By Audience

Best Online Cybersecurity Master's With a Thesis Option (2027)

Best online cybersecurity master's with a thesis option for 2027, useful if you plan a doctorate, ranked by score.

Top Pick

Master's

University of Southern Maine

Master of Science in Cybersecurity

Maine

Score
57.3of 100
Cost
$548per credit
Length
30credits
Read Our University of Southern Maine Review

Programs Ranked Here

9

Schools

9

Lowest Cost per Credit

$548

Fully Online

9

Source: School program pages, verified October 2026

These nine are the best online cybersecurity master's with a thesis option, and each lets you finish with a thesis, a written research project you propose, write and present. Some require it and some offer it beside a capstone or project. Tuition on this list runs from $320.25 per credit for Texas residents at Sam Houston State to $1,148 per credit at Davenport.

Top Picks

Top Picks by What Matters Most

Each pick wins one measured category among the programs on this list.

Method

How We Chose These Programs

A program makes this list when its own page names a thesis as a way to finish the degree, whether required or chosen over a capstone or project. We keep master's programs delivered online and read each school's pages for the thesis wording, admissions steps and prices.

The list holds nine programs, ordered by our shared scoring of cost, earnings, completion and online experience. The methodology page explains each measure. For master's programs without a research ending, see our full list of online master's in cybersecurity.

  • Master's level, delivered online
  • Thesis option stated on a school page
  • Ranked on the shared methodology

Scores combine seven published factors. The methodology page shows each weight and rubric.

Full Ranking

The Full Ranking

The 9 top-scoring of 10 programs at this level.

  1. 1

    University of Southern Maine

    Master of Science in Cybersecurity

    School based in Maine

    • Fully Online
    • Public

    Why it ranks #1: it charges $548 per credit (the lowest on this list) and 52% of its graduate students study fully online (a higher share than 5 of 8 other programs on this list).

    Thesis

    Applications close August 1 for fall and December 15 for spring, which makes planning around a job easy. You finish with a thesis or a capstone built on a topic you choose, and the coursework points toward CISSP and certified forensic computer examiner eligibility. Simulation exercises run with public and private partners. Admission expects a 3.0 GPA and IT experience, so it is not a first step into the field.

    Cost
    $548 per credit
    Credits
    30 credits
    Format
    2 starts a year
    Est. Tuition
    $16,440
    Time to Finish
    24 to 48 months
    • Cost 8.2 / 10
    • Completion 4.1 / 10
    • Online Experience 4.4 / 10
    • Credential Alignment 7 / 10
    • Track Record 0.5 / 10
    • Program Reputation 6.1 / 10
  2. 2

    New York University

    Master of Science in Cybersecurity (Online)

    School based in New York

    • Fully Online
    • Private nonprofit

    Why it ranks #2: its graduates in this field earn a median $152,422 (the highest on this list), 77.5% of its transfer students earn a credential within eight years (the highest on this list), and its school awards about 252 master's degrees a year in this field per IPEDS (the most on this list).

    Thesis

    NYU Tandon holds the NSA's research-level designation for Cyber Operations and Cyber Defense, and that shows in the build: 12 of the 30 credits are four required core courses, and up to 9 can go to a project, readings or a thesis. Apply as an online or on-campus student, and the blended option adds campus classes. Ask NYU for the per-credit rate, since the program page leaves it out.

    Credits
    30 credits
    School State
    New York
    • Cost 0 / 10
    • Graduate Earnings 10 / 10
    • Completion 9.3 / 10
    • Online Experience 0.8 / 10
    • Credential Alignment 3 / 10
    • Track Record 8.7 / 10
    • Program Reputation 9.8 / 10
  3. 3

    University at Albany

    Master of Science in Cybersecurity and Risk

    School based in New York

    • Fully Online
    • Public

    Why it ranks #3: its school awards about 42 master's degrees a year in this field per IPEDS (more than 7 of 8 other programs on this list) and it charges $634.38 per credit (lower than 3 of 4 other programs on this list).

