certification

OffSec Certified Professional (OSCP) and OSCP+

A cited second opinion for choosing your next tech certification or training path.

Compare certification options for my goal

Certification details change. Always confirm final pricing, availability, and credential terms on the official provider page linked in the sources below before you pay for anything.

How demanding this exam is depends on the background it assumes.

The call: Take it if the published domains match a concrete work or learning goal and you meet the background Offensive Security recommends below. Skip or compare it if that background does not describe you, or if you need hands-on or professional-level proof beyond this exam. RoleMath has not assigned this exam a planning stage.

We don't yet have enough cited exam-structure signals to score OffSec Certified Professional (OSCP) and OSCP+'s difficulty, so we won't put a number on it. The honest read is Offensive Security's own recommended background — see below. Offensive Security Oscp — official vendor page · checked 2026-06-26

Who this certification is designed for

The vendor’s stated audience, plus an honest fit for your starting point. No pass rates, no guarantees.

Per Offensive Security: No formal prerequisites. OffSec strongly recommends TCP/IP networking knowledge, reasonable Windows and Linux administration experience, and basic Bash and/or Python scripting familiarity. OffSec Courses and Certifications · checked 2026-06-26

General funding research checklist: vouchers, WIOA, Workforce Pell, GI Bill, and employer education assistance may be worth checking. This list is not evidence that this credential, exam, or provider qualifies; confirm eligibility with the official program before relying on funding. Compare funding options →

What Offensive Security asks for

No RoleMath planning stage assigned. RoleMath has not derived a planning stage for OffSec Certified Professional (OSCP) and OSCP+ from Offensive Security’s published guidance. This is separate from any level or audience label the vendor uses; the vendor’s experience guidance appears below.

Recommended background: No formal prerequisites. OffSec strongly recommends TCP/IP networking knowledge, reasonable Windows and Linux administration experience, and basic Bash and/or Python scripting familiarity. A recommendation, not a registration requirement.

Prerequisites: None - no formal prerequisite or experience requirement stated; vendor-recommended background is advisory.

Cost & upkeep

Exam fee plus what it takes to keep it — the recurring cost most pages hide.

Exam price (US): $1,699 Offensive Security Oscp — official vendor page · checked 2026-06-26verified 2026-06-26T17:10:28Z · read from the official vendor page
Renewal method: OSCP has no expiration; OSCP+ expires after 3 years and renews via a recert exam, a qualifying higher OffSec cert, or the OffSec CPE program. Offensive Security renewal fees · checked 2026-06-26

We publish no ROI or payback figure for this credential. Paid training prices are not included in this credential cost view. The renewal cost is not recorded and can depend on the renewal route; confirm the current price of the route you choose before budgeting.

Skills measured

Vendor-published objective domains, normalized for display; use the cited official objectives for exact wording. Offensive Security Oscp — official vendor page · checked 2026-06-26

—Introduction to CybersecurityPlain-English orientation: use this as the topic area to study for Introduction to Cybersecurity. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Report Writing for Penetration TestersPlain-English orientation: use this as the topic area to study for Report Writing for Penetration Testers. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Information GatheringPlain-English orientation: use this as the topic area to study for Information Gathering. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Vulnerability ScanningPlain-English orientation: use this as the topic area to study for Vulnerability Scanning. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Introduction to Web ApplicationsPlain-English orientation: use this as the topic area to study for Introduction to Web Applications. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Common Web Application AttacksPlain-English orientation: use this as the topic area to study for Common Web Application Attacks. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—SQL Injection AttacksPlain-English orientation: use this as the topic area to study for SQL Injection Attacks. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Client-Side AttacksPlain-English orientation: use this as the topic area to study for Client-Side Attacks. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Locating Public ExploitsPlain-English orientation: use this as the topic area to study for Locating Public Exploits. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Fixing ExploitsPlain-English orientation: use this as the topic area to study for Fixing Exploits. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Antivirus EvasionPlain-English orientation: use this as the topic area to study for Antivirus Evasion. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Password AttacksPlain-English orientation: use this as the topic area to study for Password Attacks. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Windows Privilege EscalationPlain-English orientation: use this as the topic area to study for Windows Privilege Escalation. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Linux Privilege EscalationPlain-English orientation: use this as the topic area to study for Linux Privilege Escalation. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Advanced TunnelingPlain-English orientation: use this as the topic area to study for Advanced Tunneling. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—The Metasploit FrameworkPlain-English orientation: use this as the topic area to study for The Metasploit Framework. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Active Directory: Introduction and EnumerationPlain-English orientation: use this as the topic area to study for Active Directory: Introduction and Enumeration. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Attacking Active Directory AuthenticationPlain-English orientation: use this as the topic area to study for Attacking Active Directory Authentication. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

—Lateral Movement in Active DirectoryPlain-English orientation: use this as the topic area to study for Lateral Movement in Active Directory. The official objectives define the exact vendor tasks.OffSec PEN-200 OSCP Syllabus PDF (PEN-200;OSCP+) · checked 2026-06-26

We have no exam-domain weightings recorded for this certification, so the domains are shown unweighted. Check the vendor’s objectives page for current weightings.

