Skip to content
induwara.lk
induwara.lkSri Lanka · Education

Cyber Security Courses in Sri Lanka: Cost and Pathways

Every route into cyber security here, with the cost each institution actually publishes. Say where you are now and what you can spend.

By Induwara AshinsanaUpdated Oct 11, 2026
Compare routes into cyber securitySri Lanka
Institution-published · 2026-10-11
Where you are now
Rs

Leave it blank to see everything. Routes above your budget are still listed, just separately.

What you want

A master's counts as a degree. Free covers the no-charge courses only.

Try
Routes that admit you
18

At this stage, for what you picked

Cheapest published total
Rs 0

Cisco NetAcad, Introduction to Cybersecurity

Cheapest cyber-security award
Rs 0

Cisco NetAcad, Introduction to Cybersecurity

15 routes with a published cost

  • Introduction to Cybersecurity

    Cisco Networking Academy

    Rs 0

    Free courseNamed for cyber securitySelf-paced
    Who gets in
    Self-enrolment, no qualification required. Cisco publishes it as a beginner course.
    What it leads to
    Threat and defence vocabulary, plus a Cisco digital badge. The honest first step after O/L, and the cheapest way to find out whether the field suits you.
    • The Cisco page titles itself “Introduction to Cybersecurity by Cisco: Free Online Course”.
  • TryHackMe free tier

    TryHackMe

    Rs 0

    Free courseNamed for cyber securitySelf-paced, browser based
    Who gets in
    Sign-up only. No qualification required.
    What it leads to
    Hands-on practice in a browser, with no lab hardware to buy. The free tier limits how many rooms you can reach per week.
    • TryHackMe's pricing page publishes a “Join for FREE” tier next to its paid plans.
    TryHackMe's own pageRead 2026-10-11
  • TryHackMe Premium, 1 month

    TryHackMe

    Rs 2,700

    Rs 2,700 a month over 1 months

    CertificationNamed for cyber security1 month of access
    Who gets in
    Open entry. No prior qualification.
    What it leads to
    Every learning path unlocked for a month, which is enough to finish one path and decide whether to commit to a year.
  • TryHackMe Premium, 1 year

    TryHackMe

    Rs 14,900

    Rs 1,242 a month over 12 months

    CertificationNamed for cyber security12 months of access
    Who gets in
    Open entry. No prior qualification.
    What it leads to
    A year of guided hands-on practice. The usual preparation for a practical exam such as the eJPT.
  • SC-200: Security Operations Analyst Associate

    Microsoft

    Rs 17,500

    CertificationNamed for cyber securityOne exam
    Who gets in
    Open entry. Microsoft describes the audience as a working security operations analyst rather than publishing a prerequisite.
    What it leads to
    An associate-level SOC analyst credential on Microsoft Defender and Sentinel, which is what most Sri Lankan managed-security employers run.
  • SC-900: Security, Compliance and Identity Fundamentals

    Microsoft

    Rs 17,500

    CertificationNamed for cyber securityOne exam
    Who gets in
    Open entry. Microsoft publishes no prerequisite for this exam.
    What it leads to
    The cheapest named security certification on this list. Useful on a CV for a help-desk or junior SOC application.
  • NSE 4 / FCP FortiOS Administrator

    Fortinet

    Rs 33,000

    CertificationNamed for cyber securityOne exam
    Who gets in
    Open entry. Fortinet publishes recommended training, not a prerequisite.
    What it leads to
    Firewall administration on the vendor most Sri Lankan enterprises and ISPs actually deploy. A network-security job rather than a research one.
  • eJPT: Junior Penetration Tester

    INE Security

    Rs 64,900

    CertificationNamed for cyber securityOne practical exam, free retake included
    Who gets in
    Open entry. INE publishes no prior qualification requirement.
    What it leads to
    A hands-on entry-level penetration testing certification. Graded on what you actually exploit in a lab, not on multiple choice.
    • INE's page states that a regular voucher expires 180 days after purchase and includes one free retake within 14 days of a fail.
  • CompTIA CySA+ (CS0-003)

