Video summary

5 Cybersecurity Certificates You Should Avoid (Do THIS Instead)

Main summary

Key takeaways

News and Commentary

Overall Thesis

The video argues that some popular cybersecurity certifications can be actively harmful to job seekers—especially in 2026—because they either:

  • Don’t teach practical skills, or
  • Create misleading expectations that show up in how employers interpret resumes.

The speaker’s theme is that certificates alone don’t guarantee employment; the real goal is building the skills the market needs.

Key Points by Certification / Provider

1. EC-Council (especially CEH)

The video claims CEH has become a “joke” because it is essentially an:

  • Overpriced multiple-choice exam
  • With little to no hands-on ethical hacking practice

It also criticizes why people pursue it:

  • Marketing promises
  • The belief that using keywords/titles from job ads will “trick” hiring managers

The speaker calls this dangerous because it replaces learning with gaming HR and resume systems.

Recommended alternatives:

  • Offensive Security OSCP
  • Hack The Box CPTS (advanced, skills-tested)
  • For absolute beginners: INE EJPT and TryHackMe PT1

2. Cisco (security/training offerings)

While Cisco networking certifications (e.g., CCNA/CCNP/CCIE) are described as strong, the video criticizes Cisco’s cybersecurity training, including:

  • Cyber Analyst / Cyber Ops
  • Splunk-related training (Cisco now owns)

The main complaint is that the cybersecurity content is:

  • Free but low-quality
  • Very long
  • Theory-heavy
  • Described as “walls of text” with AI voiceovers
  • With little practical practice

The speaker argues this traps candidates at the beginner level for months/years, creating a resume red flag.

Recommended alternatives (practical blue-team/defensive):

  • TryHackMe (Cell One)
  • CyberDefenders (CCD L1/L2)
  • Hack The Box CDSA
  • Let’s Defend SOC Analyst pathway

The suggestion is roughly 6–8 months of hands-on work.

3. CompTIA

The video claims most CompTIA certifications are:

  • Theoretical
  • Multiple-choice
  • Not directly translating into real job skills

It treats Security+ as a partial exception—useful for baseline knowledge in some contexts (including potentially DoD-related requirements)—but emphasizes it shouldn’t lead to expecting a high-paying job by itself.

The speaker pushes back strongly on other CompTIA offerings, including those that claim SOC or penetration-testing outcomes, arguing they don’t produce tangible, job-ready capability.

It also notes an important point: the industry isn’t regulated, so arguments about “recognition” are considered misguided.

4. (ISC)² and ISACA (GRC certifications)

The video acknowledges these organizations were historically influential in introducing risk/audit/GRC concepts, but criticizes their cert content as:

  • Too basic and definition-based
  • Training candidates to answer terms, not to do scenario-based risk assessment/audits

The warning is that these certifications can hurt job prospects because recruiters expect more practical competence than the certs provide.

It also highlights downsides such as:

  • High cost
  • Maintenance fees
  • Additional “continuous education” requirements (framed as performative)

The video further claims they have expanded into a “certificate factory” with watered-down or surprising offerings, including:

  • Cloud
  • AI/security
  • Niche GRC variants

Recommended alternative for practical GRC skills:

  • GRC Mastery, described as hands-on with case studies covering:
    • risk
    • audit
    • asset management
    • IAM
  • Includes an ISO 27001 Lead Auditor credential

5. Cybersecurity bootcamps (worst overall choice)

The video calls bootcamps a scam, arguing they sell shortcuts such as:

  • Paying thousands for a “guaranteed job”
  • Without delivering sufficient real-world skills

It also criticizes university-branded bootcamps that mainly lead to basic CompTIA certs, saying they aren’t worth the cost—claiming many bootcamps cost far more than learning for around $2,000.

Core message:

  • There are no shortcuts
  • Only practical, hands-on training, plus ongoing application while learning, leads to employment

Overall Thesis & Career Guidance

Main Takeaways

  • No single certificate guarantees a job.
  • The goal is acquiring the skills the market needs.

Recommended Approach

  • Follow a structured, skills-focused roadmap (hands-on practice).
  • Apply to jobs while learning.
  • Avoid “keyword/marketing” strategies and paid shortcuts.

Presenters or Contributors

  • The main presenter / hiring manager speaks throughout the video.
  • No specific name is provided in the subtitles.

Original video