HTB CDSA (HTB Certified Defensive Security Analyst)
HTB CDSA is the Hack The Box certification for security analysis, SOC operations and incident handling at an intermediate level across multiple heterogeneous networks. Candidates correlate evidence, determine incident impact and write a security incident report. The audience includes entry-level SOC analysts, incident handlers and forensics analysts.
Exam Details
Exam in a dedicated lab reached by VPN or Pwnbox. HTB reviews the submitted flags and English report within 20 business days.
The exam voucher costs $210 before VAT ($249.90 including VAT). A voucher expires one year after purchase and covers two attempts. The second attempt is available only if a report was submitted for the first. The Silver Annual plan includes one specialist exam voucher per year; HTB raises its price from $490 to $550 a year on October 12, 2026.
Requirements and Renewal
Prerequisites
100% completion of the SOC Analyst job-role path and an exam voucher. HTB recommends knowledge of web, operating system and networking basics and of the available data sources.
Renewal
Does not expire.
Exam Domains
9 domains| Domain |
|---|
| SOC Processes & Methodologies |
| SIEM Operations (ELK/Splunk) |
| Tactical Analytics |
| Log Analysis |
| Threat Hunting |
| Active Directory Attack Analysis |
| Network Traffic Analysis (Incl. IDS/IPS) |
| Malware Analysis |
| DFIR Operations |
Certification Lists
Tools Covered by HTB CDSA
Hack The Box
FreemiumHands-on hacking labs, machines, and CTF competitions with academy courses and enterprise ranges.
Splunk
Free / CommercialSearch-driven SIEM and observability platform, owned by Cisco since 2024.
Related Tool Categories
Disk and memory forensics, malware sandboxes, and incident response collection platforms.
Sandboxes, capability scanners, binary diffing, and malware triage platforms.
SIEM platforms, EDR agents, SOAR automation, and detection rule engines for security operations.
Frequently Asked Questions
How long is the HTB CDSA exam?→
The exam lab is available for 7 days, and the incident report must be uploaded within those 7 days.
How much does the HTB CDSA exam cost?→
An exam voucher costs $210 ($249.90 including VAT) and covers two exam attempts. The second attempt is available only if a report was submitted for the first.
What is required to sit the HTB CDSA exam?→
Candidates must complete 100% of the SOC Analyst job-role path and hold an exam voucher.
Does HTB CDSA count for ISC2 CPE credits?→
HTB submits 40 CPE credits for a passed certification exam when the candidate has an active subscription and has added an ISC2 ID to the account.
Sources
Exam details are checked against official Hack The Box pages. Fees, exam versions, and renewal rules change; confirm with Hack The Box before registering. HTB CDSA is a trademark of its owner. This site is not affiliated with or endorsed by Hack The Box.