OSCPOffensive Security Certified Professional
The most respected hands-on penetration testing credential
Details last reviewed January 2026. Fees and exam formats change — always confirm on the official page.
About this certification
The OSCP is OffSec's flagship certification, requiring candidates to compromise a set of vulnerable machines within a 24-hour performance exam — no multiple choice. It validates real offensive security skills: enumeration, exploitation, post-exploitation, and report writing. OSCP is the industry benchmark for penetration testers.
MyCertPath verdict
Industry gold-standard proof you can actually pentest. The 24-hour hands-on exam plus 24-hour report is what separates 'I have a cert' from 'I can break in and document it.' Required or strongly preferred for serious offensive-security roles. Expect 200–400+ hours of lab time on top of the PEN-200 course.
What it actually tests
24 hours of attack time in a target network — typically one Active Directory chain plus three standalone machines — followed by 24 hours to write the report. Passing requires 70 of 100 points AND a complete report; missing the report fails you regardless of compromises. Buffer overflow was removed in the 2023 PEN-200 refresh; current emphasis is on Active Directory attack paths.
Common traps
Things candidates underestimate or get wrong on this exam.
- Underestimating the report. A working exploit without proper documentation is still a fail.
- Treating the lab as a checklist. Pivoting, enumeration, and AD attack paths matter more than collecting hosts.
- Burning energy at hour 23. Sleep is part of the strategy — many pass after four to six hours of mid-exam rest.
- Saving the AD network for last. It's the highest point value and the hardest to recover from late.
What you'll validate
- ✓Network enumeration and scanning
- ✓Web application exploitation
- ✓Buffer overflow exploitation
- ✓Privilege escalation (Linux + Windows)
- ✓Active Directory attacks
- ✓Post-exploitation and pivoting
- ✓Professional penetration test reporting
Pros & Cons
Advantages
- +Industry's most respected offensive security credential
- +Performance-based — impossible to fake
- +Lifetime validity
- +Opens doors to elite penetration testing roles
Disadvantages
- −Extremely challenging — high failure rate
- −High cost including required course and labs
- −24-hour exam is mentally grueling
- −Not suitable for beginners
Who it's for
Best for
- →Aspiring penetration testers
- →Security professionals transitioning to red team roles
- →Those serious about offensive security as a career
Not ideal for
- ×Security beginners (build basics first)
- ×Those wanting a defensive/blue team credential
Career paths this unlocks
Study Guide
OSCP Exam Guide: How to Approach the 24-Hour Penetration Test
OSCP is the gold standard entry-level offensive security credential — and one of the hardest exams you can take. There are no multiple-choice questions. You have 24 hours to compromise target machines, and another 24 hours to write a professional penetration test report.
15 min read
OSCP: quick answers
- How much does the OSCP exam cost?
- The listed exam fee is $1499 (USD). Includes PEN-200 course + 90-day lab access + 1 exam attempt Fees vary by region and change over time — confirm on the official page before you buy.
- How long does it take to prepare for OSCP?
- We estimate roughly 300 hours of study for most candidates; your time depends on prior experience.
- How long is the OSCP exam?
- The exam is 1440 minutes.
- How long is the OSCP credential valid?
- It does not expire (Lifetime validity).
Study Resources
Contains affiliate linksTop picks for OSCP
Register for the exam
Course bundle includes exam attempt — purchase Learn One or Learn Enterprise via OffSec
More places to study
Self-paced video courses from independent instructors
Courses and certificates from universities and companies
Practice tests and hands-on labs for IT certifications
Printed and Kindle exam guides
Subscription video courses
Links marked “Affiliate” may earn MyCertPath a commission if you buy, at no extra cost to you. Other links are unpaid. As an Amazon Associate we earn from qualifying purchases. Prices and ratings change often, so we don't list them — check the provider's page. Disclosure
Jobs for OSCP holders
Pay depends on role, location, and experience more than on any single credential. Check current postings below for real ranges in your market.
LinkedIn Jobs
Posted in the last 7 days
Indeed
Dice (tech roles)
Tech-focused job board
CyberSeek (cyber only)
NIST-backed supply/demand tool
Job links open external sites. Search results are live and not curated by MyCertPath.
Quick Facts
- Exam Cost
- $1499 (Includes PEN-200 course + 90-day lab access + 1 exam attempt)
- Exam Duration
- 1440 minutes
- Passing Score
- 70/100 points
- Exam Format
- Performance-Based (hands-on)
- Study Time
- ~300 hours
- Validity
- Does not expire
- Salary Impact
- Strong (editorial rating)
- Last Reviewed
- January 2026
Prerequisites
- !Solid networking and Linux fundamentals
- !Basic scripting knowledge (Python/Bash)
- !Familiarity with security concepts
Actyra Training
Custom eLearning built on the science of how people actually learn
Actyra designs and builds cert-prep training programs for enterprise teams — custom courseware grounded in cognitive science.
Talk to a training expert →