Train to become OSCC-SEC certified

SEC-100: Cybersecurity Essentials

Starting at $899

Level

138h of content

Equip yourself with essential knowledge and hands-on skills, including offensive and defensive techniques, networking, scripting, application and operating system security (windows and linux basics)
Earn OffSec's newest certification: OffSec Cybercore (OSCC-SEC)

Start training Certify your team

Overview

SEC-100 provides a comprehensive introduction to cybersecurity, covering foundational concepts, essential skills across offensive, defensive, and build domains, and career readiness tools to help learners confidently begin their journey into the cybersecurity field

SEC-100 (CyberCore – Security Essentials) is the fundamental course for cybersecurity. Providing learners with the basic understanding of the world of cybersecurity, from an understanding of the terminology and programming skills required, to a broad overview of the offensive, defensive, build, and personal capabilities that an individual should have to launch a career in this growing industry. It creates a foundation for those who know they want a role in cybersecurity but aren't sure where to start.

SEC-100 is an overview course for the field of cybersecurity and the professionals who want to break into it. It covers topics within five primary sections: basic cybersecurity information, general skills, offensive skills, defensive skills, and build skills. Learners will explore topics such as:

Understanding the anatomy of cybersecurity and the CIA Triad (Confidentiality, Integrity, Availability), a foundational model that defines core security objectives
Integrating industry-recognized frameworks like NIST and ISO 27001 to implement effective security practices
Addressing the risks and vulnerabilities associated with cloud computing as organizations migrate applications and infrastructure to the cloud
Examining AI's influence in cybersecurity, both as a threat and as a tool to enhance offensive and defensive capabilities
Exploring what a Penetration Test (Pentest) is, how they are performed, and what their objectives are
Completing a self-assessment to review skills, and learning how to create a resume or CV that aligns with cybersecurity career opportunities

SEC-100 is organized into 40 modules of content, with accompanying hands-on labs and video-based learning to support multiple learning abilities. After completing the modules and the labs within them, learners can expect to be prepared to complete the OSCC exam certification, showcasing their ability to take on information security positions. The course is designed for individuals who are at the beginning of their journey into the cybersecurity field. It's perfect for recent graduates or anyone looking to change careers and enter the world of cybersecurity.

This course is ideal for those who are familiar with computing but not yet experts. If you can navigate a computer, use a web browser, and operate standard applications but feel overwhelmed by the breadth of cybersecurity options and jargon, this course is for you. Whether you're interested in offense, defense or building, intrigued by networking, or curious about scripting and programming, SEC100 provides a structured and accessible path into the field.

Becoming OSCC-SEC certified

6-hour proctored

All exams are proctored by an OffSec employee in a private VPN
Hands-on labs

Identify, exploit, and report real-world vulnerabilities in live lab systems
3-section exam

The exam has Attack, Defend, and Build sections, each taking about 2 hours
Immediate results

Results are available immediately after submission. No documentation or reports needed

OSCC-SEC certification

About the OSCC-SEC exam

The OffSec CyberCore Certified (OSCC-SEC) certification validates expertise in critical cybersecurity domains

Exam Guide Exam FAQ

OffSec is trusted by

Start learning with OffSec

$899/once

Essential content

CyberCore™

Includes 1 year of access to one 100-level CyberCore course, the associated labs, and two exam attempts

Enroll now Learn more

*Subscription auto-renews unless cancelled

SEC-100 FAQ

Who is the SEC-100 course for?
The SEC-100 course is ideal for:
- Individuals new to cybersecurity
- Recent graduates and IT professionals seeking to transition into cybersecurity roles
What are the SEC-100 prerequisites?

There are no formal prerequisites for SEC-100 however, basic computer literacy, familiarity with operating systems, and a willingness to learn are recommended.
Does the OSCC-SEC certification expire?
Yes, the OSCC-SEC will expire 3 years after the date you passed the exam. To maintain the validity of your certification, consider one of the following renewal options before your expiration date:
- Pass a Qualifying Exam: Take and pass an OffSec certification exam within the same category at the same level or higher before your certification expires.
- Recertification Exam: Take and pass a recertification exam within six months before your certification’s expiration date to extend validity.
- Continuing Professional Education (CPE) Program. You may refer to the CPE handbook for more information.
Please note that, if your certification expires, you will need to retake and pass the same certification exam.
What job roles do OSCC-SEC certified professionals often hold?
The OffSec CyberCore: Security Essentials (OSCC-SEC) certification is designed for individuals who are new to cybersecurity or transitioning into the field from adjacent roles. It covers core security concepts and introduces hands-on skills in system hardening, network defense, basic offensive techniques, and foundational incident response.
As an entry-level certification, OSCC-SEC prepares you for a wide range of beginner to early-career roles across both defensive and offensive security disciplines. It’s especially valuable for professionals looking to explore different paths within cybersecurity before committing to a specialized track.
Job roles that may align with the OSCC-SEC certification include:
- Security Operations Center (SOC) Analyst (Tier 1)
- IT Generalist or IT Support Specialist (with security responsibilities)
- Junior Incident Responder
- Threat Hunter (entry-level)
- Network Penetration Tester (beginner level)
- Web Application Tester (junior level)
- Security Researcher (early-career)
- Cloud Security Engineer (entry-level)
- DevSecOps Engineer (entry-level or support role)
The OSCC-SEC serves as a launchpad into the cybersecurity industry, helping you build confidence with practical, real-world tasks while establishing the technical and analytical mindset needed for more advanced certifications like OSCP, OSDA, or OSWA.
Whether you're a student, career switcher, or IT professional expanding into security, this certification equips you with a strong, versatile foundation for growth across a variety of cybersecurity domains.
How do I get CPE points for the SEC-100 course?

All of our fully released courses may qualify students for up to 40 (ISC)² CPE credits. To know if you are eligible to request a completion letter or to find course completion requirements, please visit our How can I obtain (ISC)² CPE credits and/or a course completion letter for my course article.

Are you ready to #TryHarder?

You're closer than you think.

You don’t need to be perfect. You need to be persistent. If you’re learning how systems work, how attacks happen, and how defenders respond...

Start your OSCC-SEC journey

Success stories from the field

Getting through SEC-100 course was absolutely fantastic material and the content I wish I was able to consume when I first began diving into information security. Great work to the team that worked on it! 👏🏼