Ask about current schedules, pricing, delivery formats, labs, and exam components.