    CompTIA

    Rs 66,200

    CertificationNamed for cyber securityOne exam
    Who gets in
    Open entry. CompTIA recommends prior experience but publishes no enforced prerequisite.
    What it leads to
    The blue-team analyst certification: threat detection, log analysis and incident response. Commonly named in Sri Lankan SOC job adverts.
  • CompTIA PenTest+ (PT0-003)

    CompTIA

    Rs 66,200

    CertificationNamed for cyber securityOne exam
    Who gets in
    Open entry. CompTIA recommends prior experience but publishes no enforced prerequisite.
    What it leads to
    The offensive-side certification: scoping, exploitation and reporting for penetration tests.
  • CompTIA SecurityX (CAS-005)

    CompTIA

    Rs 66,200

    CertificationNamed for cyber securityOne exam
    Who gets in
    Open entry. CompTIA positions it as an expert-level exam and recommends substantial experience.
    What it leads to
    Formerly CASP+. The security-architect certification, for people already working in the field.
  • Bachelor of Information Technology (External)

    University of Colombo School of ComputingAwarded by University of Colombo

    Rs 215,000

    Rs 5,972 a month over 36 months

    State degreeGeneral computing3 years, 3 academic levels
    Who gets in
    Three A/L passes in one sitting, or the UCSC Foundation in IT, or an HNDIT verified by SLIATE, or an NVQ 5 in IT; plus six O/L passes with three credits including Mathematics and English.
    What it leads to
    A state-university IT degree with no Z-score and no campus place needed. The usual base for a security certification ladder on top.
    • The total is the one already transcribed and reconciled in the external degree finder, not a second copy. Registration and examination fees per level, plus the application fee.
  • Level 5 Pearson BTEC HND in Digital Technologies (Cyber Security)

    ESOFT Metro CampusAwarded by Pearson, United Kingdom

    Rs 546,250 to Rs 696,250

    Diploma or HNDNamed for cyber security4 semesters, duration in months not published
    Who gets in
    ESOFT publishes no entry requirement on this programme page, so it is listed at every stage. Ask the branch what it will accept.
    What it leads to
    A Pearson Level 5 HND, which is the entry qualification for the Kingston and London Met top-up degrees further down this list.
    Published fee lines
    Total investment, online delivery, registration included: Rs 546,250
    • Sri Lankan student fees by delivery mode: online Rs 546,250, weekday Rs 646,250, weekend Rs 696,250. The lowest published figure is used for ranking and the range is shown in full.
    • ESOFT publishes one all-in “Total investment” figure per delivery mode, and says it includes the registration fee and the university fee. There is no second fee figure on the page to reconcile it against.
  • Bachelor of Information Technology (Major in Cyber Security)

    NSBM Green UniversityAwarded by Victoria University, Australia

    Rs 2,315,000

    Rs 64,306 a month over 36 months

    Private degreeNamed for cyber security3 years full time
    Who gets in
    Three A/L passes in a single sitting in core subjects, local or international equivalent. London AS Levels are not accepted. An English language requirement applies, and applicants may face a preliminary interview.
    What it leads to
    An Australian-awarded IT degree majoring in cyber security. Years 2 and 3 can be taken at NSBM or at Victoria University in Melbourne.
    Published fee lines
    Tuition: Rs 2,300,000 · Registration fee: Rs 10,000 · Library fee: Rs 5,000
    • NSBM's fee card contradicts itself: its three year lines add to Rs 2,200,000, its six instalment lines add to Rs 2,300,000, and Rs 2,300,000 is the total it prints. The instalments are what a student pays and they match the printed total, so the instalment route is used here.
  • BSc (Hons) in Cyber Security

    Sri Lanka Institute of Information Technology

    Rs 3,050,000

    Rs 63,542 a month over 48 months

    Private degreeNamed for cyber security4 years, 8 semesters
    Who gets in
    Three S passes in one sitting in the Physical Science or Engineering Technology stream; or three S passes in any other stream plus a C in O/L Mathematics and the SLIIT IT Bridging Programme. A/L ICT with O/L Maths at C exempts you from the bridging programme.
    What it leads to
    A SLIIT-awarded honours degree named for cyber security, with a mandatory internship. SLIIT's page lists ethical hacking, digital forensics, network security and risk and compliance roles.
    Published fee lines
    Tuition, 8 semesters: Rs 3,050,000
    • SLIIT calls the fee all-inclusive: lectures, tutorials, examinations, library and computer laboratory access. It publishes no separate registration fee on this page.

