OffSec Certified Professional (OSCP)
The Offensive Security Certified Professional (OSCP) certification, designed for cybersecurity professionals, validates practical, hands-on skills in ethical hacking and penetration testing.
Successful candidates demonstrate proficiency in identifying vulnerabilities, exploiting systems, escalating privileges, and documenting their findings in a real-world environment.
The certification is relevant to roles such as penetration testers, security analysts, and consultants, confirming their ability to conduct comprehensive security assessments.
- Exam duration: 23 hours and 45 minutes
- Documentation: an additional 24 hours afterward to submit the exam report
- Format: practical, proctored hands-on exam
- Maximum score: 100 points
- Passing score: 70 out of 100 points
- Exam environment: 6 systems in a private network environment
- Exam content:
- 3 standalone systems – 60 points total
- Initial Access – 10 points per system
- Privilege Escalation – 10 points per system
- Active Directory environment with 3 systems – 40 points total
- Client 1 – 10 points
- Client 2 – 10 points
- Domain Controller – 20 points
- 3 standalone systems – 60 points total
- Exam Report: All attacks carried out, commands used, and results achieved must be documented in a professional penetration test report.
OffSec currently weights the assessed competencies as follows: 33% for documentation of findings, 26% for Active Directory, 18% for privilege escalation, 12% for identification of vulnerabilities, and 11% for exploitation of systems.
Additional Requirements for the Online Exam
The exam takes place online and under supervision. You will also need:
- a built-in or external webcam; Smartphones and tablets are not permitted as webcams;
- a stable internet connection with a minimum download speed of 20 Mbit/s and an upload speed of 10 Mbit/s;
- a supported browser, such as Google Chrome, Firefox, Chromium, Brave, or Microsoft Edge;
- a private exam room;
- a valid government-issued photo ID with information clearly visible in English;
The webcam must remain on throughout the entire exam and be positioned so that your face, upper body, and immediate surroundings are visible. Before the exam, your identity, workspace, running programs, and technical configuration will be verified.
Please check the current OffSec requirements well in advance of the training and exam: OffSec Proctored Exam Requirements
Certification
Upon successful completion of the exam, you will receive the OffSec Certified Professional Plus (OSCP+) certification, as well as a digital certificate and badge from OffSec.
By passing the current exam, you will receive both the OSCP and OSCP+ designations. The standard OSCP certification remains valid indefinitely, while the additional OSCP+ certification is valid for three years.
Recertification
The OSCP+ certification is valid for three years. There are several options available to maintain the OSCP+ designation, such as earning 120 CPE credits within three years, taking a recertification exam, or passing a qualifying OffSec certification. In addition, annual maintenance coverage is required through the OffSec Annual Membership Program (AMP) or the Annual Maintenance Fee (AMF).
The OSCP certification itself, however, does not expire. Even if the OSCP+ designation is not renewed after three years, OSCP status remains valid indefinitely.