Certification guidance

Training for a certification? Here is which tracks to combine.

Popular certification programs each test a mix of skills. Below, the most common goal areas are mapped to the SecMissions advanced training tracks that build the matching reasoning, so you can pick a combination instead of guessing which track covers what.

Try a free mission

Track combinations

Match your certification goal to a track combination.

Each combination below draws on the advanced tracks in Paths. They teach the reasoning and workflow behind the skill area through synthetic browser missions: a code snippet, a captured request, or a log excerpt to read, then explain inside the browser.

Training toward an offensive security certification

These certifications test whether you can chain web attacks, reason through exploitation logic, and write up a finding clearly. Combine Offensive Security Exam Prep with the Web App Pentest Certification Track and the Advanced Exploitation Track to build that reasoning across proxy workflows, authorization and injection flaws, and low level memory and mitigation analysis.

Studying toward: OSCP, CPTS, eJPT, GXPN. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Training toward a network and Active Directory certification

These certifications test enumeration, credential attacks, and lateral movement across a corporate network and directory. Lead with the Active Directory Attack Track for share exposure, service account and ticket weaknesses, directory ACL overreach, and admin pivots, then add Offensive Security Exam Prep for broader exploitation reasoning.

Studying toward: OSCP, GPEN, CRTP, CRTO. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Training toward a web application penetration testing certification

These certifications test authorization bypass, injection, session handling, and reporting from the attacker's seat. Pair the Web App Pentest Certification Track with the Advanced API Exploitation Track and the Secure Development Certification Track, so you can find the flaw, push it further through OAuth and SSRF and API abuse, and explain why the code allowed it.

Studying toward: OSWA, GWAPT, Burp Suite Certified Practitioner, OSWE. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Training toward a cloud and container penetration testing certification

These certifications test attack paths across cloud identity, Kubernetes, and CI/CD. The Offensive Cloud and Container Track walks Azure managed identity and Key Vault and Entra exposures, cluster RBAC and secrets and privileged workloads, and GitHub Actions token and OIDC and poisoned workflow risks.

1Offensive Cloud and Container Track (CARTP-style)

Studying toward: SANS SEC588, CARTP, Azure security exams. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Training toward a GenAI and agent security certification

Security for LLM and agent systems is a fast emerging area. The GenAI and Agent Security Certification Track runs foundations then multi step attack chains: prompt injection, insecure output handling, tool scope and sandbox and supply chain risks, confused deputy, and agent to CI/CD and cloud and Kubernetes escalation, with the controls that break each chain.

1GenAI and Agent Security Topics (SANS SEC545 course)

Studying toward: SANS SEC545, emerging GenAI security programs. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Training toward an incident handling certification

These certifications test how you connect an attacker's technique to a SOC investigation. Start with the Incident Handler Certification Track for the technique to evidence workflow, add the DFIR Forensics Track for timeline and artifact and traffic reasoning, then the Detection Engineering Certification Track for the alerts that start it.

Studying toward: GCIH, GCFA, Blue Team Level 1. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Training toward a detection engineering or blue team certification

These certifications test how you build and tune the signals a SOC relies on. Lead with the Detection Engineering Certification Track for framework and rule quality reasoning, then add the DFIR Forensics Track for the traffic and artifact analysis those signals draw on.

Studying toward: GMON, GCDA, Blue Team Level 1. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Training toward a secure coding or code review certification

These certifications test whether you can spot a flaw in source, explain the root cause, and choose the right fix. The Secure Development Certification Track covers that reasoning across authentication, injection, deserialization, and AI integrated code, and pairs well with the Advanced API Exploitation Track.

Studying toward: GWEB, secure development programs. SecMissions is independent and not affiliated with any certification body.

Open the first track in Paths

Build your own

Prefer to build a custom path?

A certification syllabus rarely maps to exactly one track. In Paths you can mix any of the tracks above, or skip tracks entirely and pick missions by domain, web application, cloud, detection and logs, secure code review, reversing, and more, to build a sequence that matches the specific syllabus you are studying.

Build a custom path

Coming soon

Areas SecMissions does not cover yet

Some certification syllabi lean on tool surfaces or content SecMissions has not built yet. Listed honestly so a search does not lead you to expect coverage that is not there today:

Memory and disk forensics tooling (the DFIR track covers log, artifact, and traffic reasoning today)
Live virtual machine exploitation labs (every SecMissions target is synthetic and runs in the browser)

About this guidance

SecMissions teaches the reasoning and workflow behind each skill area through short, synthetic browser missions: reading a code snippet, a captured request, or a log excerpt, then explaining what is wrong and how to fix it. It is an independent training product and is not affiliated with, endorsed by, or a substitute for any certification body or its exam. Working through a track builds the underlying reasoning toward a goal like an offensive security certification, and it does not replace the hands-on exam itself.