Skip to content
CertMapCertMap

Make better decisions for your career.

CertMap shows you neutrally which certification actually moves you forward, what it costs, and what it is worth in the market. Over 450 certifications, free, no login.

GRC
Popular:
GRCby overall rating
  1. 1CRISC10/12
  2. 2CGEIT9/12
  3. 3GSE9/12
  4. 4PECB 22301SLI9/12

Discover what you can do with CertMap

  • Explore

    All 469 certifications in the quadrant by market strength and substance: filter, search, discover.

    Open

  • Compare

    Certifications side by side: scores, costs, prerequisites and accreditation.

    Open

  • Portfolio

    TCO calculator for your certification strategy over 1, 3 or 5 years.

    Open

  • Save & CPE tracking

    Save comparisons and portfolios, keep CPE deadlines and costs in view.

Well-known certifications

Every cyber certification. Independently mapped.

Ten of the most-searched certifications from five major vendors. Cost, requirements, strengths and weaknesses at a glance.

CISSP

(ISC)2 Certified Information Systems Security Professional

The Certified Information Systems Security Professional (CISSP) from ISC2 is considered the gold standard among generalist certifications in information security and is one of the most frequently…

Very strong11/12

CCSP

(ISC)2 Certified Cloud Security Professional

The CCSP is considered the leading certification for cloud security architects and professionals, covering all six domains of cloud security, from architecture and design to legal and compliance…

Very strong11/12

CISA

ISACA Certified Information Systems Auditor

The CISA has been considered the gold standard for IT auditors and audit professionals worldwide for decades. It covers the entire lifecycle of IS audits, from planning through execution to…

Very strong10/12

CISM

ISACA Certified Information Security Manager

The Certified Information Security Manager (CISM) from ISACA is the leading management certification in information security, focusing on governance, risk management, and strategic oversight – not…

Very strong10/12

GPEN

GIAC Certified Penetration Tester

The GPEN certifies technical penetration testers with a focus on methodical approaches to network pentesting. It is typically based on the SANS course SEC560 and covers reconnaissance, exploitation,…

Strong8/12

GCIH

GIAC Certified Incident Handler

The GCIH is the leading certification for incident responders and targets individuals who actively respond to and investigate security incidents.

Strong8/12

CEH

EC Council Certified Ethical Hacker

The CEH is one of the best-known certifications in ethical hacking and has been a standard in job postings for decades–especially in government and U.S. environments.

Solid6/12
Browse all certifications

Insights from the knowledge base

View all articles →
Methodology

How Does CertMap Rate Cybersecurity Certificates?

Scoring methodology across two axes (market strength × substance), 4 sub-criteria of 0–3 points each. Explains how the quadrant emerges.

Daniel Heessel · 8 min read
Methodology

TCO Methodology in Portfolio Mode

How CertMap calculates the Total Cost of Ownership of a cybersecurity certification, and how bundle effects can shift a cert set's 5-year TCO by more than €5,000.

7 min read
Deep Dive

Nobody is an AI security expert yet.

Which path fits your background, and the certifications that actually count. Three ways into a field where nobody has a ten-year head start.

7 min read
Methodology

About the CertMap editorial team

CertMap is an independent platform for comparing cybersecurity certifications, built on data-journalism standards that combine editorial curation with mechanical aggregation.

3 min read
Fundamentals

Certification vs. Certificate: What's the Difference?

Personnel certification per ISO/IEC 17024 versus a training certificate. Why the distinction matters.

5 min read