Penetration Testing and Ethical Hacking Certifications
Certifications for penetration testing, ethical hacking, and red team operations. Most use a timed lab exam in which candidates compromise target systems and submit a written report. The rest are question-based exams on methodology and tooling.
By Level
Certifications Compared
13 total| Certification | Issuer | Level | Exam | Exam fee | Validity |
|---|---|---|---|---|---|
| CRTO Red Team Operator | Zero-Point Security | Entry | Hands-on practical | £399 | Does not expire |
| CRTP Certified Red Team Professional | Altered Security | Entry | Hands-on practical | $249 | 3 years |
| eJPT Junior Penetration Tester | INE | Entry | Hands-on practical | Not published | 3 years |
| PJPT Practical Junior Penetration Tester | TCM Security | Entry | Hands-on practical | $249 | Does not expire |
| CEH Certified Ethical Hacker | EC-Council | Intermediate | Multiple choice | $950 | 3 years |
| GPEN GIAC Penetration Tester | GIAC | Intermediate | Multiple choice and performance-based | $999 | 4 years |
| HTB CPTS HTB Certified Penetration Testing Specialist | Hack The Box | Intermediate | Hands-on practical | $210 | Does not expire |
| HTB CWES HTB Certified Web Exploitation Specialist | Hack The Box | Intermediate | Hands-on practical | $210 | Does not expire |
| OSCP OffSec Certified Professional | OffSec | Intermediate | Hands-on practical | $1,699 | Does not expire |
| PenTest+ CompTIA PenTest+ | CompTIA | Intermediate | Multiple choice and performance-based | $439 | 3 years |
| PNPT Practical Network Penetration Tester | TCM Security | Intermediate | Hands-on practical | $499 | Does not expire |
| CRTE Certified Red Team Expert | Altered Security | Advanced | Hands-on practical | $299 | 3 years |
| OSEP OffSec Experienced Penetration Tester | OffSec | Advanced | Hands-on practical | $1,749 | Does not expire |
Related Tool Categories
More Certification Lists
Frequently Asked Questions
Which penetration testing certifications are entry level?→
Positioned as entry level by their issuers: CRTO (Red Team Operator), CRTP (Certified Red Team Professional), eJPT (Junior Penetration Tester), PJPT (Practical Junior Penetration Tester).
Which penetration testing certifications have hands-on exams?→
CRTO, CRTP, eJPT, PJPT, HTB CPTS, HTB CWES, OSCP, PNPT, CRTE, OSEP test with a practical lab exam. The others use question-based exams, some with performance-based items.
Which penetration testing certifications do not expire?→
CRTO, PJPT, HTB CPTS, HTB CWES, OSCP, PNPT, OSEP do not expire, according to the issuer. The others require renewal through continuing education, fees, or a new exam.
Levels follow each issuer's own positioning and stated experience requirements. Exam fees and formats come from official issuer pages; each certification page lists its sources and review date.