Free ways to study for OffSec Certified Professional (OSCP) and OSCP+

2 free resources on record

OffSec PEN-200 OSCP Syllabus PDF Free · official Best use: Confirm the official scope, domains, and version before studying. Limitation: Official OffSec objective source with unweighted domains. Checked 2026-06-30.
PortSwigger Web Security Academy (free labs) Free tier (account required) · independent Best use: Building real web-attack technique against live targets rather than reading about it. Limitation: Web application security only — it does not cover Active Directory; buffer overflows; privilege escalation or pivoting. Check the current OffSec exam guide for the scope you actually need. Not affiliated with OffSec and not written to the OSCP syllabus. Checked 2026-08-05.

Official sources control exam scope. Independent resources are reviewed for usefulness and labeled; none is a pass guarantee or affiliate recommendation.

Compare every reviewed resource →

Prerequisites

What's required vs merely recommended — stated plainly.

Hard requirement: What we found on the vendor eligibility page: None - no formal prerequisite or experience requirement stated; vendor-recommended background is advisory.

“Recommended” is the vendor’s guidance, not a formal prerequisite. Confirm current exam availability on the official page before scheduling.

Version & change log

Which version is current — so you prepare for the exam that’s live today, not a retired one.

Version status: Since 2024-11-01 a single PEN-200 exam pass grants a dual award: OSCP (lifetime) plus OSCP+ (3-year time-currency credential); the exam's Active Directory structure changed at the same time.

Offensive Security Oscp — official vendor page · checked 2026-06-26

What this proves — and how Offensive Security says to prepare

Offensive Security’s own framing of who earns it and what it signals, plus their free official study material. Quoted and cited — never dressed up as a job guarantee.

Who the vendor built it for: Best fit for penetration testers validating hands-on offensive skills through a 24-hour practical exam; a single PEN-200 pass grants both the lifetime OSCP and the 3-year OSCP+ time-currency credential.
Where it leads: No formal prerequisite; substantial fundamentals expected; OSCE3 is auto-awarded upon holding OSEP + OSWE + OSED.

Offensive Security Oscp — official vendor page · checked 2026-06-26

Readiness check · ~2 min · no score · no email

Not sure if OffSec Certified Professional (OSCP) and OSCP+ is the right next step for you?

Answer a few quick questions and we’ll map your background against the exam’s published domains and the vendor’s recommended prep — a study order and a sequencing read, not a score or a pass prediction. Everything you need to decide is already above; open this only if you want a personalized plan.

Introduction to Cybersecurity—
Report Writing for Penetration Testers—
Information Gathering—
Vulnerability Scanning—
Introduction to Web Applications—
Common Web Application Attacks—
SQL Injection Attacks—
Client-Side Attacks—
Locating Public Exploits—
Fixing Exploits—
Antivirus Evasion—
Password Attacks—
Windows Privilege Escalation—
Linux Privilege Escalation—
Advanced Tunneling—
The Metasploit Framework—
Active Directory: Introduction and Enumeration—
Attacking Active Directory Authentication—
Lateral Movement in Active Directory—

Answer blocks

Common Questions

Is the OffSec Certified Professional (OSCP) and OSCP+ worth it?

The OffSec Certified Professional (OSCP) and OSCP+ is worth it for people already building offensive-security skills who want to prove hands-on penetration-testing ability through a demanding 24-hour practical exam - it is one of the most respected practical credentials in the field. It is not a beginner's first cert: it assumes real networking, Windows/Linux, and scripting fundamentals, and it is expensive, with the PEN-200 course-plus-exam bundle at $1,749.

The OSCP is earned by passing the PEN-200 exam, a 24-hour proctored, fully hands-on assessment run over a private VPN; 60% of grading covers initial access and privilege escalation and 40% covers an Active Directory breach scenario across three machines (OffSec PEN-200 page, retrieved 2026-07-11). Since 2024-11-01, a single pass grants both the lifetime OSCP and the 3-year OSCP+ time-currency credential. OffSec lists no formal prerequisite but strongly recommends TCP/IP networking, reasonable Windows and Linux administration experience, and basic Bash or Python scripting - so it is a poor fit for someone brand new to security, and a strong fit for a practitioner targeting penetration-testing work. Pricing is course-bundled: $1,749 for the PEN-200 course plus one attempt, $1,699 for a standalone exam attempt, or $2,749/year for the Learn One subscription with two attempts. We publish no pass rate and no certification-caused salary.

Citations: OffSec PEN-200 / OSCP page (offsec.com/courses/pen-200, retrieved 2026-07-11): 24-hour proctored practical exam, dual OSCP + OSCP+ award since 2024-11-01, bundle $1,749 / standalone attempt $1,699 / Learn One $2,749; RoleMath eligibility record (recommended networking, OS admin, and scripting background)

Not sure the OSCP fits your background and timeline? The free RoleMath fit plan maps your goal to the certs and roles that actually match - and sells you nothing.