3 where the cost is not published

These exist and admit you, but the institution publishes no fee. Ask it directly, and do not trust a number you find on a blog.

  • Computing or computer engineering degree at a state university

    University Grants Commission universities

    Cost not published
    State degreeGeneral computing3 to 4 years
    Who gets in
    Three A/L passes plus a Z-score at or above the cut-off for the course and your district. Selection is 40% all-island merit, 55% district quota and 5% educationally disadvantaged districts.
    What it leads to
    A UGC-recognised computing degree. Cyber security is a specialisation area and a final-year elective rather than the name on the certificate.
    On cost
    No tuition fee is charged for a UGC-allocated undergraduate place. Each university sets its own registration, faculty and examination charges and none of them publishes those together, so no total is claimed here.
    • No state university in the Ministry of Higher Education Section 25A list awards a bachelor's degree titled for cyber security. Check a specific award with the UGC-approved degree checker before you pay anyone.
  • Higher National Diploma in Information Technology (HNDIT)

    Sri Lanka Institute of Advanced Technological Education

    Cost not published
    Diploma or HNDGeneral computing2 1/2 years, including 6 months industrial training
    Who gets in
    A/L qualifications in the Maths, Bio Science, Commerce or Arts stream, with ordinary passes in O/L English and Mathematics. Selection is by A/L merit order plus an aptitude or IQ test.
    What it leads to
    A state HND that SLIATE's own page lists as carrying exemptions into the OUSL and University of Moratuwa IT degrees, and which the UCSC BIT accepts as entry.
    On cost
    SLIATE publishes Rs 12,000 per semester for part-time study and a Rs 500 application payment. It does not publish a full-time fee, and it does not say how many semesters are charged, so no total is claimed.
  • BSc (Hons) in Cyber Security

    SLTC Research University

    Cost not published
    Private degreeNamed for cyber security4 years, Padukka campus
    Who gets in
    Three S passes in one sitting in the Physical Science or Engineering Technology stream; or three S passes in any stream with an S in A/L ICT; or three S passes in any stream plus an approved bridging course. A C in O/L Mathematics and a pass in English are required on every route.
    What it leads to
    An honours degree named for cyber security. “Bachelor of Science Honours in Cyber Security” is listed for SLT Campus in the Ministry of Higher Education's Section 25A recognised-degree table from 13 January 2021.
    On cost
    SLTC publishes the full curriculum, the duration and the entry requirement, but no fee figure anywhere on the programme page. Ask the admissions office for the current schedule.

Certification-first paths

Two orders worth buying in if you are not taking a degree, priced from the same rows as the list above. A budget above Rs 10,000,000 is not a cap on anything here.

Cheapest start

Rs 20,200

Find out whether the field suits you before spending real money. Free course, one month of hands-on practice, then one cheap named certification.

  1. 1.Introduction to CybersecurityRs 0
  2. 2.TryHackMe Premium, 1 monthRs 2,700
  3. 3.SC-900: Security, Compliance and Identity FundamentalsRs 17,500

Job-ready, practical

Rs 146,000

A year of hands-on practice, a practical entry-level penetration testing exam, then the blue-team analyst certification Sri Lankan SOC adverts ask for.

  1. 1.TryHackMe Premium, 1 yearRs 14,900
  2. 2.eJPT: Junior Penetration TesterRs 64,900
  3. 3.CompTIA CySA+ (CS0-003)Rs 66,200

Every fee, duration and entry requirement above is transcribed from the institution's own page, linked on each card and read on the date shown. Certification prices are the live induwara.lk store price. There are no averages, no estimates and no third-party figures here. The full source list is further down this page.

How it works

Searching for a cyber security course in Sri Lanka returns listicles that mix a four-year honours degree, a two-week bootcamp and a YouTube playlist into one ranked list, and quote fees nobody can trace. This tool does the opposite. It carries 24routes, each one read from the institution or vendor's own page on the date shown on its card, and it filters rather than ranks by opinion. No route is called best, because that depends on money and time you have and this page does not.

