CompTIA PenTest+

About the CompTIA PenTest+

PenTest+ is the offensive counterpart to CySA+. It covers the full engagement lifecycle: scoping, reconnaissance, exploitation, post-exploitation, and reporting. Unlike OSCP, which is a 24-hour practical exam, PenTest+ is a mix of multiple choice and performance-based questions, which makes it more accessible as a first offensive cert. DoD 8140 approves it for Vulnerability Assessment Analyst work roles. Hiring managers for junior pentest roles often ask for PenTest+ as a baseline and OSCP as a proof of real exploitation skill; carrying both reads as serious commitment to the craft.

Who should earn it

SOC Analysts pivoting to offensive work, IT practitioners learning ethical hacking, and junior pentesters building up their credential stack toward OSCP.

Exam details

Provider

CompTIA

Exam code

PT0-003

Questions

85

Duration

165 minutes

Passing score

750/900

Exam fee

$404 (verify with CompTIA)

Renewal

Every 3 years via CPE

Experience level

Mid

DoD 8570/8140

Approved

Prerequisites

CompTIA recommends Network+, Security+, and three to four years of hands-on IT or security experience. Not enforced.

Key domains

• Planning and Scoping
• Information Gathering and Vulnerability Scanning
• Attacks and Exploits
• Reporting and Communication
• Tools and Code Analysis

Federal and DoD relevance

The CompTIA PenTest+ is approved under DoD Directive 8570.01-M (now 8140), so cybersecurity roles supporting US Department of Defense information systems can use it to satisfy the baseline certification requirement for their IAT, IAM, or CSSP workforce category. That matters for federal contractors, cleared facilities, and agencies where 8140 compliance is a hiring gate.

Salary impact

PenTest+ typically adds $10,000-$20,000 for entry-level offensive roles and is commonly listed for junior pentester postings in the $95,000-$120,000 range. It is considered the credential that makes your resume readable to non-technical recruiters.

Most relevant roles