Introducing Guided Paths
Don't let the overwhelm of learning cybersecurity hold you back. Paths bring structure for you to achieve your career goals.
Posted by
Related reading
Bite-sized cybersecurity practice, sized to the time you actually have — one question over coffee, ten before a meeting, or a full session when you want one.
The Weekly Challenge and Defenders Club
One lab a week for the whole platform to compete, and a place to connect with fellow defenders.
Security Engineering Skills to Learn: 4 New Defend the Org Skills
Scripting, code review, system design and threat modeling: four security engineering skills added to Defend the Org since launch, and how to practice each one.

Starting is Hard
Deciding you want to work in cybersecurity is the easy part. Then you go looking for how, and the answer is everywhere and nowhere at once — a dozen platforms that each teach a different slice in a different shape, thousands of hours of video, half a dozen certifications that all claim to be the one employers actually want, and a forum thread where every answer contradicts the one above it. There is no shortage of material. What there is no supply of is order: nothing tells you what to do first, what skills to learn, or what to do next.
So you do the reasonable thing. You start somewhere, get good at whatever clicks, and quietly avoid the parts that do not. Six months on you have real hours behind you and no way to tell whether any of them moved you toward a job — because the interview is going to ask you to read a log, say what an attacker did, and decide what to do next, and those are three different muscles.
Roadmaps do not fix it
The usual advice is to find a roadmap. There are hundreds of them, and most are fine as far as they go. The trouble is what they are: a list of topics, not a sequence of work.
A roadmap tells you that you should learn networking, then logs, then detection. It does not hand you the networking. It does not tell you how much is enough. And it has no way of knowing whether you actually learned it, so you read a page, feel roughly familiar with the words, tick the box and move on.
Two months later you meet the same concept inside a real investigation and discover you never had it.
Nobody marks your homework. That is the gap.
What a Path is
A Path is the whole curriculum for one job, in order. The first one is Zero to Security Analyst: eight tiers, roughly forty-six hours, assuming nothing. Tier one does not start with theory. It starts with what the job actually is, because a surprising number of people train for two years toward a role they have never seen described.
A tier is a small group of things that belong together, not a single item — one lab is rarely enough to learn an idea, and one course is rarely enough to apply it. You work the tier and it hands you to the next. The order is not alphabetical and it is not by difficulty. It is the order the job builds in: endpoints before logs, logs before triage, triage before hunting.
Almost none of it is new. Zero to Security Analyst ties together seven courses, two tracks, eighteen labs and four campaigns already on the platform, with checkpoints set between them. The content was never the missing piece. The order was.
And the nodes are mirrors, not copies. Finish the Security Operations track from the Tracks page and it is already ticked off inside the Path — same progress, no duplicate, nothing to reconcile. Following a Path does not mean being locked inside one.
How you prove you learned it
Twice through the Path the tiles stop and a checkpoint sits across the row. There are twenty questions, and you need eighty percent to pass.
A lab proves you can work something out with the evidence in front of you. A quiz two weeks later proves you kept that knowledge.
Worth being precise about what waits, because this is where most platforms overstate things. The content is not locked. You can range ahead, do a lab from tier six in your first week, work the Path out of order if you want to. The checkpoint waits: it opens once the required work above it is done, and not before.
The last shift
The Last Shift is where the Path ends before the exam. Three alerts come in. They arrive at the same severity, and only one of them is real.
That is the actual test. Most of what reaches a real queue is nothing, and the failure mode is not missing the real one — it is spending your credibility on the first two so that nobody moves when you are finally right.
Then there's a final exam: fifty questions and another eighty percent to pass. Pass it and the Path issues a certificate carrying a serial anyone can check from a public link — no account needed to verify it.
More on the way
Zero to Security Analyst is the first Path, not the only one. More are in development, aimed at the roles people move into next — because the first job is the hardest one to get, and it is not the last one you will want.
Where to start
Paths are included with a membership — there is nothing extra to buy and nothing to enrol in. Open the Paths page, pick the role you are aiming at, and the first tier is waiting. If you do not have an account yet, grab a seat and start at Ground Zero.
The honest pitch is small. You are going to spend the next six months learning this either way. The only question is whether the order was chosen by someone who has done the job, or by whichever tab you had open on a Tuesday night.