Explore fields
Cybersecurity & Ethical Hacking
Explore ethical hacking alongside defensive security, product security and incident response. Choose a specific attack surface or security discipline. Assessment scenarios focus on authorization, evidence and remediation; a certificate never authorizes testing an external system.
Get a certificateAssessments are being prepared. You can review the scope and select your discipline now.
Find your assessment
Ethical Hacking & Penetration Testing
-
Get a certificate
White-Hat Hacker
Written permission and scope; pentest methodology; vulnerability analysis; report
-
Get a certificate
Penetration Testing Specialist
Planning of permitted trials; risk validation; documentation; remediation
-
Get a certificate
Web Application Pentester
Access models; web vulnerability types; secure lab validation; reporting
-
Get a certificate
API Security Tester
Object and function authorization; API schemes; rate limits; secure testing
-
Get a certificate
Mobile Application Pentester
Data storage; communications; platform boundaries; laboratory analysis
-
Get a certificate
Network Security Tester
Network protocols; segmentation; configurations; permitted auditing
-
Get a certificate
Bug Bounty Researcher
Program rules; scope; quality of evidence; responsible disclosure
-
Get a certificate
Vulnerability Research Analyst
Error classes; reproducibility; impact; responsible disclosure
-
Get a certificate
Wireless Security Assessment
Security protocols; configurations; authorized laboratory testing; reporting
-
Get a certificate
Reverse Engineering Analysis
program formats; static and dynamic analysis; isolated environment; legal boundaries
Application & Product Security
-
Get a certificate
Application Security Engineer
Architectural risks; secure coding; assessment; remediation
-
Get a certificate
Product Security Specialist
Product threats; design review; supply chain; patch release
-
Get a certificate
Threat Modeling Practitioner
Assets; trust boundaries; abuse cases; protective measures
-
Get a certificate
DevSecOps Practitioner
Security gates; SAST/DAST; secrets; CI/CD and artifacts
-
Get a certificate
Software Supply Chain Security
Dependencies; SBOM; signatures; provenance; updates
-
Get a certificate
Secure Code Review
Authorization; injections; logic errors; fixes
Security Operations & Detection
-
Get a certificate
SOC Analyst
Telemetry; triage; correlation; escalation
-
Get a certificate
Blue Team Analyst
Hardening; monitoring; protective controls; effectiveness testing
-
Get a certificate
Detection Engineer
Detection logic; data; false positives; threat coverage
-
Get a certificate
Threat Hunter
Hypotheses; telemetry sources; investigation; conclusions
-
Get a certificate
Cyber Threat Intelligence Analyst
Intelligence sources; context; information quality; actionable intelligence
-
Get a certificate
SIEM & SOAR Specialist
Correlation; playbooks; automation; error control
Adversary Emulation & Purple Team
-
Get a certificate
Red Team Planning
Rules of engagement; goals; risk limitations; permitted scenarios
-
Get a certificate
Purple Team Specialist
Joint security testing; hypotheses; detection; improvements
-
Get a certificate
Adversary Emulation Analyst
Behavioral models; laboratory scenarios; coverage measurement; reporting
-
Get a certificate
Attack Surface Analyst
Inventory of authorized assets; exposure; prioritization; elimination
-
Get a certificate
Human-Layer Security Assessment
Agreed scenarios; ethics; awareness; sustainability measurement
Incident Response & Digital Forensics
-
Get a certificate
Incident Response Analyst
Triage; containment; evidence; recovery
-
Get a certificate
Digital Forensics Analyst
Preservation of evidence; artifacts; timelines; interpretation
-
Get a certificate
Malware Analysis Fundamentals
Classification; isolated laboratory; observable features; reporting
-
Get a certificate
Ransomware Resilience
Backup; segmentation; recovery; tabletop exercises
-
Get a certificate
Security Incident Commander
Roles; decision making; communication; post-incident debriefing
Cloud & Identity Security
-
Get a certificate
Cloud Security Analyst
Shared responsibility; configuration; IAM; logging
-
Get a certificate
Identity & Access Specialist
Access lifecycle; least privilege; federation; review
-
Get a certificate
Zero Trust Architecture
Identity; segmentation; policy enforcement; continuous verification
-
Get a certificate
Container Security
Images; runtime; secrets; isolation
-
Get a certificate
Kubernetes Security
RBAC; admission; workloads; network policies
-
Get a certificate
OT & IoT Security
Segmentation; asset inventory; safety constraints; change control
-
Get a certificate
Active Directory Security
trust relationships; privileges; configurations; audit; security measures
-
Get a certificate
Cryptography & PKI
Symmetric and asymmetric schemes; certificates; key management; common mistakes
Cyber Risk & Governance
-
Get a certificate
Cyber Risk Analyst
Probability and impact assessment; control measures; priorities
-
Get a certificate
Security Governance Specialist
Policies; responsibility; assurance; reporting
-
Get a certificate
Privacy Engineering
Data minimization; access; lifecycle; privacy by design
-
Get a certificate
Business Continuity & Cyber Resilience
BIA; recovery objectives; dependencies; exercises
-
Get a certificate
Vulnerability Management
Inventory; prioritization; remediation; correction verification
CertMetrica
A conversation with a purpose
- Choose your discipline
Read the scope, evidence format and assessment criteria before you begin.
- Explain your thinking
Answer questions, explore scenarios and respond to follow-up questions from AI.
- Understand your result
A certificate records successful completion of the named assessment under its published criteria.
Your certificate
A certificate with context
The certificate identifies the discipline and the assessment version. It confirms successful testing, without conferring a professional license, academic degree or permission to practice.
Get a certificate