OSCP Certification Guide: Exam, Cost, Training, and Career Value

OSCP is OffSec’s hands-on penetration testing credential for professionals who must prove—not merely describe—their ability to enumerate networks, exploit vulnerabilities, escalate privileges, attack Active Directory, and document findings. Candidates take the proctored OSCP+ exam for 23 hours and 45 minutes, then receive 24 hours to submit a report. A score of 70 out of 100 is required. Passing awards the lifetime OSCP credential plus the renewable, three-year OSCP+ designation, making it valuable for penetration testing and red-team careers.

What Is OSCP, and What Is OSCP+?

The OSCP, now named OffSec Certified Professional, is a practical penetration-testing certification issued by OffSec. It was previously called the Offensive Security Certified Professional certification. Instead of relying mainly on multiple-choice questions, the OSCP certification exam places candidates in a private network containing vulnerable systems and requires them to enumerate, exploit, escalate privileges, and submit reproducible evidence.

People searching what is an OSCP usually mean the lifetime credential. What is OSCP+ refers to the current three-year designation earned through the same assessment. Passing awards both:

• OSCP: Valid indefinitely.
  
  

• OSCP+: Valid for three years and maintainable through approved recertification or continuing education routes.
  
  

Therefore, an OSCP+ cert signals maintained capability, while the lifetime OSCP records that the holder passed OffSec’s practical exam.

A Note on the Official Name

Search results may use phrases such as offensive security certified professional OSCP certification, offensive security OSCP+ certification, OSCP certification OffSec, or offensive security OSCP certification official. The current official credential name is OffSec Certified Professional (OSCP), and the renewable designation is OSCP+. This clarification is useful when reviewing OSCP certification offensive security information from older pages.

OSCP Offensive Security Certification Overview

The official course is PEN-200: Penetration Testing with Kali Linux. This offensive security OSCP course covers enumeration, exploitation, Windows and Linux privilege escalation, tunneling, pivoting, Active Directory attacks, web vulnerabilities, and introductory AWS exploitation.

OffSec lists more than 20 modules, hands-on labs, nine challenge labs, and three environments designed to resemble the exam.

Area

Current OSCP+ Detail

Provider

OffSec

Official course

PEN-200

Delivery

Remote, private VPN, fully proctored

Practical exam

23 hours and 45 minutes

Report window

24 additional hours

Passing score

70/100

Stand-alone systems

3 machines; 60 points

Active Directory set

3 machines; 40 points

Award

Lifetime OSCP plus three-year OSCP+ certification

Formal prerequisites

None

The exam awards partial points on stand-alone targets for initial access and privilege escalation. Bonus points are no longer available. The final score comes entirely from exam performance and properly documented results.

OSCP Certification Requirements

There are no formal OSCP certification requirements involving a degree, employer sponsorship, or another credential. However, “no prerequisite” does not mean beginner-level.

Before beginning an OSCP certification course, candidates should understand:

• TCP/IP, ports, routing, DNS, SMB, HTTP, and common network services
  
  

• Linux and Windows administration
  
  

• Bash or Python scripting
  
  

• Command-line troubleshooting
  
  

• Basic web security and vulnerability assessment
  
  

• Evidence collection and technical reporting
  
  

OffSec recommends solid TCP/IP knowledge, reasonable Windows and Linux administration experience, and familiarity with Bash or Python.

A new learner can begin offensive security training, but should first develop these foundations. OSCP rewards disciplined enumeration, accurate notes, persistent troubleshooting, and sound decisions—not blind tool execution.

OSCP Certification Cost

As of August 1, 2026, OffSec lists these purchasing options:

Option

Official Price

Included

OSCP+ standalone exam

$1,699

Exam without course materials

Course + Cert Bundle

$1,749

90 days of course and labs; one exam attempt

Learn One

$2,749 yearly

One year of course and labs; two exam attempts

These figures represent the current OSCP certification cost and may change. The Course + Cert Bundle is only slightly more expensive than the standalone exam, making it a stronger value for candidates who need official training content. Learn One suits learners who need a longer preparation period and a second exam attempt.

When estimating OSCP training cost, also consider practice labs, suitable computer hardware, backup internet access, and possible retake preparation. Searches for OSCP certification exam cost, offensive security certified professional cost, and offensive security certification cost should always be verified against OffSec’s latest pricing.

OCSP certificate cost is a common search typo. OCSP usually means Online Certificate Status Protocol and is unrelated to the OSCP penetration-testing credential.

OSCP vs CEH: Which Is Better for Your Goal?

