SAL1 — TryHackMe Security Analyst Level 1
TryHackMe's first formal certification, launched February 2025, targeting analysts with 0-2 years of experience. The SAL1 uses a hybrid format — MCQ sections alongside a SOC simulation environment — delivered as a 24-hour unproctored exam window. Credential is Credly-verified with a 3-year renewal cycle. Covers network traffic analysis, log analysis, SIEM investigation, basic incident response, and threat detection fundamentals. Priced at $349, making it accessible compared to GIAC or EC-Council equivalents. The unproctored format is its main weakness versus OSCP-class credentials, but the hands-on SOC sim component differentiates it from pure MCQ exams like CompTIA CySA+. Good entry-level option for analysts building a foundational credential before pursuing BTL1 or CDSA.
| Issuer | TryHackMe |
|---|
| Level | beginner |
|---|
| Domains | Defensive Security / SOC |
|---|
| Practical weight | 50% |
|---|
| Cost (USD) | 349 |
|---|
| Renewal | 3 years |
|---|
| Skills | threat_detection, siem_investigation, log_analysis, incident_response_process, network_traffic_analysis, security_operations, malware_analysis_basics |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap