Free government cybersecurity training programs run through several federal platforms, and the right one depends on who you are. CISA Learning is the main option open to the general public, with over 850 hours of self-paced courses. Veterans, transitioning service members, and military spouses have dedicated programs that can also cover certification exam fees. Students willing to commit to government service can get an entire cybersecurity degree paid for. DoD employees and contractors train through a separate system tied to their assigned work role.
Below is what each program offers, who qualifies, and how to get in.
CISA Learning: The Main Public Platform
CISA Learning is the federal government’s flagship cybersecurity training platform, run by the Cybersecurity and Infrastructure Security Agency. It replaced the older Federal Virtual Training Environment (FedVTE) in November 2024. The platform offers over 850 hours of self-paced online training mapped to the NICE Workforce Framework for Cybersecurity, ranging from foundational awareness to ethical hacking, cloud security, malware analysis, and risk management.1National Initiative for Cybersecurity Careers and Studies. CISA Learning
It’s open to CISA staff, contractors, veterans, military personnel, and the general public. You sign in through Login.gov using an email address and multi-factor authentication. A modern browser and a stable connection are enough for most courses, though some hands-on labs may require specific settings noted in the course description.1National Initiative for Cybersecurity Careers and Studies. CISA Learning
The platform includes certification prep courses for credentials like the Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM). Study is free; you’ll still pay the certifying body for the exam itself.
NICCS Education and Training Catalog
If CISA Learning doesn’t cover what you need, the National Initiative for Cybersecurity Careers and Studies maintains a catalog indexing over 9,700 courses from providers across the country, free and paid.2National Initiative for Cybersecurity Careers and Studies. Education and Training Catalog You can filter by delivery method (classroom, online self-paced, or online instructor-led), proficiency level, audience type, and NICE Framework work role. You can also search by competency area, including artificial intelligence security, cloud security, cryptography, supply chain security, and operational technology security. An interactive map helps you find in-person training near you.
NIST also maintains a curated list of free and low-cost online cybersecurity learning content, organized into categories including career and professional development, educator training and curriculum, and employee awareness training. Entries range from Cisco Networking Academy and IBM Security Learning Academy to open resources like SANS Cyber Aces Online and TryHackMe.3National Institute of Standards and Technology. Free and Low Cost Online Cybersecurity Learning Content
Programs for Veterans, Service Members, and Military Spouses
Several free programs specifically target the military-connected population, and some lead directly to industry certifications employers require for hiring.
Onward to Opportunity
Onward to Opportunity (O2O), run by Syracuse University’s D’Aniello Institute for Veterans and Military Families, is a no-cost career training program for transitioning service members and military spouses. Its cybersecurity track prepares participants for CompTIA SecurityX, CompTIA PenTest+, CompTIA CySA+, and Cisco Certified Support Technician (CCST) Cybersecurity.4D’Aniello Institute for Veterans and Military Families. Learning Pathways
Watch one detail: exam fees under O2O are covered only for participants who are currently unemployed. Active duty service members qualify for exam fee coverage only during their final six months of service. National Guard members, reservists, veterans, and military spouses who are employed can still enroll and receive training materials, advising, and certification guidance, but the exam fee is on them.4D’Aniello Institute for Veterans and Military Families. Learning Pathways
SANS Cyber Academies
The SANS Cyber Academies program is a competitive, aptitude-based scholarship program for people from outside the cybersecurity industry. It is open to all U.S. citizens and legal permanent residents, not only veterans; selection is based on aptitude testing. The program includes SANS training and can lead to GIAC certifications.5SANS Institute. SANS Cyber Academies
GI Bill Certification Exam Reimbursement
If you have GI Bill benefits, you can use them to cover cybersecurity certification exams up to $2,000 per test. This applies under the Post-9/11 GI Bill, Montgomery GI Bill Active Duty, Montgomery GI Bill Selected Reserve, and Survivors’ and Dependents’ Educational Assistance. The VA reimburses registration and administrative fees, and the benefit applies even if you don’t pass, need to retake the exam, or are recertifying. The VA charges your entitlement based on the reimbursement amount.6U.S. Department of Veterans Affairs. Licensing and Certification Tests and Prep Courses
This benefit pairs well with free training on CISA Learning or through O2O: prepare at no cost, then use the GI Bill for the exam. Certifications like Security+, CISSP, and CISM often run $300 to $750 per attempt.
