The OSCP exam cost is an important consideration for anyone planning to pursue the Offensive Security Certified Professional certification. Known for its practical and challenging approach to penetration testing, the OSCP is designed to assess how well candidates can identify vulnerabilities, exploit systems, escalate privileges, and document their findings. Unlike certifications that focus mainly on theoretical questions, the OSCP requires candidates to demonstrate practical cybersecurity skills. Because of this, the overall cost of earning the certification can include more than just the examination fee. As of 2026, OffSec offers several ways to pursue the OSCP+ certification, including a standalone exam option, a course and certification bundle, and the Learn One subscription. Understanding these options can help candidates choose the most suitable path based on their existing knowledge, preparation requirements, and budget.
The OSCP, or Offensive Security Certified Professional, is a practical penetration testing certification offered by OffSec. It is particularly well known among cybersecurity professionals because candidates must demonstrate their ability to perform penetration-testing activities rather than simply answer theoretical questions. The associated PEN-200 course focuses on penetration testing with Kali Linux and covers areas such as enumeration, vulnerability assessment, web application attacks, privilege escalation, Active Directory, and cloud environments. The current certification pathway also includes the OSCP+ designation. Candidates who pass the relevant exam receive both the OSCP and OSCP+ credentials. The OSCP itself remains valid indefinitely, while the OSCP+ designation is valid for three years and can be maintained through approved continuing education or other qualifying options.
For candidates who already have the necessary penetration-testing knowledge and do not require the PEN-200 training materials, OffSec currently offers a standalone OSCP+ exam for $1,699 as a one-time payment. This option is intended for people who are confident in their skills and want to take the certification exam without purchasing the associated course and lab access. The standalone option is particularly relevant when discussing the actual OSCP exam cost because it separates the examination from training. Candidates should remember that this price does not include PEN-200 course materials or lab access. The standalone exam option provides exam attempts rather than a full training program, making it more suitable for experienced candidates or people who have prepared independently. The standalone exam currently includes two exam attempts within a 90-day period. Candidates should therefore consider how prepared they are before purchasing this option because the exam is designed to test practical penetration-testing ability under time constraints.
For candidates who want structured training along with an exam attempt, OffSec currently offers a Course + Cert Bundle for $1,749. This package includes 90 days of access to a 200- or 300-level course, associated hands-on labs, and one certification exam attempt. For someone starting their OSCP preparation and needing official training materials, this can be a more useful option than purchasing only the standalone exam. The difference between the standalone exam and the course bundle is relatively small based on the current listed prices. However, the bundle provides access to the PEN-200 training experience and hands-on labs, which can be valuable for candidates who want to prepare using OffSec's official learning environment. This means that candidates should not automatically choose the cheapest-looking option. Someone who already has strong penetration-testing experience may prefer the standalone examination, while a beginner or intermediate learner may benefit more from investing in training and lab practice.
Another option is the Learn One subscription, currently priced at $2,749 per year. It provides one year of access to a selected 200- or 300-level OffSec course, associated labs, and two exam attempts. The subscription also provides additional learning resources and other benefits included in the Learn One offering. Learn One may be more suitable for candidates who want an extended preparation period rather than a short 90-day training window. Having 365 days of access gives learners more flexibility to study alongside college, work, or other responsibilities. For someone who expects to spend several months developing practical penetration-testing skills, the additional access period can make the higher price worthwhile. However, candidates who are already well prepared may not need a full-year subscription.
The OSCP exam is designed around practical penetration testing rather than conventional multiple-choice testing. Candidates are expected to identify vulnerabilities, gain access to systems, escalate privileges, and demonstrate their findings through professional documentation. The current exam structure includes standalone machines and an Active Directory component. Candidates work through a practical environment that tests their ability to perform reconnaissance, enumeration, exploitation, privilege escalation, and other penetration-testing techniques. The examination is conducted as a 24-hour proctored assessment. Because of this practical format, the cost of the OSCP should be considered an investment in both examination and preparation. Candidates who attempt the exam without adequate hands-on experience may find themselves spending more money later on retakes.