    Thesis

    Don't read "risk" as paperwork only. The Cyber Risk Management and Compliance concentration is the technical one, covering network security, application security, threat analysis, digital forensics and security operations. The thesis option lets you take on a real organizational problem and write it up. Applications need two recommendation letters, a resume and a personal statement, so line up references early. Non-residents pay $634.38 per credit.

    Cost
    $634.38 per credit
    School State
    New York
    • Cost 7.1 / 10
    • Completion 5 / 10
    • Online Experience 1.9 / 10
    • Credential Alignment 3 / 10
    • Track Record 5.4 / 10
    • Program Reputation 8.5 / 10
  4. 4

    Sam Houston State University

    Master of Science in Cybersecurity

    School based in Texas

    • Fully Online
    • Public

    Why it ranks #4: 65.5% of its transfer students earn a credential within eight years (higher than 7 of 8 other programs on this list) and its graduates in this field earn a median $136,772.

    Thesis

    Three start terms a year, with deadlines of August 1, December 15 and May 15, mean you rarely wait long to begin. Plan 1 is a thesis; Plan 2 swaps it for a master's project in DFSC 6347. Admission asks for a resume, two recommendation letters and prefers a 3.0 GPA. Texas residents pay $320.25 per credit, while nonresidents pay $748.25 before fees.

    Cost
    $748.25 per credit
    Credits
    30 credits
    Format
    3 starts a year
    Est. Tuition
    $22,448
    School State
    Texas
    • Cost 5.9 / 10
    • Graduate Earnings 8.6 / 10
    • Completion 8.4 / 10
    • Online Experience 3.3 / 10
    • Credential Alignment 3 / 10
    • Track Record 3.4 / 10
    • Program Reputation 2.1 / 10
  5. 5

    University of Maine at Augusta

    Master of Science in Cybersecurity

    School based in Maine

    • Fully Online
    • Live Online
    • Public

    Why it ranks #5: 96% of its graduate students study fully online (the highest share on this list), but 38% of its transfer students earn a credential within eight years (the lowest on this list).

    Thesis

    Both endings, a capstone or a thesis, require a written proposal and a presentation, so you will defend your idea out loud before you finish. Along the way you work in the Maine Cyber Range, UMA's simulated network. Classes can be taken fully online or in a live video mix, which means set meeting times. Admission needs a regionally accredited bachelor's, an essay and maybe an interview.

    Format
    Live Online
    School State
    Maine
    • Cost 7.5 / 10
    • Completion 0.9 / 10
    • Online Experience 7.8 / 10
    • Credential Alignment 3 / 10
    • Track Record 2.8 / 10
    • Program Reputation 1.8 / 10
  6. 6

    Davenport University

    Master of Science in Information Assurance and Cyber Security

    School based in Michigan

    • Fully Online
    • Private nonprofit

    Why it ranks #6: 93% of its graduate students study fully online (a higher share than 7 of 8 other programs on this list) and it charges $1,148 per credit, but 53% of its transfer students earn a credential within eight years (lower than 7 of 8 other programs on this list).

    Thesis

    Davenport's $1,148 per credit is a high list price, but a full-tuition DoW scholarship is offered, so eligible students should ask before ruling it out. The 31 credits end with a thesis you submit and present, with coaching along the way. Case studies run in high-tech labs, coursework points toward CISSP, and the GRE and GMAT are both waived.

    Cost
    $1,148 per credit
    Credits
    31 credits
    Est. Tuition
    $35,588
    Time to Finish
    As few as 24 months
    School State
    Michigan
    • Cost 2.7 / 10
    • Graduate Earnings 3.6 / 10
    • Completion 3.7 / 10
    • Online Experience 7 / 10
    • Credential Alignment 7 / 10
    • Track Record 3.1 / 10
    • Program Reputation 5.8 / 10
  7. 7

    University of Missouri-St. Louis

    Cybersecurity M.S. (Computer Science and Information Systems Emphases)

    School based in Missouri

    • Fully Online
    • Public

    Why it ranks #7: 59.5% of its transfer students earn a credential within eight years (higher than 5 of 8 other programs on this list), but its school awards about 12 master's degrees a year in this field per IPEDS (fewer than 5 of 8 other programs on this list).

