OffSec Certified Professional credential artwork

OffSec Certified Professional (OSCP) Courses

Validates practical penetration testing skills, including enumeration, exploitation, privilege escalation, Active Directory attacks and professional reporting.

OSCP is a hands-on exam of just under 24 hours, so a good course has to give you lab time on Linux, Windows and Active Directory machines, not only lessons. We compared the two official routes on lab access, exam attempts and price.

Most people should take PEN-200 with the Course + Cert Bundle, the official course with an exam attempt included. Choose Learn One if you study around a job and want a full year of labs, a second attempt and Proving Grounds.

CourseBest forFormatPrice
PEN-200: Penetration Testing with Kali LinuxOfficial course and examInteractive$1,749
Learn OneA year of lab accessInteractive$2,749/year
Official course and exam

PEN-200: Penetration Testing with Kali Linux

OffSec's own course, with 321 hours of content across 20+ modules, videos, hands-on labs and nine challenge labs. Three of the challenge labs closely replicate the exam environment.

Great fit if you want the official course that matches the exam

Poor fit if you want a full year of lab access and a second attempt; choose Learn One

A year of lab access

Learn One

A year of PEN-200 access with two exam attempts and Proving Grounds Practice for extra machines. It costs $1,000 more than the Course + Cert Bundle.

Great fit if you are studying around a job and want a year plus a second attempt

Poor fit if you expect to pass within 90 days; the Course + Cert Bundle costs $1,000 less

How to choose a OSCP course

  • Plan lab time around your job. The Course + Cert Bundle gives 90 days of lab access and Learn One gives 365. Choose by how many hours a week you can study.
  • Practise the exam environment. Three of PEN-200's nine challenge labs closely replicate the exam: three standalone machines and an Active Directory set. Finish them before you book.
  • Do not skip Active Directory. Every passing combination needs Active Directory points, so the standalone machines alone cannot pass.
  • Count the exam attempts. The bundle includes one attempt and Learn One includes two. A retake costs $249 and the standalone exam $1,699.

Recommended OSCP course combinations

  • Standard route: PEN-200 with the Course + Cert Bundle ($1,749) and the free LainKusanagi and TJ Null OSCP-like lists, practised on Proving Grounds Practice ($19/month).
  • Studying around a job: Learn One ($2,749/year), which includes Proving Grounds Practice, with the free TJ Null list for extra machines.
  • New to hacking: TryHackMe Premium ($17/month) or Proving Grounds Play (free) for a few months before you buy PEN-200, so your 90 days go to the course.
  • More machines on a budget: Hack The Box VIP+ ($25/month) alongside the Course + Cert Bundle.

Compare all OSCP practice tests →

OSCP course FAQ

What is the best OSCP course?

PEN-200, OffSec's official course. Take the Course + Cert Bundle for $1,749, or Learn One at $2,749 a year if you want a full year and a second attempt.

Can I take OSCP without PEN-200?

Yes. The standalone exam costs $1,699 and you can practise on Proving Grounds, Hack The Box or TryHackMe. PEN-200 is the only route that bundles the course with an exam attempt.

How long does an OSCP course take?

Plan for 200 to 400 hours of preparation, with about 250 for most people. Add time if Active Directory, Linux or scripting is new to you.

Do I need experience before PEN-200?

No formal prerequisites. OffSec recommends TCP/IP networking, Windows and Linux administration and basic scripting first.