Certs ranked on social tiers

- A viral social post ranked entry-level cybersecurity certifications and hands-on platforms into S-to-D tiers. - The list placed CompTIA Security+ and Google Cybersecurity Certificate high, labelled OSCP A-tier, and CEH D-tier. - The thread sparked debate about prioritising S/A-tier certs alongside Hack The Box and TryHackMe practice platforms. (x.com)

A social media tier list is driving a familiar cybersecurity argument: which credentials actually help beginners get hired, and which ones mostly signal test prep. (x.com) The post ranked entry-level certifications and practice platforms from S to D tier, putting CompTIA Security+ and Google’s Cybersecurity Certificate near the top, OffSec’s Offensive Security Certified Professional in A-tier, and EC-Council’s Certified Ethical Hacker in D-tier. (x.com) Cybersecurity certifications and lab platforms measure different things. CompTIA says Security+ validates “core security functions,” Google markets its certificate as job-ready analyst training, and OffSec says its OSCP+ is awarded to candidates who pass a hands-on performance test. (comptia.org, grow.google, help.offsec.com) That split helps explain the ranking fight. A beginner certificate can teach vocabulary, tools, and workflows, while a lab platform or a practical exam shows whether someone can actually investigate alerts or break into a box under time pressure. (grow.google, hackthebox.com, tryhackme.com) Security+ remains one of the most recognizable starting points because CompTIA positions it as a baseline certification for enterprise security work, including cloud, mobile, and operational technology environments. Google’s program targets entry-level analyst roles and teaches Python, Linux, SQL, security information and event management tools, and packet analysis. (comptia.org, assets.ctfassets.net, grow.google) OSCP sits in a different lane. OffSec describes the exam as a performance test with no formal prerequisite, but it is built around practical penetration testing, which is why many practitioners treat it as a stronger signal for offensive security than beginner-friendly certificates. (help.offsec.com) CEH still has institutional backing even as parts of the online community rank it lower. EC-Council calls it its flagship ethical hacking certification, and the Cybersecurity and Infrastructure Security Agency’s training catalog says it teaches professionals to think and act like a hacker to defend systems. (eccouncil.org, niccs.cisa.gov) The practice platforms in the thread reflect another shift in cyber hiring: employers increasingly want evidence of hands-on work, not just multiple-choice exams. TryHackMe says it offers more than 900 labs and learning paths for beginners through advanced users, while Hack The Box markets guided labs, challenges, and role-based training tied to job skills. (tryhackme.com, hackthebox.com) Hack The Box has also pushed further into mainstream training channels. In November 2025, the company said it became LinkedIn Learning’s first cybersecurity training labs partner, a sign that simulation-based practice is moving closer to standard workforce training. (hackthebox.com) The thread’s real takeaway is less about one definitive ranking than about sequence. For many newcomers, the path now starts with a baseline credential like Security+ or Google’s certificate and then moves quickly into labs such as TryHackMe or Hack The Box, where the résumé line has to match the hands-on work. (comptia.org, grow.google, tryhackme.com, hackthebox.com)

Get your own daily briefing

Scout delivers personalized news, insights, and conversations tailored to your role and industry.

Download on the App Store

Shared from Scout - Be the smartest in the room.