    Thesis

    Pick an emphasis first, Computer Science or Information Systems, because the college you enroll through sets your price: $697 per credit for residents in Arts and Sciences, or $872 through the business college. Courses include Cryptography for Computer Security, Computer Forensics and Software Assurance. A three-credit thesis can replace the capstone. The GRE matters only for assistantships. Non-residents face $1,658 or $1,833.

    Credits
    30 credits
    School State
    Missouri
    • Cost 0.6 / 10
    • Completion 6.6 / 10
    • Online Experience 2.6 / 10
    • Credential Alignment 3 / 10
    • Track Record 3.2 / 10
    • Program Reputation 7.4 / 10
  8. 8

    University of Michigan-Dearborn

    Cybersecurity and Information Assurance, MS

    School based in Michigan

    • Fully Online
    • Public

    Why it ranks #8: 60.5% of its transfer students earn a credential within eight years (higher than 6 of 8 other programs on this list) and its school awards about 16 master's degrees a year in this field per IPEDS (more than 5 of 8 other programs on this list).

    Thesis

    You shape this degree twice: pick Network and System Security, Data and Application Security or Software Security, then choose coursework, a project or a thesis to finish. The GRE is not required. Every class lands in late afternoon or evening, so a day job fits, though you can't catch up on your own schedule. Entry assumes STEM training with calculus II, programming and statistics already done.

    Credits
    30 credits
    School State
    Michigan
    • Cost 0 / 10
    • Completion 7.2 / 10
    • Online Experience 3.6 / 10
    • Credential Alignment 3 / 10
    • Track Record 3.7 / 10
    • Program Reputation 5.3 / 10
  9. 9

    Mercy University

    Cybersecurity M.S.

    School based in New York

    • Fully Online
    • Private nonprofit

    Why it ranks #9: 56% of its graduate students study fully online (a higher share than 6 of 8 other programs on this list), but its graduates in this field earn a median $90,632 (the lowest on this list).

    Thesis

    Mercy requires a Master's Project (IASP 600), and with the program head's approval you can turn it into a thesis (IASP 601). The school says the NSA and FBI recruit directly from its programs. Programming skill is expected on day one, though a partnership with the NYU Tandon Bridge Program helps career changers fill the gap. Tuition is $34,410 at $1,147 per credit, plus term registration fees.

    Cost
    $1,147 per credit
    Credits
    30 credits
    Est. Tuition
    $34,410
    Time to Finish
    18 to 24 months
    School State
    New York
    • Cost 2.7 / 10
    • Graduate Earnings 2.8 / 10
    • Completion 5.3 / 10
    • Online Experience 4.9 / 10
    • Credential Alignment 3 / 10
    • Track Record 3.9 / 10
    • Program Reputation 7.5 / 10

Side by Side

Compare Every Program Side by Side

Sort any column. The order you see first is the ranking.

Best Thesis Option Programs: every ranked program
Rank School and Program Score Cost per Credit Credits Delivery
1 University of Southern Maine M.S. Master of Science in Cybersecurity 57.3 $548 30 Fully Online
2 New York University M.S. Master of Science in Cybersecurity (Online) 56.6 30 Fully Online
3 University at Albany M.S. Master of Science in Cybersecurity and Risk 55.8 $634.38 Fully Online
4 Sam Houston State University M.S. Master of Science in Cybersecurity 54.9 $748.25 30 Fully Online
5 University of Maine at Augusta M.S. Master of Science in Cybersecurity 50.1 Fully Online, live online
6 Davenport University M.S. Master of Science in Information Assurance and Cyber Security 44.7 $1,148 31 Fully Online
7 University of Missouri-St. Louis M.S. Cybersecurity M.S. (Computer Science and Information Systems Emphases) 43.2 30 Fully Online
8 University of Michigan-Dearborn M.S. Cybersecurity and Information Assurance, MS 42.7 30 Fully Online
9 Mercy University M.S. Cybersecurity M.S. 40.7 $1,147 30 Fully Online
Cost per credit is the published online rate; October 7, 2026 data. Scores use methodology version 1.0.