The OSCP vs CEH choice depends on your job target and preferred assessment style. CEH provides broad ethical-hacking coverage, while its separate CEH Practical assessment uses a six-hour lab with 20 challenges. OSCP+ is a longer, report-driven examination focused on compromising stand-alone systems and an Active Directory environment.

Factor

OSCP / OSCP+

CEH

Main focus

Applied penetration testing

Broad ethical-hacking knowledge

Assessment

Long hands-on network exam plus report

Knowledge exam; practical option available separately

Best suited to

Pen testers, red teamers, and technical consultants

Beginners, analysts, and broader security roles

Technical depth

Enumeration, exploitation, privilege escalation, and Active Directory

Wider coverage across attack and defense topics

Reporting

Detailed penetration-test report required

Depends on the selected CEH examination path

For CEH vs OSCP, CEH may develop vocabulary and broad conceptual knowledge, while OSCP provides stronger evidence of applied penetration-testing capability.

An experienced administrator targeting a pentesting position may move directly toward OSCP. A beginner who lacks networking, operating-system, and security foundations may benefit from structured introductory learning first.

What Effective OSCP Training Online Should Include

A good OSCP online training program should build a repeatable testing methodology, not merely demonstrate tools. Whether choosing an OSCP online course, live OSCP training course, or guided OSCP certification training, look for the following components:

1. Enumeration discipline: Service discovery, manual validation, web mapping, SMB enumeration, and Active Directory analysis.
   
   

2. Exploit analysis: Reading and adapting code rather than blindly executing public exploits.
   
   

3. Privilege escalation: Systematic Linux and Windows checks based on evidence.
   
   

4. Active Directory attack paths: Authentication weaknesses, lateral movement, pivoting, and tunneling.
   
   

5. Reporting practice: Commands, screenshots, proof files, remediation notes, and reproducible steps.
   
   

6. Timed simulations: Realistic practice environments completed under strict time limits.
   
   

7. Failure review: Identification of missed signals, incomplete enumeration, and unproductive attack paths.
   
   

An OSCP training online provider should also teach candidates how to manage fatigue and allocate time. Poor notes, weak evidence, and repeated dead ends can cost more exam points than not knowing one particular exploit.

OSCP Preparation Course Roadmap

Use this sequence for an OSCP prep course or independent study plan.

1. Build Technical Foundations

Strengthen networking, Linux, Windows, Bash, Python, web security, and basic Active Directory administration.

2. Complete Structured Learning

Work through PEN-200 or a reputable OSCP preparation course. Complete exercises manually before introducing automated enumeration and exploitation tools.

3. Create a Testing Methodology

Build practical checklists for reconnaissance, password attacks, web testing, privilege escalation, pivoting, tunneling, and reporting.

The objective is not to create the largest tool list. It is to make sure critical checks are not forgotten when working under pressure.

4. Practise Connected Environments

A useful ethical hacking offensive penetration testing OSCP prep plan must include both stand-alone systems and connected Windows domains. This is where OSCP pen testing develops beyond isolated capture-the-flag challenges.

Candidates should practise identifying relationships between systems, moving traffic through compromised hosts, analysing credentials, and determining how one weakness creates access to another machine.

5. Simulate and Report

Run timed mock assessments and create the report while testing. Confirm that every compromise can be reproduced from your commands, screenshots, and notes.

The strongest OSCP ethical hacking preparation develops judgment: when to enumerate deeper, modify an exploit, tunnel to another subnet, take a break, or abandon an unproductive path.

Who Should Pursue OSCP?

The OSCP offensive security certification is suitable for:

• Network and system administrators moving into penetration testing
  
  

• SOC analysts seeking stronger attacker-perspective skills
  
  

• Vulnerability analysts who want exploitation experience
  
  

• Junior penetration testers seeking a practical credential
  
  

• Security consultants conducting technical assessments
  
  

• Defensive professionals who need to understand how security controls fail
  
  

It is less suitable as a first cybersecurity course for someone who has never managed Linux or Windows systems, studied networking, used a command line, or written basic scripts.

OSCP does not demonstrate mastery of every offensive-security discipline, nor does it replace experience gained through authorised commercial engagements. It does show that an offensive security professional can apply a methodology, compromise systems legally, navigate Active Directory, escalate privileges, and produce defensible documentation.

For professionals comparing offensive security certs, OSCP provides a strong practical foundation before advanced OffSec pathways. Assess your current technical gaps, select an official or guided training route, and begin with a measurable weekly lab plan before choosing your examination date.