Skip to main content
TechWaymark
Market

Certification intelligence

Compare certifications.

Purpose, experience, cost and ongoing commitment, read side by side before you choose what to study.

Comparing 2 of 4

Two usually gives the clearest comparison. Your choices are saved in this page’s address.

Your comparison

Start with role fit and entry expectations. There is no universal winning certification.

The main trade-off

The two practical offensive benchmarks. OSCP still wins on recognition; CPTS is closer to modern engagement reality.

There is a sensible sequence here

Compare practical assessment depth, reporting and training access before choosing a penetration-testing route.

There is substantial methodology and exploitation overlap; completed labs and reports may be more useful than a second similar badge.

TechWaymark editorial relationship · reviewed 2026-09-24

At a glanceRead across each question

OffSec

OSCP+

Available · PEN-200

Hack The Box

HTB Certified Penetration Testing Specialist (HTB CPTS)

Available

Role fit

Consider OSCP when the target work involves penetration testing and the examination format suits your learning goal. Build reliable enumeration, exploitation and reporting habits before paying for a time-limited package; there is no universal preparation calendar.

CPTS can be a structured goal for developing penetration-testing practice. Assess your ability to enumerate, explain findings and write a useful report, and check the credential named by your target employer.

Entry expectationsDistinguish recommended preparation from mandatory certification requirements.

OffSec expects TCP/IP networking, working Windows and Linux administration, some Active Directory, and Bash or Python scripting before starting.

HTB requires 100% completion of the relevant Academy role path and an exam voucher.

Exam costAllow separately for learning resources, labs, tax and any retake.

US$1699

US$490/year; US$550 from 12 Oct 2026

Ongoing commitmentRenewal cycles, required learning and fees. CPE, CPD and CEU are provider-specific continuing education credits.

OSCP does not expire. Keeping OSCP+ current requires renewal on a 3-year cycle: 120 CPE credits or an eligible exam route, with maintenance coverage where required.

Renewal sources & exceptions

Extending OSCP+ requires annual AMF or AMP coverage, including the exam-extension route. OffSec also offers a paid recertification exam to earn a new 3-year credential without extending the existing one. These fees are not required to retain lifetime OSCP.

Renewal policy checked 2026-09-28. Check the linked provider policy for current fees and eligibility.

The earned credential does not expire; no periodic recertification is required to retain it.

Renewal sources & exceptions

Exam voucher and training-access deadlines are separate from the earned credential's validity.

Renewal policy checked 2026-09-28. Check the linked provider policy for current fees and eligibility.

Study planningEditorial estimates, dependent on experience and weekly hours.

6–12 months

Map the syllabus against your experience before setting a date.

You do not need both by default. Add a second credential only when it covers a distinct responsibility or requirement. The exam fee is not the full cost of becoming ready.

Suitability guidance, exam facts and sources
OffSecAvailable

OSCP+

PEN-200

Consider it if
Consider OSCP when the target work involves penetration testing and the examination format suits your learning goal. Build reliable enumeration, exploitation and reporting habits before paying for a time-limited package; there is no universal preparation calendar.
Skip or defer if
Buying lab access before checking your starting skills and available practice time.
Experience
OffSec expects TCP/IP networking, working Windows and Linux administration, some Active Directory, and Bash or Python scripting before starting.
Exam cost
US$1699
Exam details and sources

The PEN-200 exam now awards OSCP+, which carries a three-year validity, alongside the lifetime OSCP designation. Existing OSCP holders keep their credential.

Format
24-hour practical exam + 24-hour report · TechWaymark-held detail; confirm the exam version with the vendor
Renewal

OSCP does not expire. Keeping OSCP+ current requires renewal on a 3-year cycle: 120 CPE credits or an eligible exam route, with maintenance coverage where required.

Renewal sources & exceptions

Extending OSCP+ requires annual AMF or AMP coverage, including the exam-extension route. OffSec also offers a paid recertification exam to earn a new 3-year credential without extending the existing one. These fees are not required to retain lifetime OSCP.

Renewal policy checked 2026-09-28. Check the linked provider policy for current fees and eligibility.

Study planning
6–12 months. Editorial estimate, dependent on experience and weekly hours.

OSCP+ standalone exam product: two attempts within 120 days, no PEN-200 training or labs. This is not the Course + Certification bundle. Confirm tax and the current standalone exam terms before purchase. Vendor price checked 2026-09-24.