Thesis, Capstone or Project: What Each School Offers

Read the finish line before you read anything else, because it differs a lot here. Davenport's page says students submit and present a thesis, and the 31-credit degree is built around it. At Southern Maine you choose a thesis pathway or a capstone pathway on a topic of your choosing. Maine at Augusta asks for a written proposal and a presentation either way.

Sam Houston State splits the choice into Plan 1, a thesis, and Plan 2, a master's project in DFSC 6347. Missouri-St. Louis ends with a Cybersecurity Capstone (CMP SCI 5888), and a master's thesis (CMP SCI 6900) may replace it.

Mercy requires a Master's Project (IASP 600), and students who finish it can seek approval to turn it into a thesis (IASP 601). Michigan-Dearborn lets you pick coursework only, a project or a thesis. NYU counts up to a combined 9 credits of project, guided studies, readings or thesis toward the degree.

If you want to publish or apply to a doctoral program later, choose a school where the thesis is a real track, such as Sam Houston State's Plan 1 or Michigan-Dearborn's thesis option. If you only want a polished project to show an employer, a capstone is usually the lighter route.

What a Thesis Asks of a Working Adult

A thesis stretches past the last class. You need a topic, a faculty advisor, time to write and a defense or presentation, and most of that happens on your own schedule. Plan on talking with an advisor early rather than in your final term.

Albany front-loads its coursework and then adds a 3 to 6 credit internship or thesis. That works best if you can reduce work hours for part of a year. Michigan-Dearborn schedules every class in late afternoons or evenings, which keeps a day job possible, though it also means you can't move through the material at your own pace.

Maine at Augusta teaches in live sessions, so you will have set meeting times. Southern Maine says the degree takes as few as 2 years full-time or 4 years part-time, and that stretch gives a thesis room to breathe. Davenport lists as little as two years. Pick the schedule that leaves you a few free weekends for writing.

Comparing Tuition When Residency Changes the Price

Public schools here charge by residency, and the gap is large. Sam Houston State lists $320.25 per credit for Texas residents and $748.25 for nonresidents, before mandatory fees. Albany lists $540.38 for New York residents and $634.38 for everyone else, with fees folded in.

Missouri-St. Louis sets price by the college you enroll through. The Computer Science emphasis costs $697 per credit for residents and $1,658 for nonresidents. The Information Systems emphasis costs $872 and $1,833. Southern Maine charges one e-tuition rate to every student, $548 plus $107 in fees, which comes to $16,440 over 30 credits.

The private schools cost more. Davenport charges $1,148 per credit, or $35,588 for 31 credits, and Mercy charges $1,147 per credit, or $34,410 for 30 credits, plus term registration fees. Davenport offers full-tuition DoW scholarships, so ask about eligibility before you rule it out. Request NYU's per-credit rate from admissions.

Admissions and Prerequisites to Check Before You Apply

Entry rules vary more than the degree titles suggest. Southern Maine wants a bachelor's degree with a 3.0 cumulative GPA and prior academic or work experience in information technology or a related field. Mercy asks for a 3.0 GPA in a related field, a resume, a personal statement and at least one letter of recommendation, and it expects some programming.

Michigan-Dearborn requires a STEM bachelor's with a B average plus single courses in probability and statistics, programming and calculus II. The GRE (Graduate Record Examinations) is not required there, at Davenport, at Southern Maine or at Missouri-St. Louis.

Sam Houston State asks for a resume, two recommendation letters and prefers a 3.0 GPA. Maine at Augusta wants a regionally accredited bachelor's, an essay and possibly an interview with faculty. Career changers should look at Mercy's partnership with the NYU Tandon Bridge Program, which helps students without a computing background.

Frequently Asked Questions

What Are the Best Online Cybersecurity Master's With a Thesis Option in 2027?

Do I Have to Write a Thesis for an Online Cybersecurity Master's?

Which of the Best Thesis Programs Has the Lowest Tuition?

Can I Switch From a Capstone to a Thesis Later?

Do These Programs Require the GRE?

Which Programs Prepare You for the CISSP?

Is Any of This Fully Online With No Campus Visits?

Sources

All sources retrieved .