Training depends on which purchasing option a candidate selects. The standalone OSCP+ examination does not include course materials or lab access. It is designed for candidates who already possess the required skills or who have prepared through independent study and other resources. The Course + Cert Bundle, on the other hand, combines training, hands-on labs, and an exam attempt. Learn One provides an even longer period of access to training and labs along with two exam attempts. Therefore, the phrase "OSCP exam cost" can mean different things depending on whether someone is purchasing only an exam or a complete preparation package. For beginners, the cost of preparation can therefore be an important part of the overall budget. It is useful to compare the available packages rather than looking only at the standalone examination price.
The OSCP is widely considered challenging, and failing an attempt does not mean that a candidate cannot eventually earn the certification. However, retaking the examination can increase the overall cost of certification. Candidates who use both included attempts can purchase a regular exam retake for $249, subject to the applicable waiting period and scheduling requirements. OffSec also applies cooling-off periods between unsuccessful attempts. The waiting period is four weeks after the first failed attempt, eight weeks after the second, and 12 weeks for subsequent attempts. These requirements mean that candidates should prepare thoroughly before scheduling an examination.
The listed examination or training price is not necessarily the only expense associated with earning the OSCP. Candidates may also spend money on additional learning resources, practice platforms, networking courses, or other cybersecurity training while preparing for the exam. There can also be indirect costs. A candidate may need to dedicate significant time to studying, completing labs, practicing enumeration, learning privilege escalation, and improving reporting skills. If the candidate is working full-time, the time investment can be considerable. Hardware and internet expenses may also be relevant for learners who do not already have a suitable study setup. However, these are personal preparation expenses rather than mandatory OffSec certification fees.
Whether the OSCP is worth the cost depends on the candidate's career goals and existing technical skills. For people interested in penetration testing, offensive security, red teaming, vulnerability assessment, or related cybersecurity roles, the certification can provide a practical way to demonstrate hands-on skills. One of the strongest aspects of the OSCP is its practical nature. Candidates do not earn the credential simply by memorizing security concepts. They must demonstrate that they can approach systems methodically, identify weaknesses, exploit vulnerabilities, escalate privileges, and produce professional documentation. The certification can therefore be particularly valuable for candidates who want to prove their practical capabilities to potential employers. However, it should not be viewed as an entry-level cybersecurity certification. Having a solid understanding of networking, Linux, Windows administration, and basic scripting can make the preparation process much more manageable.
The best way to control the overall OSCP cost is to choose the right purchasing option and prepare thoroughly before attempting the examination. Candidates who already possess strong penetration-testing skills may find the standalone exam more appropriate, while those who need structured preparation may benefit from the course bundle. Another important strategy is to avoid rushing into the exam. The OSCP is not simply about knowing security tools. Candidates need to understand enumeration, exploitation, privilege escalation, Active Directory, and the methodology behind penetration testing. Spending sufficient time practicing these skills can reduce the possibility of paying for additional attempts. Candidates should also compare the amount of training time they realistically need. Someone who can study consistently for several hours every week may prefer a shorter package, while someone balancing a full-time job or academic commitments may find a longer subscription more practical.
The OSCP exam cost depends on the route a candidate chooses. As of 2026, the standalone OSCP+ exam is listed at $1,699, while the Course + Cert Bundle is $1,749 and Learn One is $2,749 per year. The standalone option is aimed at candidates who already have the required skills, whereas the course bundle and Learn One provide training and lab access to support preparation. Beyond the initial price, candidates should consider preparation time, learning resources, and potential retake costs. A regular retake is currently listed at $249, making proper preparation an important part of managing the total investment. Ultimately, the OSCP is an investment in practical penetration-testing skills rather than simply another theoretical certification. By selecting the right training option, building a strong technical foundation, and gaining enough hands-on practice before attempting the exam, candidates can approach the certification with greater confidence while keeping their overall OSCP cost under control.