Skip to content

Stop Collecting Certificates. Build Evidence.

Certificates are useful.

But being able to show someone what you actually did is better.

Keep a little portfolio of things you've built or investigated.

For example:

  • CTF write-ups
  • Python scripts
  • Home lab diagrams
  • Phishing email analysis
  • Packet captures you've investigated
  • Detection rules
  • Malware analysis notes
  • OSINT investigations
  • Vulnerability research
  • Things you broke and then fixed

You could keep it in GitHub, a personal website or even a well-organised folder of Markdown files.

Don't publish passwords, tokens, personal information or sensitive material.

The important bit

Don't just write:

"I completed a TryHackMe room."

Write:

"Here's what I was trying to solve, what I tried, what didn't work, what I discovered and how I eventually solved it."

Being able to explain your thinking is a serious skill.