OSCP+ (formerly OSCP)
Related free ISC2 CC practice: 60 questions, right or wrong on every answer.Practice ISC2 CC free
Exam fee
$1699
≈ 2,294 CAD · rolling-avg FX; verify with your bank before any payment
Exam code
OSCP+
Renewal
3yr
The OSCP+ (formerly OSCP) is a cybersecurity certification from OffSec with an exam fee of $1699 and a 3-year renewal cycle. Built from the Bureau of Labor Statistics and OffSec's official exam requirements.
About the OSCP+ (formerly OSCP)
OffSec rebranded OSCP to OSCP+ in November 2024. It is still the offensive cert that hiring managers actually respect: a 24-hour proctored practical exam where you must compromise target machines in a live lab environment and write a professional report documenting every step, no multiple-choice questions. But the credential itself changed: OSCP+ carries 3-year active status requiring recertification (via a recert exam, another qualifying OffSec cert, or CPEs), unlike the original OSCP, which was a lifetime credential with no renewal requirement. Anyone who earned OSCP before the rebrand keeps their lifetime status; anyone earning the credential now gets OSCP+ on the 3-year clock. The updated exam also removed bonus points and expanded the Active Directory portion into an 'assumed compromise' scenario starting from a standard domain user account. The prep course (PEN-200) is demanding and the community reputation is hard-earned; many pentesters say it is the single credential that changed their career trajectory.
Who should earn it
Pentesters moving from junior to senior level, offensive security researchers, and anyone whose job requires demonstrated hands-on exploitation skill. Do not attempt without real lab time first.
Exam details
- Provider
- OffSec
- Exam code
- OSCP+
- Questions
- Practical only
- Duration
- 24h hands-on + 24h report
- Passing score
- 60% from 3 standalone machines + 40% from an Active Directory set
- Exam fee
- $1,699 (verify with OffSec)
- Renewal
- Every 3 years via CPE
- Experience level
- Advanced
- DoD 8570/8140
- Not on the list
Prerequisites
None formally required. OffSec strongly recommends solid Linux, networking, and Bash or Python scripting before starting PEN-200.
Key domains
- Enumeration and Information Gathering
- Active Directory Attacks (assumed-compromise domain scenario)
- Web Application Exploitation
- Privilege Escalation on Linux and Windows
- Client-side Attacks
- Cloud (AWS) Infrastructure Exploitation
- Report Writing
Pay
DecipherU has no sourced pay figure for what this certification adds. The Bureau of Labor Statistics publishes pay by occupation, not by credential, so the roles below link to the BLS figures for their closest occupation.
Most relevant roles
Practice this exam
Practice the ISC2 Certified in Cybersecurity (CC) exam
ISC2 CC covers the security baseline this topic builds on: threats, access control, secure design and operations.
- 60 practice questions in the bank.
- Practice and timed mocks are free, with right or wrong on every answer and your total score.
- Full analysis: $39, one payment for this exam, no subscription. 30-day full refund, no questions asked.
Start free ISC2 CC practiceNot sure which exam? Take Match
ISC2 Certified in Cybersecurity (CC) is a trademark of ISC2. DecipherU is not affiliated with or endorsed by ISC2.
One ISC2 CC practice question Security Operations
A DevOps engineer at a logistics firm must encrypt a nightly 400 GB backup before it is copied to cloud storage. She asks whether to use RSA or AES for the bulk of the data and how the key should be handled. Which answer is correct?
Pick an answer. We tell you right or wrong.
Planning a ISC2 CC exam date? See which version you are taking, with the owner dates and the day we read each one.
This role lives inside a packaged path
Want the curriculum, comp delta, and recommended courses for this role?
DecipherU bundles cybersecurity roles into a small set of packaged paths. Each path has the curriculum sequence, the published salary data for the role, and the recommended courses, all pre-set. Two ways in:
Certification details are sourced from official certifying body websites. Verify current pricing, exam format, and requirements directly with the certifying organization before making decisions. DecipherU is not affiliated with any certifying body.
Exam code OSCP+. OffSec publishes 7 domains: Enumeration and Information Gathering, Active Directory Attacks (assumed-compromise domain scenario), Web Application Exploitation, Privilege Escalation on Linux and Windows, Client-side Attacks, Cloud (AWS) Infrastructure Exploitation, Report Writing. Practice questions on DecipherU are grouped by those domains.
Up to Practical only questions in 24h hands-on + 24h report, with a passing score of 60% from 3 standalone machines + 40% from an Active Directory set, according to OffSec. Formats and counts change between exam versions, so confirm on the OffSec site before you book.
OffSec lists the exam fee at $1699 USD. Vouchers, bundles and regional pricing differ; the fee on the OffSec site at checkout is the one that applies.
3 years, per OffSec. Renewal is through continuing education credits or by passing a current exam; OffSec sets the credit count and the deadline.
None formally required. OffSec strongly recommends solid Linux, networking, and Bash or Python scripting before starting PEN-200.
Next step
- Full analysis for the ISC2 CC exam, $39 once
The right answer, explanation and source for every question, your readiness by domain and a study plan. One payment, no subscription, 30-day full refund.
What is free and what costs money · All exams
A weekly cybersecurity career email
Threats, the job market, salary data and career strategy. It stops with one click.
By subscribing you agree to our privacy policy. Unsubscribe anytime.
Sources
- OffSec official website · Certification pricing, exam format, and renewal requirements
- Bureau of Labor Statistics, Occupational Employment and Wage Statistics, May 2025
Related Cybersecurity Resources
Wondering if OSCP+ (formerly OSCP) is right for you?
Take a free behavioral assessment to discover which certifications align with your natural strengths and cybersecurity career goals.
Was this page helpful?
DecipherU's career insights are drafted with AI assistance from the sources named on the page, under the method set by Julian Calvo, Ed.D. No named person has reviewed this page unless it says so. Career and compensation data come from the U.S. Bureau of Labor Statistics, O*NET, and industry compensation databases. Assessment frameworks are grounded in peer-reviewed psychometric research, learning sciences (University of Miami) and organizational learning (Barry University). AI is used as a research and drafting tool; the methodology, framework design, scoring and editorial standards are set by DecipherU.