A hands-on exam in place of a knowledge test
OSCP assesses penetration testing through a practical exam in which candidates must compromise systems and report on them, rather than answer knowledge questions.
Who it suits
Suits people who want to prove they can carry out penetration tests, particularly those aiming at hands-on penetration tester roles instead of a broad security awareness credential.
Key differences
- Is graded on actual exploitation work and a written report, so it shows applied ability more than recall of ethical hacking concepts.
- Has narrower topic coverage than CEH, which surveys areas such as wireless, mobile, IoT, and cloud, and it demands deeper practice in the areas it covers.
- Preparation centers on lab practice and persistence, and the format is commonly regarded as more demanding than a conventional exam.
- Level
- Professional
- Assessment
- Practical
- Study time
- 250-450h
- Listed from
- $1,749
