How to Learn Cyber Security
You learn cyber security in a specific order: fundamentals first, then a specialisation, then a portfolio. This guide is the full self study roadmap, including what to skip.
Start with fundamentals, not tools
Everyone wants to jump to hacking. The people who last built the base first: networking, Linux, and how the web actually works. Skip this and you hit a wall within months.
The roadmap
- Months 1 to 3: networking, Linux, one scripting language
- Months 4 to 6: web fundamentals and the OWASP Top 10, hands on
- Months 7 to 10: pick a side, offensive or defensive
- Months 10 to 12: build a portfolio
The detailed version with checkpoints is in the cyber security roadmap.
Offensive or defensive
| Offensive | Defensive | |
|---|---|---|
| Example role | Penetration tester | SOC analyst |
| Entry | Harder | Easier |
| Openings | Fewer | More |
| Pay at entry | Higher | Lower |
Compare directly in red team vs blue team.
Free resources to start
You do not need to pay to begin. Hacklido is a free lab platform. Practise before you spend on anything.
What to skip: buying a certification first, collecting ten unfinished courses, and memorising tools without a methodology. All three waste months.
Learn with structure and a mentor
Live programs across VAPT, SOC, cloud and AI security.
See all programsRelated
Frequently asked questions
How long does it take to learn cyber security?
Around twelve months of consistent study with a portfolio to reach entry level employable.
Can I learn cyber security for free?
Yes, the fundamentals and practice labs are freely available. A program adds structure, mentorship and the report skill.
Do I need a degree?
No. Boutique firms and SOCs hire on demonstrated skill.
What should I learn first?
Networking, Linux and a scripting language, before any hacking tools.
Is cyber security hard to learn?
It is demanding but accessible with consistency. Ten focused hours a week for a year is enough to start a career.