Three things decide what you see. Where you are now is matched against the published entry requirement: a route appears only if its own page says your stage can enter it. Where a page publishes no entry requirement at all, the route is shown at every stage and labelled as such, rather than given a requirement we invented. Your budgetis applied inclusively, so a budget exactly equal to a route's total keeps that route. Anything above the budget is still listed, in its own group, because the next step up is information too. What you want narrows to degrees, diplomas, certifications or the free courses.

The arithmetic is all of the following and nothing else:

  1. Total = the sum of the fee lines the institution publishes. Totals are derived from those lines on every render rather than stored beside them, so a stored total cannot drift from its own components. Where a page publishes a per-delivery-mode range, the lowest published figure is used for ranking and the full range is shown.
  2. Per month = total divided by the published duration in months. Blank where a page does not publish a duration, which is more common than it should be.
  3. Certification pricesare read live from this site's store on every request, so they match the shop to the rupee and cannot go stale. Vendor exam fees in dollars are a separate calculation and belong to the certification exam cost calculator.
  4. The University of Colombo external BIT totalis not re-transcribed here. It is read through the external degree finder, which already holds the UCSC fee schedule and reconciles it against the university's own per-level totals (last checked 2026-09-24). One dataset, one module: a second copy of a fee table is how a figure goes quietly stale.

There is no interest, no discount rate and no inflation in any of this. The financing cost of an instalment plan is a different calculation and belongs to the loan EMI calculator. Hostel fees, transport, laptops and living costs are out, because no institution publishes them as a rule anyone can apply and a guess there would misstate the number a family has to find.

A route whose cost the institution does not publish carries no number at all. It is listed with whatever the institution does publish and a line telling you to ask, which is why 5 of the 24 routes here show no total. SLIATE is the clearest case: it publishes Rs 12,000 per semester for part-time HNDIT and does not say how many semesters are charged, so multiplying one by a guess at the other is exactly the mistake this rule exists to prevent.

Verified two ways. The 11worked-example checks run against the live functions on every render, and all of them pass. Each priced route's fee is also rebuilt from the institution's published schedule of semesters or instalments, ignoring the figure we hold: 2 of 2 reconcile to the rupee, and 1 of 1 match the total the institution prints itself.

Worked examples

Dinithi, O/Ls done, Rs 500,000 saved

After O/L, budget Rs 500,000, any kind of qualification

  1. Stage filter: keeps only routes whose published entry rule admits an O/L leaver, plus routes with no published entry gate.
  2. Result: every degree, HND and diploma is out. They all ask for A/L, a Level 5 qualification or a degree.
  3. In budget: Cisco Introduction to Cybersecurity Rs 0, TryHackMe free tier Rs 0, then the open-entry certifications from Rs 2,700 up to Rs 66,200.
  4. Over budget: ESOFT's Level 5 HND in Digital Technologies (Cyber Security), from Rs 546,250. Rs 46,250 more than she has.
  5. Cheapest ladder that fits: Cisco NetAcad then TryHackMe then Microsoft = Rs 20,200.
  6. Honest answer: start free, bank the rest, and revisit the HND after A/L.

Kavindu, three A/L passes, wants a degree

After A/L, budget Rs 3,000,000, degrees only

  1. UCSC Bachelor of Information Technology (External): Rs 215,000 total over 36 months = Rs 5,972 a month. General computing, not a cyber security title.
  2. NSBM BIT majoring in Cyber Security: tuition Rs 2,300,000 + registration Rs 10,000 + library Rs 5,000 = Rs 2,315,000 over 36 months = Rs 64,306 a month.
  3. Over budget: SLIIT BSc (Hons) in Cyber Security at Rs 3,050,000, which is Rs 50,000 past the cap. Raise the budget by Rs 50,000 and it reappears.
  4. No total published: a state university computing place (no tuition fee, other charges not published together) and SLTC's BSc (Hons) in Cyber Security.
  5. Reading: the Z-score route is worth exhausting first, because it costs nothing in tuition.

