Guide · Open source
How to use 90DaysOfCyberSecurity: a 90-day study plan guide
Updated · written with AI from the project's own documentation and checked against our catalogue data
90DaysOfCyberSecurity is a free, MIT-licensed GitHub repository that lays out a 90-day, self-paced cybersecurity study plan with daily tasks and links to outside courses, tutorials and labs. It suits beginners, IT staff moving into security, students and self-learners who want a clear order to study in. This guide explains how to work through it, what each block covers and how to track your progress.
90DaysOfCyberSecurityfarhanashrafdev/90DaysOfCyberSecurity · ★ 20.8k · MIT Install options & downloads Quick start
- 1Read Start Here. Read the Start Here section first to learn the time budget and the rule to follow the order.
- 2Copy or fork the plan. Clone the repository with the git command, or fork it on GitHub, or copy the plan into a notes file.
- 3Begin Days 1-7. Watch Professor Messer's Network+ playlist and complete any related practice questions.
- 4Work through the foundation. Complete Security+, then Linux, before moving to Python and traffic analysis.
- 5Build technical skills. Move through Python, traffic analysis, Git and ELK, using the linked tutorials and labs.
- 6Choose one cloud platform. Pick GCP, AWS or Azure for Days 71-77; the README says any one works.
- 7Review and practise. Revisit Days 1-77 for weak areas, then work through TryHackMe challenges during Days 78-90.
What the repository is and what it is not
The repository is a reading and task plan, not software. The source describes it as a structured, day-by-day study plan that covers Network+, Security+, Linux, Python, traffic analysis, Git, ELK, AWS, Azure and hacking, and it points to external resources for each module.
Because it is a curriculum, there is nothing to install or run. You work through it by reading, watching videos and completing exercises on other sites.
- Format: a day-by-day plan with linked resources
- Licence: MIT
- Prerequisites: none listed; the README says basic familiarity with computers, networks or programming helps
Get a copy of the plan (optional)
You can read the plan online on GitHub. If you want a local copy, the README gives this command to clone the repository.
The README also suggests forking the repo or copying the plan into a notes file so you can tick off each day.
git clone https://github.com/farhanashrafdev/90DaysOfCyberSecurityRead the Start Here rules before Day 1
The Start Here section sets the ground rules. Aim for 1-2 focused hours a day. Day numbers are a guide, not a deadline, so spend longer on hard topics.
Follow the order. Days 1-28 (networking, security basics and Linux) are the foundation for the rest, and the README says not to skip ahead to hacking.
- Certifications are optional; you do not need to sit the Network+ or Security+ exams to follow the plan
- Questions go to GitHub Discussions; Issues are for broken links and content fixes
Follow the daily modules in order
The plan is split into blocks. Each block lists videos, courses or labs to complete. Work through them in order:
- Days 1-7: Network+ (Professor Messer's N10-009 playlist)
- Days 8-14: Security+ (Professor Messer's SY0-701 playlist, with Pete Zerger's SY0-701 playlist as an alternative)
- Days 15-28: Linux (Linux Journey, Cisco NetAcad Linux Unhatched, LabEx Linux labs)
- Days 29-42: Python (freeCodeCamp course and several Python sites)
- Days 43-56: Traffic Analysis (Wireshark, TCPdump and Suricata guides)
- Days 57-63: Git (Codecademy, Git Immersion, Try Git, Learn Git Branching)
- Days 64-70: ELK (Logz.io guide and official Elastic docs)
- Days 71-77: Cloud platforms (GCP, AWS or Azure; the README says any one works)
- Days 78-84: Review and practice (review Days 1-77, TryHackMe challenges, optional home lab)
- Days 85-90: Hacking
- Bonus: Days 91-95 cover a one-page resume and where to apply
Use the free resources and check the cost
The README says everything is free, but it also notes that some sites put content behind a paywall. Where that happens, use the alternatives listed in the same section or in learn.md.
For example, Codecademy's Python track has a free tier that covers the basics, while later lessons need a subscription.
- Check each resource's terms yourself before you start, since the repository does not control third-party sites
Track your progress
Fork the repository or copy the plan into a notes file. Tick off each day when you finish it. Return to Days 1-77 during Days 78-84 to review weak areas.
What people use it for
- A beginner who wants a free, ordered list of networking and security topics to study.
- An IT technician preparing to move into a security analyst role who wants to skip nothing in the foundation.
- A student who wants a structured path that runs alongside a computer science or networking course.
- A developer who wants to learn the basics of secure infrastructure and log analysis with ELK.
- A self-learner who prefers a checklist of free resources and wants to tick off progress day by day.
Frequently asked questions
Is 90DaysOfCyberSecurity free?
The README says everything in the plan is free, and the repository is licensed under MIT. Some linked sites put content behind a paywall, and the README says to use the listed alternatives when that happens.
Do I need to install anything to use 90DaysOfCyberSecurity?
No. The repository is a reading and task plan, so there is nothing to install. The only command in the README is git clone, which is optional and only copies the plan to your computer.
What are the prerequisites for 90DaysOfCyberSecurity?
The source lists no prerequisites. It says no prior experience is required, though basic familiarity with computers, networks or programming will help.
Do I need to take the Network+ or Security+ exam to use this plan?
No. The README says certifications are optional and that you do not have to sit the exams to follow the plan or to get a first job.
Is 90DaysOfCyberSecurity good for experienced security professionals?
The README describes the plan as foundational, so it is aimed at beginners and career changers. Experienced practitioners looking for advanced or specialised material are likely to want something else.
Are there alternatives to 90DaysOfCyberSecurity?
The source does not list comparable projects. You can use the resources it links, such as Professor Messer's playlists, TryHackMe and the Linux Journey tutorials, as your own path.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
Use 90DaysOfCyberSecurity if you are a beginner, a career changer or a student who wants a clear, free, ordered checklist of cybersecurity topics with links to outside courses. Skip it if you want software to install, advanced material, or only exam preparation, since the README describes it as a foundational reading plan.
Install options & downloads