Overview
The Offensive Security Certified Professional (OSCP) is a hands-on penetration testing certification from OffSec. It is earned through the PEN-200 course and a proctored practical exam in which candidates attack live lab machines. There are no multiple-choice questions; the exam tests whether you can actually find and exploit weaknesses.
OffSec also lists a related credential, OSCP+. The OSCP does not expire, while the OSCP+ expires three years after issue and can be renewed through recertification, further OffSec exams or its continuing professional education programme.
Who can apply
OffSec sets no formal prerequisites. It strongly recommends a solid understanding of TCP/IP networking, experience administering Windows and Linux, and basic familiarity with Bash and/or Python scripting.
Exam pattern
The exam is a 24-hour practical assessment run over a private VPN and proctored by an OffSec employee. It is built on live systems with real-world style vulnerabilities.
| Part | Content | Share of grade |
|---|---|---|
| Standalone machines | Three machines where you gain initial access and then escalate privileges | 60% |
| Active Directory set | A simulated breach spread across three machines | 40% |
Evidence of your work must be gathered as part of the assessment.
Syllabus
The PEN-200 course covers topics such as enumeration, encryption, cross-site scripting, SQL injection, privilege escalation, Active Directory attacks, AWS exploitation, web and client-side attacks, password attacks and anti-virus evasion.
Fees
As listed on the official PEN-200 page in 2026:
| Option | Price |
|---|---|
| Course and certification bundle (90 days of access, one exam attempt) | $1,749 |
| Learn One subscription (one year of access, two exam attempts) | $2,749 per year |
| Standalone OSCP+ exam | $1,699 |
Retake costs are not stated on that page.
After the exam
OSCP, once earned, has lifetime validity. OSCP+ must be renewed every three years.
Preparation tips
Build comfort with networking basics and with both Windows and Linux before starting the course.
Practise scripting in Bash or Python.
Work through the course material and lab machines with a focus on enumeration and privilege escalation, which carry most of the grade.
Practise Active Directory attacks, since that set is 40% of the exam.
Keep notes and evidence as you go, because proof of work is required.
Is the OSCP exam multiple choice?
No. It is a 24-hour hands-on exam where you attack live machines.
Does the OSCP expire?
No. OffSec states the OSCP is valid for life. The OSCP+ expires after three years unless renewed.