Stage 1 of 6
Networking Foundations
Understand how devices communicate, how networks are built, operated, secured, and troubleshot.
Explore modules ↓One professional certification
CompTIA Network+Build a strong foundation in networking.CompTIA Security+Develop essential cybersecurity skills.CompTIA Linux+Manage and secure Linux environments.CompTIA CySA+Analyze threats and strengthen defenses.Cisco CCNAConnect, configure, and troubleshoot networks.Cisco CCNP EnterpriseTake enterprise networking to the next level.ISACA CISAAudit information systems with confidence.ISACA CISMLead information security programs.OCEG GRCAAssess governance, risk, and compliance.EC-Council CEHExplore ethical hacking and security testing.INE eJPTStart your practical penetration testing journey.Blue Team Level 1Investigate incidents and defend systems.
Help me find my course
CompTIA
Cisco
ISACA & governance
Offense & defense
RSAY’s first professional bootcamp
Cybersecurity Bootcamp
Over four months, build foundations in networking, operating systems, and cybersecurity, then move through Red Team, Blue Team, and GRC in one journey preparing you to pursue seven professional certifications.
4months6knowledge stages7professional certifications16weeks
Training route · 6 stages
Seven professional courses. One route that moves with you, step by step.
The journey starts with technical infrastructure, then advances through defense, offense, and governance. Open any course for its official-aligned content and exam details.
Stage 2 of 6
Operating System Foundations
Administer Linux systems, users, services, storage, permissions, automation, and host security.
Explore modules ↓One professional certification
Stage 3 of 6
Cybersecurity Foundations
Build a connected understanding of threats, controls, secure architecture, operations, risk, and governance.
Explore modules ↓One professional certification
Stage 4 of 6
Red Team
Learn authorized reconnaissance, vulnerability analysis, ethical attack techniques, validation, and reporting.
Explore modules ↓One professional certification
Stage 5 of 6
Blue Team
Investigate alerts and evidence, use SIEM and threat intelligence, manage vulnerabilities, and respond to incidents.
Security Blue Team · Current syllabusBlue Team Level 1Course and exam details ↗CompTIA · CS0-003CompTIA Cybersecurity Analyst (CySA+)Course and exam details ↗
Explore modules ↓2 certifications in this stage
RSAY / CYBER PATHCheckpoint 05
5 / 6 of route
Stage 6 of 6
GRC
Connect technical security to governance, risk, compliance, assurance, assessment, and audit reporting.
Explore modules ↓One professional certification
Training roadmap · 16 weeks
Open each stage to see every module and what you will learn.
The roadmap shows every module connected to the seven certifications, with a clear learning purpose for each one.
01Month 01 · Weeks 1–2Networking Foundations
Understand how devices communicate, how networks are built, operated, secured, and troubleshot.
Network++
Networking Foundations
Understand how devices communicate, how networks are built, operated, secured, and troubleshot.
CompTIA · N10-009
CompTIA Network+
Networking Concepts · 23%
What you will learnProtocols, services, addressing, topologies, cloud, and modern connectivity.
Network Implementation · 20%
What you will learnRouting, switching, wireless, physical infrastructure, virtualization, and cloud connectivity.
Network Operations · 19%
What you will learnDocumentation, monitoring, change management, disaster recovery, and administration.
Network Security · 14%
What you will learnSecurity concepts, attacks, access controls, segmentation, and hardening.
Network Troubleshooting · 24%
What you will learnMethodology, cabling, connectivity, services, performance, and troubleshooting tools.
02Month 01 · Weeks 3–4Operating System Foundations
Administer Linux systems, users, services, storage, permissions, automation, and host security.
Linux++
Operating System Foundations
Administer Linux systems, users, services, storage, permissions, automation, and host security.
CompTIA · XK0-006
CompTIA Linux+
System Management · 23%
What you will learnBoot, devices, storage, packages, processes, networking, and performance.
Services & User Management · 20%
What you will learnServices, users, groups, permissions, scheduling, localization, and remote access.
Security · 18%
What you will learnAuthentication, authorization, firewalls, certificates, logging, and hardening.
Automation, Orchestration & Scripting · 17%
What you will learnShell, version control, configuration management, containers, and automation.
Troubleshooting · 22%
What you will learnStorage, networking, resources, security, services, and application diagnosis.
03Month 02 · Weeks 5–7Cybersecurity Foundations
Build a connected understanding of threats, controls, secure architecture, operations, risk, and governance.
Security++
Cybersecurity Foundations
Build a connected understanding of threats, controls, secure architecture, operations, risk, and governance.
