› Certifications · compare
Compare certifications Pick up to 3 certifications and compare them side-by-side on cost, exam format, recertification, salary signal, quality, and domain coverage.
OffSec · professional
OSEP Offensive Security Experienced Penetration Tester
The OffSec Experienced Penetration Tester (OSEP) is based on the PEN-300 course and addresses advanced techniques around antivirus evasion, Active Directory attacks, and living-off-the-land methods. The fully practical 48-hour exam (47:45 hrs exam + 24 hrs report) in a simulated enterprise environment is the key difference from knowledge-based certifications—it tests real attack capabilities. OSEP is considered credible proof of high-level offensive competence in red team circles, but requires solid OSCP knowledge. Together with OSED and OSWE, OSEP forms the OSCE³ trio.
Official page OffSec · expert
OSCE3 Offensive Security Certified Expert 3
Offensive Security Certified Expert 3
Official page Comparing
OffSec OSEP
OffSec OSCE3
› Cost 3-year cost of ownership
$1,649
$0
› Exam mechanics Pass mark
OSEP Lab points-based (typically 100/100 across multiple targets in 48hr exam)
OSCE3 Composite — earned by holding OSWE + OSEP + OSED simultaneously
Pass mark
Lab points-based (typically 100/100 across multiple targets in 48hr exam)
Composite — earned by holding OSWE + OSEP + OSED simultaneously
Retake policy
OSEP $249 fee · 0d wait
OSCE3 $249 fee · 0d wait
Retake policy
$249 fee · 0d wait
$249 fee · 0d wait
Study time
OSEP 300–600 hrs
OSCE3 900–1500 hrs
Study time
300–600 hrs
900–1500 hrs
Delivery
OSEP online proctored
OSCE3 online proctored
Delivery
online proctored
online proctored
› Salary signal (US base) Range
OSEP $140K – $215K
OSCE3 $165K – $245K
Range
$140K – $215K
$165K – $245K
Median
OSEP $170,000
OSCE3 $195,000
Role context
OSEP Red team operator / advanced pentester, US, 5+ years.
OSCE3 Senior offensive security engineer / lead red teamer, US, 7+ years. Triple-cert holders are rare and command premiums.
Role context
Red team operator / advanced pentester, US, 5+ years.
Senior offensive security engineer / lead red teamer, US, 7+ years. Triple-cert holders are rare and command premiums.
› Quality (4-axis rubric · 0–10) › Recognition & lifecycle Current version
OSEP PEN-300 (2024) (2024-06)
OSCE3 Composite (2024 component versions) (2024-06)
Current version
PEN-300 (2024) (2024-06)
Composite (2024 component versions) (2024-06)
› Domain coverage A2 Network Security
● core
·
A21 Malware Analysis & Reverse Engineering
A21 Malware Analysis & Reverse Engineering
·
● core
A4 Application Security
·
● core
A6 Identity & Access Management
A6 Identity & Access Management
● core
·
A9 Penetration Testing & Red Teaming
A9 Penetration Testing & Red Teaming
● core
● core
Browse the full catalog or open any one of these on its detail page for full study materials, peer comparisons, and lifecycle notes.