OSCP (OffSec Certified Professional)
OSCP is a practical penetration testing certification earned by passing a proctored exam against a private lab network of standalone machines and an Active Directory set, followed by a written penetration test report. OffSec pairs it with the PEN-200 course and aims it at people moving into penetration testing, including security professionals and ethical hackers. Passing the exam awards both OSCP, which does not expire, and OSCP+, which expires after three years.
Exam Change
Dec 1, 2026: OffSec replaces the fixed 70-point pass mark with equated scaled scoring per exam set. The exam format, objectives and required competency stay the same, and earlier results are not recalculated.
Exam Details
Proctored online exam in a private VPN with three standalone machines and one Active Directory set of three machines. Points depend on proof files and a professional report.
Standalone OSCP+ exam without training, with two attempts that are both valid for 120 days from purchase. The PEN-200 Course + Cert Bundle costs $1,749 with 90 days of course access and one attempt, and Learn One costs $2,749 per year with one year of access and two attempts.
Requirements and Renewal
Prerequisites
None. OffSec awards the credential to candidates who pass the exam. It recommends TCP/IP networking, Windows and Linux administration experience, and basic Bash or Python scripting.
Renewal
OSCP does not expire. The OSCP+ designation expires three years after issue. It is renewed by earning 120 CPE credits in the cycle, passing the recertification exam, or passing a qualifying higher-level OffSec exam (OSWA, OSEP, OSWE, OSED, OSMR, OSEE or OSAI+), together with annual AMP ($299 per year) or AMF ($145 per year) coverage where the program rules require it.
Exam Domains
2 domains| Domain | Weight |
|---|---|
| Standalone machines (three machines, initial access and privilege escalation) | 60% |
| Active Directory set (three machines, assumed-breach scenario) | 40% |
Comparisons
Certification Lists
Related Tool Categories
Password hash crackers, online credential brute-forcers, and authentication testing utilities.
Intercepting HTTP proxies, security assessment toolkits, and network exploitation frameworks.
Infrastructure scanners, CVE audit engines, container image inspectors, and exposure management platforms.
Frequently Asked Questions
Is ChatGPT allowed in the OSCP exam?→
No. OffSec prohibits AI chatbots and LLMs such as ChatGPT, Gemini, Copilot and OffSec KAI during the OSCP+ exam and treats their use as a breach of its Academic Policy. Only the OSEE and OSAI exams allow them.
How much does the OSCP course cost?→
The PEN-200 course and exam bundle costs $1,749 for 90 days of access and one attempt. Learn One is $2,749 per year with two attempts, and the exam alone is $1,699 with two attempts.
What is the difference between OSCP and OSCP+?→
Passing the exam grants both. OSCP stays valid indefinitely, while OSCP+ expires three years from issue unless it is renewed through CPE credits, the recertification exam, or a qualifying higher-level OffSec exam.
How long is the OSCP exam?→
Candidates get 23 hours and 45 minutes in the exam lab and another 24 hours to upload the report. The exam is proctored throughout.
Is the OSCP passing score changing?→
Yes. Exams taken through November 30, 2026 need 70 of 100 points. From December 1, 2026, points convert to a scaled score specific to each exam set, so 70 points is no longer a fixed cutoff.
Sources
- OffSec PEN-200 course and OSCP+ certification
- OffSec blog: OSCP+ scoring update
- OffSec Help Center: OSCP+ Exam Guide
- OffSec Help Center: AI Usage Policy in OffSec Exams
- OffSec Help Center: CPE Program and Annual Maintenance Handbook
- OffSec Help Center: Recertification Exam FAQ
- OffSec Help Center: Certification Exam FAQ
- OffSec Help Center: Annual Maintenance Fee (AMF) FAQ
Exam details are checked against official OffSec pages. Fees, exam versions, and renewal rules change; confirm with OffSec before registering. OSCP is a trademark of its owner. This site is not affiliated with or endorsed by OffSec.