Security+, CISSP, CySA+, CCNA and 24 more — a course and a practice exam for each.

Every course is generated from the exam's own published objectives, so the modules match the domains you will be tested on — and when a vendor reweights an exam, the course changes with it rather than quietly going stale. Practice exams score you by domain, so you know what to study next. Some certifications take more than one exam; the A+ and Network+ program covers A+ Core 1, A+ Core 2 and Network+ together.

We also document 29 certifications in full — domains, weights, renewal cycles and the work roles each one satisfies — including ones we do not yet teach. That catalog is free to read and always will be.

The opening module of every course is free, including its lab and knowledge check.

CompTIA Security+

CompTIA · SY0-701

Pass Security+ (SY0-701). Every module maps to one of the five exam domains, weighted the way CompTIA weights them, and the practice exam scores you by domain so you always know what to study next. Security+ is the certification most govcon contracts ask for by name — it satisfies IAT Level II and IAM Level I.

Intermediate · 5 modules · 36 lessons · 8h

CompTIA CySA+

CompTIA · CS0-004

Pass CySA+ (CS0-004). Built against the June 2026 blueprint, which reweights every domain relative to CS0-003 — and if you are already studying CS0-003 you can still sit it until 22 December 2026, so both blueprints are included. The highest-leverage certification on the 8570 table: it satisfies IAT Level II and four of the five CSSP roles.

Advanced · 4 modules · 28 lessons · 7h

CompTIA A+ and Network+

CompTIA · 220-1201

Pass A+ (220-1201 and 220-1202) and Network+ together — three courses, one program, because the first two certifications most IT careers require overlap heavily and are best studied as a sequence. Each course follows its exam blueprint domain by domain. A+ and Network+ satisfy IAT Level I.

Basic · 14 modules · 95 lessons · 20h

ISC2 CISSP

ISC2 · CISSP

Pass the CISSP. Built against the outline effective 15 April 2024, with every module mapped to one of the eight domains at the weight ISC2 gives it. The widest-reaching certification on the 8570 table — IAT Level III, IAM Levels II and III, and IASAE Levels I and II — and DoD accepts Associate of ISC2 if you pass before you have the five years of experience.

Advanced · 8 modules · 55 lessons · 12h

ISC2 SSCP

ISC2 · SSCP

Pass the SSCP. The exam moved to computerized adaptive testing on 1 October 2025 — no longer the 125-question, three-hour linear form — and the course is built for the adaptive version. Requires one year of paid experience to hold; satisfies both IAT Level I and IAT Level II.

Intermediate · 7 modules · 47 lessons · 9h

GIAC GSEC

GIAC · GSEC

Pass the GSEC. GIAC exams are open-book and include CyberLive hands-on tasks, so this course is lab-weighted and teaches you to work from your notes under time pressure. No prerequisites; satisfies IAT Level II.

Intermediate · 15 modules · 79 lessons · 21h

ISC2 CCSP

ISC2 · CCSP

Pass the CCSP — the cloud security credential for people whose enclaves are leaving the server room. Every module maps to one of the six domains at the weight ISC2 publishes. Requires five years of IT experience to hold; satisfies IAT Level III and IASAE Level III.

Advanced · 6 modules · 37 lessons · 8h

CompTIA Cloud+

CompTIA · CV0-004

Pass Cloud+ (CV0-004). Built domain by domain from the published blueprint, with a practice exam scored by domain. No prerequisites; satisfies IAM Level I and the CSSP Analyst and Infrastructure Support roles.

Intermediate · 6 modules · 38 lessons · 8h

CompTIA PenTest+

CompTIA · PT0-003

Pass PenTest+ (PT0-003): scoping, reconnaissance, exploitation and reporting, taught in the order the blueprint sequences them. The offensive counterpart to CySA+. Satisfies the CSSP Analyst, Incident Responder and Auditor roles.

Advanced · 5 modules · 29 lessons · 7h

EC-Council CEH

EC-Council · 312-50 (312-50v13 for the v13 form)

Pass the CEH (v13). Every module follows the v13 module set, with a practice exam that scores you by domain. Satisfies four of the five CSSP roles — Analyst, Infrastructure Support, Incident Responder and Auditor.

Intermediate · 20 modules · 120 lessons · 26h

ISACA CISM

ISACA · CISM

Pass the CISM — the management-track exam for people accountable for a security program rather than a system. Four domains, each mapped and weighted as ISACA publishes them. Satisfies IAM Levels II and III and the CSSP Manager role.

Advanced · 4 modules · 29 lessons · 7h

ISC2 CGRC

ISC2 · CGRC

Pass the CGRC (formerly CAP) — the certification that maps almost exactly onto the DoD Risk Management Framework, so studying it is studying the authorization process you already work inside. Satisfies IAM Level II.

Intermediate · 7 modules · 45 lessons · 10h

ISC2 Certified in Cybersecurity (CC)

ISC2 · CC

Pass the CC — the entry certification for people starting in security, with no experience requirement and a two-hour exam. The right first exam if you were told to start somewhere and have not yet been told where. Accepted in the DoD 8140 qualification matrix.

Basic · 5 modules · 32 lessons · 7h

CertNexus CFR

CertNexus (Logical Operations) · CFR-410

Pass the CFR (CFR-410), organized around the NIST Cybersecurity Framework functions — Identify, Protect, Detect, Respond, Recover. No eligibility verification to sit the exam. Satisfies four of the five CSSP roles.

