TryHackMe

What it is

TryHackMe teaches cyber security through short, guided "rooms" that mix reading with hands on tasks inside a browser based virtual machine called the AttackBox, so there is no need to set up a home lab to get started. Rooms are grouped into learning paths. The beginner end includes Pre Security (computer and networking basics for people with no background) and Cyber Security 101, while intermediate paths cover SOC Level 1, Jr Penetration Tester, Security Engineer, and more specialised tracks like web application penetration testing and DevSecOps. Path names and structure change from time to time, so check the current list on the site before committing to one.

Free versus paid

The free plan gives access to the free rooms and a time-limited AttackBox, which is genuinely enough to work through a good amount of beginner content and decide whether the platform suits you. The paid Premium and MAX plans unlock the full learning paths, remove the machine limits and add certificates of completion. Current prices are shown on tryhackme.com/pricing and vary by region and billing period, so check that page rather than relying on a figure quoted elsewhere; plans and prices change.

Who it suits

People who learn better by doing than by reading, and who want feedback loops measured in minutes rather than days. It suits complete beginners starting with Pre Security through to people preparing for a SOC analyst or junior penetration testing role.

What you can do afterwards

Completing a path gives a concrete, demonstrable set of skills and, on paid tiers, a certificate that is reasonable to list alongside other evidence of practical ability. It pairs well with a foundational certification like Security+ (the theory) and something like OverTheWire's Bandit or Hack The Box Academy (more open ended practice).

Ethics and scope

Every exercise runs inside TryHackMe's own sandboxed machines built for this purpose. Only test systems you own or are explicitly authorised to test: your own lab, a CTF, or an in-scope bug bounty programme. Running the same techniques against systems without permission is illegal in most jurisdictions regardless of intent.

Common questions

Do I need programming experience first? No, Pre Security assumes none. Is the free tier enough to evaluate it? Yes. Many learners stay on the free plan for weeks before deciding whether to pay, though the machine time limit will feel tight once you are hooked. How does it compare to Hack The Box? TryHackMe is generally considered more guided and beginner friendly, while Hack The Box Academy and its labs lean more open ended and assume more independent troubleshooting.