Cyberbit is thrilled to announce that RangeForce, Inc (a wholly owned subsidiary of Cyberbit Inc. since September 2025) has four certificate programs that have earned accreditation from the ANSI National Accreditation Board (ANAB). These learning paths are available to customers in the Cyberbit Readiness platform. 

For anyone building a cyber team that performs when it counts, this accreditation further enhances what a completed learning path in our cloud-based cyber range is worth. 

Accreditation and the Cyberbit Readiness program both answer the question every security leader eventually has to face: how do you know the upskilling your team is doing actually produces capability? 

Most certificates in cybersecurity can’t answer it. ANAB-accredited ones can.  

ANSI/ASTM E2659, “Standard Practice for Certificate Programs,” gives certificate issuers — and, by extension, the organizations and individuals who rely on their credentials — a common definition of quality. Earning ANAB accreditation means an independent certification body reviewed our programs against an internationally recognized standard for quality certificate programs. A completed path is no longer just a claim we make about our own content; it’s also externally validated. 

Why this is harder than it looks 

A certificate program requires more than creating content.  A high-quality certificate program is built around ensuring quality and specific learning outcomes.  It requires documented policies and procedures across roughly a dozen-plus operational areas, specifically highlighting: 

• Program design 

• Defined learning outcomes 

• Assessment methodology 

• External review  

Before the standard existed, there was no industry consensus for what a high-quality certificate program entailed, and “certificate program” was often used loosely to describe any training that ended in a certificate.  

Cybersecurity accreditations 

There are two main ways to earn accreditation: personnel certification bodies and certificate issuers. And the approaches are different. 

A certification body assesses a candidate against a defined scheme, typically a large knowledge-focused test, issues the credential, and requires periodic renewal, typically via continuing professional education (CPEs), to maintain it. Certification bodies operate under the ISO/IEC 17024 international standard and tell an employer, “This person has the knowledge this role requires.” ISC2®, GIAC®, EC-Council®, and CompTIA® offer several certifications in cybersecurity, and the market relies on them for that validated knowledge.  

Certificates verify what has been accomplished, and are governed by ANSI/ASTM E2659, telling an employer, “This person completed rigorous, defined training and demonstrated the skills to apply it.” We chose this route because it connects the learning experience and illustration of skills in our cyber range directly to the certificate: the same content that teaches also produces the proof, so the assessment validates applied skill.  From the first module through the Capstone (a graded, hands-on lab), the content and the assessment are accredited as one. 

Choosing the certificate path was deliberate for us. Very few cybersecurity vendors have cleared the certificate issuer bar, and the reason is instructive. It’s hard to build content that actually drives both knowledge and skill-based outcomes. Games and leaderboards prove someone showed up, not that they have the skills to perform the work. 

“The standard we care about is if a defensive team is ready when it counts,” said David Etue, our CEO. “Getting there depends on hands-on experiences that are validated to build genuine skills and knowledge, which is exactly what this accreditation confirms. Readiness is something you demonstrate, not something you attend.” 

The four accredited paths 

These programs are now accredited to the ANSI/ASTM E2659 standard. Each one is the set of capabilities of a specific recognized cyber workforce role, ending in a hands-on capstone.   

These certificate programs map directly to U.S. DoD Cyber Workforce Framework (DCWF) work roles and their associated knowledge, skills, abilities, and tasks (KSATs). DCWF is closely aligned with the foundations of NIST NICE and adds role-specific detail that is especially useful for training design. In particular, DCWF distinguishes between Core KSATs, which represent the essential capabilities needed to perform a role, and Additional KSATs, which represent supporting or complementary capabilities that may apply depending on the organization, mission, or environment. 

This allows our certificate program to be built around the capabilities that matter most for the role, while also remaining useful for related NIST NICE and ENISA ECSF roles. 

Trademark notice 

ISC2, GIAC, EC-Council, CompTIA, and any related certification names, marks, and logos are trademarks or registered trademarks of their respective owners. Cyberbit is an ISC2 CPE partner. Other inclusion is for identification and comparison purposes only and does not imply any partnership, sponsorship, endorsement, affiliation, or authorization by those organizations.