Skip to main content
Offensive Security (Pentest / Red Team)Listed as a primary cert for that lane. Back to pathway
Back to certifications

Hack The Box · Cybersecurity

CPTS

A structured penetration-testing methodology across enumeration, exploitation, privilege escalation and reporting.

View certification details
Understand the subject

A structured penetration-testing methodology across enumeration, exploitation, privilege escalation and reporting.

Apply it to the work

Useful when a tester needs to work methodically through an unfamiliar environment and produce evidence another person can follow.

Build practical evidence

Get comfortable with Linux, networking and web requests. Budget time for the Academy path and for writing reports, not just completing targets.

Level
Intermediate

What you will learn to do

Understand the subject

A structured penetration-testing methodology across enumeration, exploitation, privilege escalation and reporting.

Apply it to the work

Useful when a tester needs to work methodically through an unfamiliar environment and produce evidence another person can follow.

Build practical evidence

Get comfortable with Linux, networking and web requests. Budget time for the Academy path and for writing reports, not just completing targets.

Certification essentials

Requirements, costs and keeping it current.

Check the vendor record and ongoing commitment alongside the career guidance.

Pricing view
Market

Vendor record

Live

HTB lists CPTS as an intermediate practical penetration-testing assessment with a 10-day exam deadline and a professional report requirement. Complete the required role path and hold a voucher before starting; check the exam dashboard for the applicable deadline.

Source: Hack The Box · Read 19 September 2026

Sourced fields only; this does not mean every exam detail has been verified. Pricing and renewal policies have their own sources and check dates. Confirm the currency, tax and final booking total with the vendor.

Role-fit guidance is TechWaymark editorial interpretation. It is separate from the recorded vendor facts and does not measure hiring outcomes.

Costs and renewal

Exam cost
US$490/year; US$550 from 12 Oct 2026
Exam format
Exam format not yet verified — check the vendor's exam page
Keeping it current

The earned credential does not expire; no periodic recertification is required to retain it.

Renewal sources & exceptions

Exam voucher and training-access deadlines are separate from the earned credential's validity.

Renewal policy checked 2026-09-28. Check the linked provider policy for current fees and eligibility.

HTB Silver Annual training route with bundled exam vouchers. New annual pricing takes effect 12 October 2026. This is an annual subscription, not the standalone CPTS voucher; confirm the included specialist voucher and completion requirements. Local taxes may apply. Vendor price checked 2026-09-24. Check the vendor record before booking.

Current vendor pricing source ↗
Preparation and practical skills

Recommended prior knowledge

  • HTB Academy Penetration Tester path

Common misconceptions

  • CPTS may meet a named requirement; it does not guarantee shortlisting or replace documented work.

What this cert does NOT guarantee

  • Guaranteed interviews, a salary increase or proof of production experience.
Alternatives and related certifications

Where this fits

  • None required
This cert
CPTS
  • Top of this lane

Alternative routes

No single right path. These adjacent options reach similar roles.

  • OSCP
    Common follow-on or adjacent credential, see the graph for full lineage.
  • CBBH
    Common follow-on or adjacent credential, see the graph for full lineage.
  • CWEE
    Common follow-on or adjacent credential, see the graph for full lineage.

Adjacent & overlapping

  • OSCP
  • CBBH
  • CWEE
Career outcomes and limitations

Realistic first roles

Penetration testing methodology

How people actually get here

    Real-world career variations

    Timeline expectations

    1. Months 0–2Foundation reading, concepts, vocabulary.
    2. Months 2–4Hands-on labs, documented home projects.
    3. Months 4–6Practice exams, weak-area drills, exam.
    4. Post-examUse target vacancies to guide applications and projects. There is no guaranteed time to a first role.

    Study resources

    Study options

    Choose the right mix for your goals and experience. Links below go to official and third-party resources.

    Guided study

    Structured resources from established providers can help build knowledge and skills.

    Compare study options →

    Third-party providers. Commercial terms, pricing and availability apply.

    Practice environments

    Explore suitable environments for practical work. Check the tools, features and access you need.

    Compare practice resources →

    External resources. Check current costs and access requirements.

    Resources are selected for relevance. Compare access, syllabus coverage and total cost; a listing does not imply a commercial partnership.

    Compare the resources for CPTS
    CourseProvider source

    HTB Academy. Penetration Tester job-role path

    Video + Labs

    Check the resource provider for current local pricing
    View resource
    LabProvider source

    HTB CPTS exam lab

    Hands-on

    Check the resource provider for current local pricing
    View resource
    ReferenceProvider source

    CPTS exam guide and report template

    Reading

    Free resource; confirm current access terms
    View resource

    Check the current syllabus, access terms and total cost before choosing. Resource inclusion does not guarantee exam success.

    Optional home projects

    Build something you can explain.

    Ideas to explore after choosing a certification, using your own tools and keeping evidence of your work.

    Example project evidence
    Project evidence map (example)
    Assessment evidence indexScope and inputs
    Linked findings report with retest criteriaDecisions and reasoning
    Evidence record (example)
    EvidenceWhat to capture
    Assessment evidence indexShow the inputs, scope and decisions behind this record. Evidence identifiers resolve to the correct sanitised artefacts.
    Linked findings report with retest criteriaInclude the evidence supporting your conclusion. A failed validation attempt is not reported as a confirmed vulnerability.

    Build a complete assessment evidence chain

    A training assessment has several observations across a small lab. The challenge is to organise them into a defensible narrative with clear validation boundaries.

    Authorised security lab Your own tools Evidence guidance
    View project guide
    Track this certification

    Editorial route and career guidance. No separate external evidence review is recorded for this assessment.

    Editorial evidence review: pending · UK market. Vendor facts and prices elsewhere on this page have their own sources and check dates.