What jobs can the OffSec Certified Professional (OSCP) and OSCP+ help with?

The OSCP supports preparation for hands-on offensive-security work, most directly penetration tester and red-team roles, and it is treated as an advanced signal for that path rather than an entry credential. It validates practical exploitation skill, not a whole job, and it does not guarantee employment.

OffSec positions the OSCP for practitioners validating hands-on offensive skills, and our role mapping aligns it to occupation-level context under Penetration Tester as an advanced, adjacent credential - a step for progressing toward or within that role, not a first entry signal (OffSec PEN-200 page, retrieved 2026-07-11; RoleMath role mapping). Penetration testing maps to broad BLS OEWS May 2025 information-security occupation context, but we attach no certification-caused wage figure here. This is role-fit context, not a market size, demand, salary, or ROI claim; your prior offensive-security experience and local hiring drive fit far more than the credential name.

Citations: OffSec PEN-200 / OSCP page (offsec.com/courses/pen-200, retrieved 2026-07-11): hands-on offensive-security focus; RoleMath role mapping to Penetration Tester (advanced adjacent credential; occupation-level context only)

Want to see which roles your specific background is closest to today? The free RoleMath fit plan does the math - no course pushed, nothing sold.

How long does it take to study for the OffSec Certified Professional (OSCP) and OSCP+?

RoleMath's reviewed evidence establishes no reliable universal study-duration range for OffSec Certified Professional (OSCP) and OSCP+. Plan from the official exam scope, the vendor's recommended background, and the labs you cannot yet complete without help.

Start with a scope check, practice the weak domains hands-on, and schedule only after you can explain and perform the tested work consistently. Calendar time without a measured skill gap is not a defensible readiness estimate.

Citations: Official vendor exam scope and recommended-experience source cited on this page.

Want a study runway sized to your actual background, not a generic number? The free RoleMath fit plan estimates your realistic path - and nobody pays us to recommend anything.

Is the OffSec Certified Professional (OSCP) and OSCP+ hard?

We have not recorded a stated experience requirement for OffSec Certified Professional (OSCP) and OSCP+, so how hard it is depends entirely on what you already know.

That is what the vendor's eligibility page carried when we read it, not a RoleMath rating and not a pass rate — we found no candidate pass rate on the vendor pages we reviewed. Compare it against the exam scope the vendor publishes and your own hands-on gaps to decide what to practise.

Citations: The vendor eligibility page we read for the experience it expects; official vendor exam scope cited on this page.

Want an honest read on whether the OSCP is a stretch or a fit for you right now? The free RoleMath fit plan tells you straight - no upsell.

What should I know before taking the OffSec Certified Professional (OSCP) and OSCP+?

Before the OSCP, know it is a 24-hour, hands-on proctored practical exam tied to the PEN-200 course - you compromise real machines, there is no multiple choice, and pricing is course-bundled ($1,749 for the course plus one attempt). A single PEN-200 pass now grants both the lifetime OSCP and the 3-year OSCP+. It is built for people who already have offensive-security fundamentals.

The OSCP has no formal prerequisite, but OffSec strongly recommends TCP/IP networking knowledge, reasonable Windows and Linux administration experience, and basic Bash or Python scripting (RoleMath eligibility record, as_of 2026-06-26). Budget for the course-bundled pricing: $1,749 for PEN-200 plus one exam attempt (90-day access), $1,699 for a standalone attempt, or $2,749/year for Learn One with two attempts (OffSec PEN-200 page, retrieved 2026-07-11) - confirm the live price before buying, since OffSec's subscription and bundle model changes often. The OSCP itself never expires; the OSCP+ designation expires after 3 years and renews via a recert exam, a qualifying higher OffSec cert, or the OffSec CPE program. Plan for heavy lab practice, not reading, before you sit the exam.

Citations: OffSec PEN-200 / OSCP page (offsec.com/courses/pen-200, retrieved 2026-07-11): 24-hour hands-on proctored practical exam, bundle $1,749 / standalone $1,699 / Learn One $2,749, OSCP lifetime + OSCP+ 3-year; RoleMath eligibility record (recommended networking, OS admin, scripting background)

Want to know whether to do the OSCP now or build offensive-security fundamentals first? The free RoleMath fit plan sequences your path - recommends only what fits, and nobody pays us for the answer.

Core source records

This table lists the page’s core content records and when they were checked. Claim-specific citations appear beside the relevant text and may not be repeated here.

ID	Supports	Source	Checked
CIT-01	Public official credential page for OffSec Certified Professional (OSCP) and OSCP+.	offensive-security-oscp	2026-06-26
CIT-02	Supports official facts for OffSec Certified Professional (OSCP) and OSCP+.	Official Candidate Bundle	2026-06-26T17:10:28Z

Ready to turn this decision into a plan?

Find out if OffSec Certified Professional (OSCP) and OSCP+ fits your background.