Advanced · 5 modules · 32 lessons · 7h

GIAC GCIH

GIAC · GCIH

Pass the GCIH — the hands-on incident-handling exam, with CyberLive practical tasks, so this course is built around working an incident rather than reading about one. Satisfies IAT Level III and the CSSP Analyst and Incident Responder roles.

Advanced · 15 modules · 76 lessons · 21h

GIAC GCIA

GIAC · GCIA

Pass the GCIA: deep packet and traffic analysis for detecting intrusions, taught the way the CyberLive exam tests it — on captures, not slides. Satisfies the CSSP Analyst role.

Advanced · 15 modules · 75 lessons · 20h

Cisco CCNA

Cisco · 200-301

Pass the CCNA (200-301). A working engineer's path through the blueprint: how switches forward, how routers choose, how VLANs and trunks carve one physical network into many logical ones, and how the services on top depend on all of it. Every module maps to a blueprint section.

Intermediate · 6 modules · 41 lessons · 8h

Cisco CCNA Cybersecurity

Cisco · 200-201 CCNACBR

Pass the CCNA Cybersecurity exam (200-201). Security-operations tradecraft for the analyst on the console: what each monitoring source can prove, how to read a host and a capture, and how to decide whether an alert is real. Built section by section from the published blueprint.

Intermediate · 5 modules · 35 lessons · 9h

Cisco CCNP Security (SCOR 350-701)

Cisco · 350-701 SCOR

Pass the SCOR 350-701 core exam — one of the two exams CCNP Security requires; passing SCOR alone earns Cisco Certified Specialist – Security Core. Every module maps to a blueprint section. CCNP Security satisfies IAT Level III.

Advanced · 6 modules · 42 lessons · 9h

Cisco CCNP Enterprise (ENCOR 350-401)

Cisco · 350-401 ENCOR

Pass the ENCOR 350-401 core exam — on its own it earns Cisco Certified Specialist – Enterprise Core; CCNP Enterprise requires a concentration exam as well. Built section by section from the published blueprint, with a practice exam scored by section.

Advanced · 6 modules · 44 lessons · 10h

CompTIA SecurityX (formerly CASP+)

CompTIA · CAS-005

Pass SecurityX (CAS-005) — the advanced practitioner exam CompTIA renamed from CASP+ in December 2024, built for the architect or senior engineer who is no longer being asked what a control is. No experience gate to sit it. Satisfies IAT Level III and IAM Level II.

Advanced · 4 modules · 32 lessons · 7h

GIAC GFACT

GIAC · GFACT

Pass the GFACT — the genuine starting point for career changers, help desk staff moving across, and anyone told to start somewhere. Builds the computing, networking and security fundamentals every later certification assumes, in the order the exam covers them.

Basic · 9 modules · 54 lessons · 12h

GIAC GSLC

GIAC · GSLC

Pass the GSLC — written for the person who owns security people, budget and the consequences of a decision they will have to defend. Every module maps to an exam domain. Satisfies IAM Levels I, II and III.

Advanced · 18 modules · 108 lessons · 26h

EC-Council CHFI

EC-Council · 312-49

Pass the CHFI (312-49): disk and device forensics built around the evidentiary chain — acquisition, imaging, file systems, operating-system artifacts and anti-forensics — taught so every finding is one you could defend. Satisfies the CSSP Infrastructure Support and Incident Responder roles.

Intermediate · 15 modules · 88 lessons · 19h

ISACA CISA

ISACA · CISA

Pass the CISA — the IS audit and assurance exam, taught from the auditor's seat: forming an independent opinion on whether controls work, not running them. Requires five years of audit experience to hold. Satisfies IAT Level III and the CSSP Auditor role.

Advanced · 5 modules · 39 lessons · 9h

EC-Council CND

EC-Council · 312-38

Pass the CND (312-38) — a defense-first exam for the operator who runs and protects a network day to day: protect, detect, respond and predict across the perimeter, the endpoints and the monitoring. Satisfies IAT Levels I and II, IAM Level I and the CSSP Infrastructure Support role.

Intermediate · 20 modules · 107 lessons · 24h

EC-Council ECIH

EC-Council · 212-89

Pass the ECIH (212-89): the incident-handling lifecycle as operational discipline, written for someone who will be on the handling side of a real incident in a government or defense environment. Every module maps to an exam domain, with a practice exam scored by domain.

Intermediate · 10 modules · 62 lessons · 15h

GIAC GICSP

GIAC · GICSP

Pass the GICSP — securing the control systems behind physical infrastructure: SCADA, DCS, PLCs and building automation, where availability and safety outrank confidentiality. No prerequisites. Satisfies IAT Level II and the CSSP Analyst and Infrastructure Support roles.

Intermediate · 10 modules · 60 lessons · 15h

Professional development

Skills the DoD technical workforce increasingly needs — AI used safely in a cleared environment, digital engineering for the acquisition world. This is not certification prep and not part of any 8140 requirement: nothing on this shelf is an 8140 qualification (and 8140 does not currently require any AI certification). It is included in the same subscription.

Where AI stands with 8140

What's in every course

  • Modules generated from the vendor's published exam domains
  • A knowledge check in every module, with each answer explained
  • 251 hands-on labs written as scenarios to work through
  • 1000 practice exam questions, weighted to the real blueprint
  • Per-domain scoring, so you know what to study next
  • Progress that follows you across devices