› Certifications · compare
Compare certifications
Pick up to 3 certifications and compare them side-by-side on cost, exam format, recertification, salary signal, quality, and domain coverage.
OffSec · expert
OSWEOffensive Security Web Expert
Advanced web application exploitation — whitebox review, vulnerability chain construction.
Official pageOffSec · professional
OSCPOffensive Security Certified Professional
Hands-on penetration testing — exploitation, privilege escalation, AD attacks.
Official pageComparing
OffSecOSWE
OffSecOSCP
› Cost
Exam fee
OSWE$1,699
OSCP$1,649
Exam fee
$1,699
$1,649
Annual maintenance fee
OSWE—
OSCP—
Annual maintenance fee
—
—
3-year cost of ownership
OSWE$1,699
OSCP$1,649
3-year cost of ownership
$1,699
$1,649
› Exam mechanics
Pass mark
OSWELab points-based (varies — typically 60+/100 with report)
OSCP70 / 100 points across the 24-hour exam
Pass mark
Lab points-based (varies — typically 60+/100 with report)
70 / 100 points across the 24-hour exam
Retake policy
OSWE$249 fee · 0d wait
OSCP$249 fee · 0d wait
Retake policy
$249 fee · 0d wait
$249 fee · 0d wait
Study time
OSWE300–500 hrs
OSCP300–600 hrs
Study time
300–500 hrs
300–600 hrs
Validity
OSWE3 yrs
OSCP3 yrs
Validity
3 yrs
3 yrs
CPE / yr
OSWE30 CPEs
OSCP30 CPEs
CPE / yr
30 CPEs
30 CPEs
Delivery
OSWEpractical lab
OSCPpractical lab
Delivery
practical lab
practical lab
› Salary signal (US base)
Range
OSWE$130K – $195K
OSCP$110K – $170K
Range
$130K – $195K
$110K – $170K
Median
OSWE$155,000
OSCP$135,000
Median
$155,000
$135,000
Premium %
OSWE—
OSCP—
Premium %
—
—
Role context
OSWESenior web/app pentester, US, 4-7 years.
OSCPPenetration tester / red team operator, US, 3–5 years.
Role context
Senior web/app pentester, US, 4-7 years.
Penetration tester / red team operator, US, 3–5 years.
› Quality (4-axis rubric · 0–10)
Schema quality
OSWE8.5
OSCP8.5
Schema quality
8.5
8.5
Practice evidence
OSWE9.5
OSCP9.5
Practice evidence
9.5
9.5
Maintenance
OSWE7.0
OSCP7.0
Maintenance
7.0
7.0
Market recognition
OSWE7.5
OSCP9.5
Market recognition
7.5
9.5
Average
OSWE8.1
OSCP8.6
Average
8.1
8.6
› Recognition & lifecycle
Recognition
OSWEGlobal · US · EU · UK
OSCPGlobal · US · EU · UK
Recognition
Global · US · EU · UK
Global · US · EU · UK
ISO 17024 accredited
OSWE—
OSCP—
ISO 17024 accredited
—
—
DoD 8140 baseline
OSWE—
OSCP—
DoD 8140 baseline
—
—
Holders worldwide
OSWE3,000
OSCP30,000
Holders worldwide
3,000
30,000
Current version
OSWEWEB-300 (2024) (2024-01)
OSCPPEN-200 (2024) (2024-03)
Current version
WEB-300 (2024) (2024-01)
PEN-200 (2024) (2024-03)
› Domain coverage
A1Governance, Risk & Compliance
OSWE·
OSCP⚠ gap
A1Governance, Risk & Compliance
·
⚠ gap
A12Data Security, Privacy & Protection
OSWE·
OSCP⚠ gap
A12Data Security, Privacy & Protection
·
⚠ gap
A2Network Security
OSWE·
OSCP● core
A2Network Security
·
● core
A21Malware Analysis & Reverse Engineering
OSWE·
OSCP○ touched
A21Malware Analysis & Reverse Engineering
·
○ touched
A24Exposure Management & Attack Surface
OSWE○ touched
OSCP○ touched
A24Exposure Management & Attack Surface
○ touched
○ touched
A4Application Security
OSWE● core
OSCP● core
A4Application Security
● core
● core
A6Identity & Access Management
OSWE·
OSCP● core
A6Identity & Access Management
·
● core
A9Penetration Testing & Red Teaming
OSWE● core
OSCP● core
A9Penetration Testing & Red Teaming
● core
● core
C1Adversarial Machine Learning
OSWE·
OSCP⚠ gap
C1Adversarial Machine Learning
·
⚠ gap
C2LLM-Specific Attacks
OSWE·
OSCP⚠ gap
C2LLM-Specific Attacks
·
⚠ gap
Browse the full catalog or open any one of these on its detail page for full study materials, peer comparisons, and lifecycle notes.