CyberCorps Scholarship for Service
The CyberCorps Scholarship for Service (SFS) program, managed by the Office of Personnel Management and funded through National Science Foundation grants, covers up to three years of undergraduate or graduate cybersecurity education. In exchange, recipients must work for the federal government (or a state, local, or tribal government) in a cybersecurity-related position for a period equal to the length of the scholarship.7U.S. Office of Personnel Management. CyberCorps Scholarship for Service
You need to meet federal employment criteria and be able to obtain a security clearance if the position requires one. The program is available at designated institutions, which include universities and some community colleges participating through the National Centers of Academic Excellence in Cybersecurity program.
DoD Cyber Workforce Training
Defense Department personnel and contractors train through a separate ecosystem. The DoD Cyber Exchange is the central hub, with publicly releasable training on the open site and restricted content requiring a Common Access Card.8DoD Cyber Exchange. Cyber Exchange Home
All DoD civilian employees, service members, and contractors assigned to cyberspace workforce positions must meet qualification standards under the DoD 8140 framework. DoD Directive 8140.01 establishes the DoD Cyberspace Workforce Framework as the authoritative reference for identifying and tracking cyberspace positions, and DoD Manual 8140.03 directs personnel to become fully qualified and documented in authoritative personnel systems.9Department of Defense. DoD Directive 8140.01 – Cyberspace Workforce Management10Department of Defense Chief Information Officer. DoDM 8140.03 – Cyberspace Workforce Qualification and Management Program
The qualification matrix maps commercial certifications, DoD-owned training, and educational options to specific work roles at basic, intermediate, and advanced proficiency levels.11DoD Cyber Exchange. DoD 8140 Qualification Matrices There’s no single universal certification; your required credentials depend on your assigned work role. Check the current qualification matrix (last updated September 2025) for the options mapped to your position.
State and Local Free Training
State and local governments are increasingly offering free or subsidized cybersecurity training using federal grant dollars. The State and Local Cybersecurity Grant Program (SLCGP) is the primary funding mechanism. States must distribute at least 80% of their SLCGP allocation to local government entities, with at least 25% going to rural areas, defined as jurisdictions with fewer than 50,000 residents.12Cybersecurity and Infrastructure Security Agency. State and Local Cybersecurity Grant Program13Cybersecurity and Infrastructure Security Agency. FY 2023 SLCGP NOFO FAQs
These grants fund activities including security training to raise the skills and certification levels of local IT employees. Many states channel the money through community colleges, which then offer tuition-free courses or boot camps for eligible residents. Eligibility typically requires proof of state residency and may include a high school diploma or passing a skills assessment.
Finding these programs takes some legwork because they’re decentralized. Start with your state’s workforce development board website or a local community college continuing education portal. Availability varies significantly by state.
Completion Certificates Are Not Industry Certifications
One distinction worth understanding before you start: free government training and industry certifications are not the same thing. Completing a CISA Learning course gives you a certificate of completion, which is useful for professional development records and compliance training requirements but is not the same as holding a CompTIA Security+ or CISSP credential. Those require passing a proctored exam administered by the certifying body, usually at a cost of several hundred dollars.
CISA Learning does include certification prep for exams like the CISSP and CISM, so you can study for free and pay only for the exam.1National Initiative for Cybersecurity Careers and Studies. CISA Learning Veterans can combine this with the VA’s exam reimbursement benefit. For everyone else, the free training still builds real skills, and many hiring managers value hands-on knowledge over credentials alone at the entry level.