learning in public

My 2-year Cybersecurity Roadmap

From iOS Developer → Mobile Security

I'm moving from building iOS apps to understanding how to secure them. This is my public roadmap, notes, tools, labs, and projects I'm working through one layer at a time.

one step at a time :)

living document
~/roadmap

from: iOS Developer

focus: Mobile Security

status: learning in public

timeline: 2 years

now

Current Focus

Mobile App Security

Understanding how mobile apps store data, authenticate users, talk to APIs, and where they break.

KeychainJWTAPI SecurityOWASP MASVSBurp SuiteMobSF

roadmap

Journey Timeline

Phase 01In Progress

Foundations

LinuxNetworkingWeb Basics
Progress45%
Phase 02Next

Web Security

OWASP Top 10Burp SuiteAuthAPIs
Progress0%
Phase 03Building

Mobile Security

iOS SecurityKeychainRuntimeStorage
Progress15%
Phase 04Planned

MASVS + Secure Coding

OWASP MASVSThreat ModelingSecure Auth
Progress0%
Phase 05Planned

Labs + Writeups

ProjectsWriteupsChecklistsPublic Notes
Progress0%

projects

Security Projects Planned

Secure Notes iOS App

Private notes with secure local storage and Keychain-focused protection.

JWT Auth Demo

iOS + API authentication demo with token storage and refresh flow.

iOS Keychain Playground

Explore secure storage, access control, and biometric protection.

OWASP MASVS Checklist

A practical checklist for iOS developers.

API Security Checklist

Notes on auth, rate limiting, tokens, and secure endpoints.

Mobile Security Blog Series

Public writing as I learn.

This roadmap is a living document.

I update it as I learn, break things, fix things, and keep going.