OSCP
Exam fee
$1599
≈ 1,263 GBP · 2,159 CAD · 1,471 EUR · rolling-avg FX; verify with your bank before any payment
Exam code
OSCP
The OSCP is a cybersecurity certification from OffSec with an exam fee of $1599. Built from the Bureau of Labor Statistics and OffSec's official exam requirements.
About the OSCP
OSCP is the offensive cert that hiring managers actually respect. It is a 24-hour practical exam where you must compromise a set of target machines in a live lab environment and write a professional report documenting every step. There are no multiple-choice questions. You either exploit the boxes and document the findings or you fail. That format is what makes it carry weight. OSCP does not expire, which removes the CPE treadmill. The prep course (PEN-200) is demanding and the community reputation is hard-earned; many pentesters say it is the single credential that changed their career trajectory.
Who should earn it
Pentesters moving from junior to senior level, offensive security researchers, and anyone whose job requires demonstrated hands-on exploitation skill. Do not attempt without real lab time first.
Exam details
- Provider
- OffSec
- Exam code
- OSCP
- Questions
- Practical only
- Duration
- 23h 45m hands-on + 24h report
- Passing score
- 70/100 points across machines
- Exam fee
- $1,599 (verify with OffSec)
- Renewal
- Does not expire
- Experience level
- Advanced
- DoD 8570/8140
- Not on the list
Prerequisites
None formally required. OffSec strongly recommends solid Linux, networking, and Bash or Python scripting before starting PEN-200.
Key domains
- Enumeration and Information Gathering
- Active Directory Attacks
- Web Application Exploitation
- Privilege Escalation on Linux and Windows
- Client-side Attacks
- Report Writing
Salary impact
OSCP is one of the most salary-moving certs in offensive security. Practitioners report $15,000-$30,000 bumps after passing, and senior pentest roles at $130,000-$180,000 frequently list it as required rather than preferred.
Most relevant roles
This role lives inside a packaged path
Want the curriculum, comp delta, and recommended courses for this role?
DecipherU bundles cybersecurity roles into a small set of packaged paths. Each path has the curriculum sequence, the compensation delta it unlocks, and the recommended courses, all pre-set. Two ways in:
Certification details are sourced from official certifying body websites. Verify current pricing, exam format, and requirements directly with the certifying organization before making decisions. DecipherU is not affiliated with any certifying body.
Exam code OSCP. OffSec publishes 6 domains: Enumeration and Information Gathering, Active Directory Attacks, Web Application Exploitation, Privilege Escalation on Linux and Windows, Client-side Attacks, Report Writing. Practice questions on DecipherU are grouped by those domains.
Up to Practical only questions in 23h 45m hands-on + 24h report, with a passing score of 70/100 points across machines, according to OffSec. Formats and counts change between exam versions, so confirm on the OffSec site before you book.
OffSec lists the exam fee at $1599 USD. Vouchers, bundles and regional pricing differ; the fee on the OffSec site at checkout is the one that applies.
OffSec does not publish a fixed expiry for this credential in the material we cite. Check the OffSec site for the current renewal rule.
None formally required. OffSec strongly recommends solid Linux, networking, and Bash or Python scripting before starting PEN-200.
Sources
- OffSec official website · Certification pricing, exam format, and renewal requirements
- Bureau of Labor Statistics, Occupational Employment and Wage Statistics, May 2024
Related Cybersecurity Resources
Wondering if OSCP is right for you?
Take a free behavioral assessment to discover which certifications align with your natural strengths and cybersecurity career goals.
Was this page helpful?
DecipherU's career insights are developed by Julian Calvo, Ed.D., M.S., with AI-assisted research and drafting, then reviewed and edited by DecipherU Editorial. Career and compensation data come from the U.S. Bureau of Labor Statistics, O*NET, and industry compensation databases. Assessment frameworks are grounded in peer-reviewed psychometric research, learning sciences (University of Miami), organizational learning (Barry University), and applied AI (Northeastern University). AI is used as a research and drafting tool; all methodology, framework design, scoring, and editorial standards are owned by the DecipherU team.