Cybersecurity Masters in the UK: Entry Requirements by University (2027)
How strict are UK cybersecurity master’s entry requirements? It depends far more on the individual course than on the university’s reputation. Some ask for a 2:2 in any subject, some ask for a 2:1 plus specific module results, and one needs security clearance. This guide sets out what the universities themselves publish for 2027 entry.
The degree requirement, university by university
| University | Published degree requirement | What else to check |
|---|---|---|
| York | A 2:2 or equivalent in computer science or a relevant discipline, with strong programming, maths and networks | English: IELTS 6.5 with at least 6.0 in each component |
| Kent | A good 2.2 or above in an acceptable subject; the conversion route accepts any subject with GCSE maths at grade C | Placement versions need you to secure a placement |
| Cardiff | A 2:2 in a relevant subject such as computing, IT or software engineering | Cyber Security and Technology also asks for evidence of programming |
| Royal Holloway | A 2:2 UK honours degree or equivalent in any subject, as listed by a graduate directory; industry experience may be considered | Confirm with admissions |
| Surrey | A 2:2 in computer science, engineering, mathematics, physics or a related subject with programming and mathematics, as quoted by a listing site | English tests differ by course |
| Lancaster | Older pages list a 2:1 in computer science or similar; the 2027 page we read did not show the degree line | English: IELTS 6.5 with at least 6.0 in each element |
| UCL | At least an upper second-class degree in computer science, electrical engineering or mathematics, as listed on UCAS | English Level 2; no late applications |
| Southampton | A 2:1 in a listed computing subject, and a 2:1 result in a programming module, a networks module and a computer science module | Earlier pages quote 65% for each |
| Warwick | A 2:1 or equivalent in IT, computer science or a related subject (Management also suits non-STEM graduates) | English: IELTS 6.5 with at least 6.0 in each component |
| Edinburgh | A UK 2:1 or equivalent in a quantitative discipline; Edinburgh says entry is competitive | A course listing mentions mathematics and programming background |
| Manchester | Shared with the Advanced Computer Science programmes; Manchester gives preference to students from high-ranking institutions and with grades above the minimum | Read Manchester’s entry page |
| Cranfield (defence course) | A UK first or second-class honours degree as a minimum, or an equivalent | Security clearance is required for Shrivenham |
Patterns we see, in our reading
- A 2:2 opens many doors. York, Kent, Cardiff, Royal Holloway and Surrey list a 2:2, though subject conditions vary.
- A 2:1 is the line at UCL, Southampton, Warwick and Edinburgh. At Southampton it also applies to specific modules, which is where applications can fail even with a good degree.
- Conversion routes exist. Kent’s conversion MSc, Royal Holloway’s any-subject entry and Warwick’s Management course are the most open to non-computing graduates. See our guide to cybersecurity degrees without a computer science background.
- Some conditions are unusual. Cranfield needs security clearance, and Edinburgh and UCL tie NCSC certification to course choices, as our NCSC guide explains.
English language
Where we read the score on the university’s page, York, Warwick and Lancaster ask for IELTS 6.5 with at least 6.0 in each component. For other universities we did not read the score, so confirm it before you book a test. Our guide to Duolingo instead of IELTS covers alternative tests.
Timing
Deadlines we read for 2027 entry include Southampton on 18 August 2027 for international applicants, Warwick Management on 31 August 2027, and Royal Holloway’s staged deadlines in June and July 2027. Apply well before them, because your visa timeline also needs funds to be held for 28 days. Our calculator shows the dates.
ATAS
Whether you need an ATAS certificate depends on your nationality and the subject of your course. We have not re-checked the rules for this guide, so ask the university and check GOV.UK before you apply.
Correction, November 2026
An earlier version of this guide said most established universities ask for a 2:1, that a 2:2 with about 12 months of experience is widely accepted, and gave a table of grades, IELTS targets and ATAS likelihood by type of university. We could not support those generalisations from the universities’ own pages, so they were replaced by the table above, which lists only what each university publishes.
What we could not confirm
We did not read the English-language score for every university, nor Kent’s or Surrey’s full entry pages, and we have not re-checked ATAS rules.
Sources and checks
- University of York, MSc Cyber Security; University of Kent, Cyber Security MSc; Cardiff University, Cyber Security and Technology, read on 5 November 2026
- Royal Holloway, Information and Cyber Security MSc; University of Surrey, Cyber Security MSc; Lancaster University, Cyber Security MSc, read on 5 November 2026
- UCL, Information Security MSc; University of Southampton, Cyber Security MSc; University of Warwick, MSc Cyber Security Management, read on 5 November 2026
- University of Edinburgh, Cyber Security, Privacy and Trust; Cranfield University, Cyber Defence and Information Assurance; University of Manchester, MSc Cyber Security, read on 5 November 2026
Figures checked: November 2026. This is general information, not admissions advice. Requirements change each year, so confirm them on each university’s page.