OSCP

About the OSCP

OSCP is the offensive cert that hiring managers actually respect. It is a 24-hour practical exam where you must compromise a set of target machines in a live lab environment and write a professional report documenting every step. There are no multiple-choice questions. You either exploit the boxes and document the findings or you fail. That format is what makes it carry weight. OSCP does not expire, which removes the CPE treadmill. The prep course (PEN-200) is demanding and the community reputation is hard-earned; many pentesters say it is the single credential that changed their career trajectory.

Who should earn it

Pentesters moving from junior to senior level, offensive security researchers, and anyone whose job requires demonstrated hands-on exploitation skill. Do not attempt without real lab time first.

Exam details

Provider

OffSec

Exam code

OSCP

Questions

Practical only

Duration

23h 45m hands-on + 24h report

Passing score

70/100 points across machines

Exam fee

$1,599 (verify with OffSec)

Renewal

Does not expire

Experience level

Advanced

DoD 8570/8140

Not on the list

Prerequisites

None formally required. OffSec strongly recommends solid Linux, networking, and Bash or Python scripting before starting PEN-200.

Key domains

• Enumeration and Information Gathering
• Active Directory Attacks
• Web Application Exploitation
• Privilege Escalation on Linux and Windows
• Client-side Attacks
• Report Writing

Salary impact

OSCP is one of the most salary-moving certs in offensive security. Practitioners report $15,000-$30,000 bumps after passing, and senior pentest roles at $130,000-$180,000 frequently list it as required rather than preferred.

Most relevant roles