CompTIA · SY0-701
CompTIA Security+
General Security Concepts · 12%
What you will learnControls, cryptography, authentication, resilience, and zero trust.
Threats, Vulnerabilities & Mitigations · 22%
What you will learnThreat actors, attack surfaces, vulnerabilities, indicators, and remediation.
Security Architecture · 18%
What you will learnCloud, network, endpoint, data, application, and enterprise design.
Security Operations · 28%
What you will learnHardening, monitoring, vulnerability management, IAM, and incident response.
Program Management & Oversight · 20%
What you will learnGovernance, policy, risk, compliance, audits, and awareness.
04Month 03 · Weeks 8–11Red Team
Learn authorized reconnaissance, vulnerability analysis, ethical attack techniques, validation, and reporting.
CEH+
Red Team
Learn authorized reconnaissance, vulnerability analysis, ethical attack techniques, validation, and reporting.
EC-Council · CEH v13 AI
EC-Council Certified Ethical Hacker
Introduction to Ethical Hacking
What you will learnEthics, authorization, scope, the hacking lifecycle, attack frameworks, reporting, and AI-supported workflows.
Footprinting & Reconnaissance
What you will learnPassive and active reconnaissance, OSINT, search engines, social platforms, DNS, email, web, and organizational intelligence.
Scanning Networks
What you will learnHost discovery, port and service scanning, OS detection, scan techniques, evasion concepts, and interpreting results.
Enumeration
What you will learnEnumerating Windows, Linux, network services, DNS, SNMP, LDAP, NFS, SMTP, SMB, and cloud resources.
Vulnerability Analysis
What you will learnVulnerability research, scoring, scanners, configuration assessment, validation, prioritization, and remediation planning.
System Hacking
What you will learnAuthentication attacks, privilege escalation, persistence, file and data handling, evidence removal concepts, and defensive controls.
Malware Threats
What you will learnMalware families, behavior, delivery, analysis fundamentals, indicators, sandboxing, and defensive countermeasures.
Sniffing
What you will learnPacket capture, protocol analysis, switched-network attacks, detection, encryption, secure protocols, and monitoring controls.
Social Engineering
What you will learnHuman attack vectors, phishing, impersonation, physical techniques, awareness testing, policy, and prevention.
Denial-of-Service
What you will learnDoS and DDoS concepts, amplification, botnets, service exhaustion, detection, response, and resilience.
Session Hijacking
What you will learnSession identifiers, cookies and tokens, transport and application risks, detection, and secure session design.
Evading IDS, Firewalls & Honeypots
What you will learnSecurity-control behavior, traffic inspection, evasion concepts, decoys, detection engineering, and defensive tuning.
Hacking Web Servers
What you will learnServer enumeration, misconfiguration, authentication, patching, logging, common attack paths, and hardening.
Hacking Web Applications
What you will learnApplication architecture, input validation, authentication, sessions, access control, APIs, business logic, and secure testing.
SQL Injection
What you will learnInjection causes, discovery, database behavior, validation in safe labs, parameterization, and remediation.
Hacking Wireless Networks
What you will learnWireless standards, discovery, authentication, encryption, common exposure patterns, secure assessment, and hardening.
Hacking Mobile Platforms
What you will learnMobile architecture, app storage, permissions, communications, device management, testing, and defensive design.
IoT & OT Hacking
What you will learnConnected-device and industrial environments, protocols, trust boundaries, common weaknesses, safe testing, and segmentation.
Cloud Computing
What you will learnShared responsibility, identity, storage, compute, containers, serverless, misconfiguration, monitoring, and remediation.
Cryptography
What you will learnSymmetric and asymmetric cryptography, hashing, PKI, certificates, encryption use cases, attacks, and implementation safeguards.
05Month 04 · Weeks 12–14Blue Team
Investigate alerts and evidence, use SIEM and threat intelligence, manage vulnerabilities, and respond to incidents.
BTL1CySA++
Blue Team
Investigate alerts and evidence, use SIEM and threat intelligence, manage vulnerabilities, and respond to incidents.
Security Blue Team · Current syllabus
Blue Team Level 1
Security Fundamentals
What you will learnCore defensive concepts, networking, common attack paths, security controls, analyst workflow, evidence, and reporting foundations.
Phishing Analysis
What you will learnEmail headers, sender authentication, URLs, attachments, document behavior, sandboxing, indicators, verdicts, and response recommendations.