The edge case: total cheapest is not monthly cheapest

SLIIT's 4 years against NSBM's 3 years, both named for cyber security

  1. SLIIT: 3 semesters at Rs 375,000 = Rs 1,125,000, then 5 at Rs 385,000 = Rs 1,925,000. Total Rs 3,050,000 over 48 months = Rs 63,542 a month.
  2. NSBM: instalments 450,000 x 2 + 350,000 x 2 + 350,000 x 2 = Rs 2,300,000, plus Rs 15,000 of one-off fees. Total Rs 2,315,000 over 36 months = Rs 64,306 a month.
  3. NSBM is Rs 735,000 cheaper in total and about Rs 764 dearer every month, because 36 months is a shorter run than 48.
  4. A family budgeting monthly and a family budgeting in total pick different degrees here, which is why both figures are on every card.

Cyber security awards in Sri Lanka and what they cost

Only awards whose title names cyber security, network security or digital forensics. Certifications and free courses are in the tool above. Costs are the institution's own published figures, read 2026-10-11.

AwardProviderTypePublished total
Level 5 Pearson BTEC HND in Digital Technologies (Cyber Security)ESOFTDiploma or HNDRs 546,250 to Rs 696,250
BEng (Hons) Computer Networking and Cloud Security (top up)ESOFTTop-up degreeRs 780,000
MSc in Network & Information SecurityESOFTPostgraduateRs 829,000
BSc (Hons) in Cyber Security & Digital Forensics (top up)ESOFTTop-up degreeRs 880,000
BSc (Hons) Computing Science in Network & Network Security (top up)ESOFTTop-up degreeRs 880,000
Bachelor of Information Technology (Major in Cyber Security)NSBMPrivate degreeRs 2,315,000
BSc (Hons) in Cyber SecuritySLIITPrivate degreeRs 3,050,000
BSc (Hons) in Cyber SecuritySLTCPrivate degreeNot published
MSc Cyber Security and ForensicsIITPostgraduateNot published
MSc Cyber SecurityAPIITPostgraduateNot published

Each row links to the page it came from inside the tool above. Verify any figure there before you pay anything.

What could not be read, and why

These institutions run cyber security or security-adjacent programmes whose cost could not be read from the institution itself on 2026-10-11. They are named rather than quietly left out, because “we could not read it” and “it does not exist” are different facts and only one of them is ours to state. Coverage widens when a source becomes readable, not when a plausible number turns up on a blog.

  • General Sir John Kotelawala Defence University (KDU)

    Every page answers a Cloudflare interactive challenge with HTTP 403 from this server, so neither the programme list nor any fee could be read.

    https://www.kdu.ac.lk/
  • National Institute of Business Management (NIBM)

    The site renders its course catalogue in the browser and serves an empty shell to a fetch. /cybersecurity returns the 404 page, and no readable programme fee page was found.

    https://www.nibm.lk/
  • CINEC Campus

    The site answers a plain GET with HTTP 405 from this server, so no programme page could be read.

    https://www.cinec.edu/
  • Horizon Campus

    Its cyber security page carries no fee text at all, and its own fee link goes to a payment form that asks the student for the amount.

    https://horizoncampus.edu.lk/cyber_security
  • University Grants Commission

    ugc.ac.lk serves its HTML pages with an HTTP 500 status line over a full body, so any fetch that honours status codes refuses the site. The statistics PDFs return a clean 200 and are what this tool cites.

    https://www.ugc.ac.lk/

Frequently asked questions

Sources & references

Every fee, duration and entry requirement on this page was read from the page above it on 2026-10-11, and is due a re-check by 2027-04-09. Certification prices are read live from this site's store on every request. If a figure here no longer matches the institution's page, the institution's page wins. Email me and it gets fixed the same day.

Related tools

Working out whether you have the Z-score for a state computing place? Use the A/L Z-score calculator. Buying an exam voucher instead? The cyber security vouchers priced in the tool above are sold here.

Comments & feedback

Spotted a bug or want an improvement? Tell us, our team reviews every comment, and good ideas get built. Comments are public and anonymous.

Know a cyber security programme in Sri Lanka that publishes its fee and is missing here?

Email me at [email protected] with the link, and it goes in the same day.