Current vendor pricing sourceVendor source · record checked 2026-09-17

The record date applies to recorded vendor facts, not every price or editorial judgement.

Read guidance and practical tasks →
Hack The BoxAvailable

HTB Certified Penetration Testing Specialist (HTB CPTS)

Consider it if
CPTS can be a structured goal for developing penetration-testing practice. Assess your ability to enumerate, explain findings and write a useful report, and check the credential named by your target employer.
Skip or defer if
Equating a demanding learning path with a guaranteed hiring advantage.
Experience
HTB requires 100% completion of the relevant Academy role path and an exam voucher.
Exam cost
US$490/year; US$550 from 12 Oct 2026
Exam details and sources

HTB lists CPTS as an intermediate practical penetration-testing assessment with a 10-day exam deadline and a professional report requirement. Complete the required role path and hold a voucher before starting; check the exam dashboard for the applicable deadline.

Format
Exam format not yet verified — check the vendor's exam page
Renewal

The earned credential does not expire; no periodic recertification is required to retain it.

Renewal sources & exceptions

Exam voucher and training-access deadlines are separate from the earned credential's validity.

Renewal policy checked 2026-09-28. Check the linked provider policy for current fees and eligibility.

Study planning
Map the syllabus against your experience before setting a date.

HTB Silver Annual training route with bundled exam vouchers. New annual pricing takes effect 12 October 2026. This is an annual subscription, not the standalone CPTS voucher; confirm the included specialist voucher and completion requirements. Local taxes may apply. Vendor price checked 2026-09-24.

Current vendor pricing sourceVendor source · record checked 2026-09-19

The record date applies to recorded vendor facts, not every price or editorial judgement.

Read guidance and practical tasks →
Editorial assessment: three distinct criteria

These qualitative judgements are not a hiring survey. Role relevance describes where each credential fits. Employer examples and vendor requirements are linked on the individual certification pages. No overall winner is calculated.

Certification editorial assessments
CriterionOSCPCPTS
Role relevance

The responsibilities this credential is designed to support.

Practical penetration testingPenetration testing methodology
Practical depth

Practical learning depth, not a percentage of lab questions.

very highvery high
Renewal burden

Ongoing effort; lower means less maintenance.

highlow

Before you start

How to read this comparison

Each row answers one question across every certification, so the differences stand out at a glance. Vendor facts and editorial judgement are always labelled separately, and no overall winner is calculated.

Read the full methodology

Vendor facts first

Exam codes, published fees, format and renewal rules come from the vendor. Each record carries the date it was checked, and pricing links to its source.

Judgement, kept separate

Role fit, entry expectations and study planning are editorial. They sit beside the facts and are labelled as estimates, never mixed into them.

No overall winner

The board reads across each row. Which trade-off matters depends on the role you are heading for, so no total is calculated and no credential is crowned.

Frequently compared

Popular matchups

The pairings people ask about most. Add either to the board above, or open the dedicated comparison for the fuller read.

CompTIA Security+CySA+

Entry security baseline vs the analyst step-up. Security+ first, CySA+ once you're working tickets.

Open the dedicated comparison →

OSCPCPTS

The two practical offensive benchmarks. OSCP still wins on recognition; CPTS is closer to modern engagement reality.

Open the dedicated comparison →

CISSPCISM

Compare broad security practice and architecture with security programme management. Let the responsibilities you want to develop decide; both credentials have experience requirements beyond passing an exam.

Open the dedicated comparison →

CompTIA Security+ISC2 SSCP

Compare a broad security foundation with an operational security credential. Check each provider's experience requirements, syllabus and renewal obligations; passing an exam and qualifying for the full credential are different questions.

Open the dedicated comparison →

Azure Security Engineer (AZ-500) (retired)Microsoft SC-100

An Azure security engineering exam and a security architecture credential serve different responsibilities. AZ-500 is retained for historical context; check its retirement notice and current alternative before planning new study.

Open the dedicated comparison →

Cisco CCNANetwork+

Entry networking, vendor-specific vs vendor-neutral. CCNA carries more hiring weight; Network+ is easier on-ramp.

Open the dedicated comparison →

Certified Kubernetes AdministratorCKAD

Same Kubernetes family. Admin vs developer. Pick by which side of the cluster you operate.

Open the dedicated comparison →

RHCSALFCS

Linux sysadmin, Red Hat vs distro-neutral. RHCSA dominates enterprise hiring; LFCS is the open alternative.

Open the dedicated comparison →