Threat Intelligence
What you will learnIntelligence lifecycle, indicator enrichment, source evaluation, adversary behavior, TTP mapping, pivoting, and actionable intelligence products.
Digital Forensics
What you will learnDisk and file systems, Windows artifacts, browser and user activity, memory concepts, evidence handling, timelines, and forensic interpretation.
SIEM
What you will learnLog sources, normalization, searches, filtering, correlation, dashboards, alert triage, detection logic, investigation timelines, and case notes.
Incident Response
What you will learnPreparation, classification, scoping, containment, eradication, recovery, evidence, communication, playbooks, and lessons learned.
CompTIA · CS0-003
CompTIA Cybersecurity Analyst (CySA+)
Security Operations · 33%
What you will learnSystem and network architecture, log and packet analysis, malicious indicators, threat intelligence, hunting, automation, SIEM, EDR, cloud tooling, and detection engineering.
Vulnerability Management · 30%
What you will learnScanning requirements, tool configuration, validation, prioritization, exposure factors, compensating controls, remediation, and secure configuration assessment.
Incident Response Management · 20%
What you will learnPreparation, detection, analysis, containment, eradication, recovery, evidence handling, forensics, communication, and post-incident improvement.
Reporting & Communication · 17%
What you will learnVulnerability and incident reports, metrics, stakeholder communication, compliance reporting, root cause, lessons learned, and actionable recommendations.
06Month 04 · Weeks 15–16GRC
Connect technical security to governance, risk, compliance, assurance, assessment, and audit reporting.
GRCA+
GRC
Connect technical security to governance, risk, compliance, assurance, assessment, and audit reporting.
OCEG · Current OCEG body of knowledge
OCEG GRC Auditor
GRC General Knowledge · 22%
What you will learnCore terms, principles, business drivers, integrated GRC benefits, organizational context, and relationships with risk, compliance, security, privacy, control, and audit.
Assurance Models & Assessment Design
What you will learnAssurance concepts, independence, objectivity, criteria, materiality, evidence quality, confidence, assessment types, and lines of accountability.
Planning the Assessment
What you will learnPurpose, scope, objectives, stakeholders, capability context, risks, criteria, resources, procedures, sampling, communication, and documentation.
Performing the Assessment · 67% domain
What you will learnGathering and evaluating evidence, interviewing, testing design and operation, analyzing strengths and weaknesses, forming conclusions, quality review, and issue management.
Reporting & Follow-up
What you will learnReport structure, audience needs, ratings, findings, recommendations, management responses, action tracking, escalation, and follow-up assurance.
GRC Assessment Framework · 11%
What you will learnApplying the OCEG GRC Assessment Framework based on assessment scope, including capability evaluation, procedures, documentation, and reporting.
How you learn
Knowledge becomes demonstrable performance.
Guided labs
Practice networking, systems, and security analysis in safe training environments.
Operations scenarios
Work through logs, alerts, vulnerabilities, and incidents like a security team.
Readiness reviews
Regular checkpoints identify what is mastered and what needs more focus.
Capstone
A connected assignment demonstrating analysis, decisions, and reporting.
Cohort controls
Sixteen weeks with a published learning and assessment plan.
Before paid enrollment opens, the complete cohort guide is published with the schedule, learning effort, prerequisites, tools, roles, attendance, assessment, support, and appeals.
Entry
A baseline check identifies learner level and foundational gaps before the pathway begins.
Attendance
Required attendance, calculation, absence impact, and make-up rules are published before enrollment.
Assessment
Self-checks, labs, scenarios, readiness reviews, and a capstone; weights and deadlines appear in the cohort guide.
Support
Published academic and technical channels, a one-business-day response target, and escalation for impactful incidents, complaints, and appeals.
HRDF professional certification support
What is HRDF support and how does it work?
Saudi Arabia’s Human Resources Development Fund supports national workforce skills. Under its professional certification program, eligible costs are reimbursed after an approved certification is earned and documentation is verified; this is not automatic funding for the bootcamp fee.
Review the official HRDF program page ↗01
Currently listed examplesCEH and CySA+ appear in current official HRDF materials. The list can change.
02
Core eligibilityThe applicant must be Saudi, and the certificate must be valid and no more than six months old when claimed.
03
Support limitUnder current program rules, support is limited to two certifications per person.
04
After verificationMembership fees are excluded, employer-paid costs cannot be claimed, and payment is made to an IBAN after verification.
The first cohort
Seven professional certifications in four months.
Register your interest to receive the start date, detailed schedule, and entry requirements when enrollment opens.
Register interest ↗