Skip to main content
IMMUNITYSEC

HTB CWES (HTB Certified Web Exploitation Specialist)

Web application penetration testing and bug bounty hunting at an intermediate level are the subject of HTB CWES, across web applications, web services and APIs. It replaced HTB CBBH on 2025-10-01. Its audience is junior web application testers, entry-level bug bounty hunters and web developers.

$210
Exam fee

Exam Details

Issuer
Hack The Box
Level
Intermediate
Exam type
Hands-on practical
Questions
Not published
Duration
7 days (lab access and report submission)
Passing score
Minimum point threshold from submitted flags plus a report that meets quality requirements; HTB gives at least 70 of 100 points on intermediate paths as an example.
Exam fee
$210
Validity
Does not expire
Tracks
Offensive Security, Application Security
Last Verified
2026-10-09

Exam in a dedicated lab reached by VPN or Pwnbox. HTB reviews the submitted flags and English report within 20 business days.

The exam voucher costs $210 before VAT ($249.90 including VAT). A voucher expires one year after purchase and covers two attempts. The second attempt is available only if a report was submitted for the first. The Silver Annual plan includes one specialist exam voucher per year; HTB raises its price from $490 to $550 a year on October 12, 2026.

Requirements and Renewal

Prerequisites

100% completion of the Web Penetration Tester job-role path and an exam voucher. HTB recommends intermediate knowledge of web application, web service and API testing.

Renewal

Does not expire.

Current Version

HTB CWES (Web Penetration Tester path), in effect since Oct 1, 2025.

Official HTB CWES page→

Exam Domains

6 domains
Domain
Bug Bounty Hunting processes and methodologies
Web application/web service static and dynamic analysis
Information gathering techniques
Web application, web service and API vulnerability identification and analysis
Manual and automated exploitation of various vulnerability classes
Vulnerability communication and reporting

Related Certifications

HTB CPTSOSCPeJPT

Certification Lists

Penetration Testing

Tools Covered by HTB CWES

Hack The Box

Freemium
CTF & Practice Labs

Hands-on hacking labs, machines, and CTF competitions with academy courses and enterprise ranges.

LicenseProprietary
PlatformWeb

Related Tool Categories

Application Security Tools→

Static source analysis, dynamic scanners, and dependency vulnerability checkers.

Penetration Testing Tools→

Intercepting HTTP proxies, security assessment toolkits, and network exploitation frameworks.

Frequently Asked Questions

What happened to HTB CBBH?→

From 2025-10-01 HTB CBBH became HTB CWES and the Bug Bounty Hunter path was renamed Web Penetration Tester. Existing CBBH holders were moved to CWES on HTB platforms and Credly with no extra exam.

How long is the HTB CWES exam?→

The exam lab is available for 7 days, and the report must be uploaded within those 7 days.

How much does the HTB CWES exam cost?→

An exam voucher costs $210 ($249.90 including VAT) and covers two exam attempts. The second attempt is available only if a report was submitted for the first.

What is required to sit the HTB CWES exam?→

Candidates must complete 100% of the Web Penetration Tester job-role path and hold an exam voucher.

Sources

Exam details are checked against official Hack The Box pages. Fees, exam versions, and renewal rules change; confirm with Hack The Box before registering. HTB CWES is a trademark of its owner. This site is not affiliated with or endorsed by Hack The Box.