Ethical hacking certifications: which one to choose for your level (eJPT, PNPT, CPTS, OSCP…)

Choosing between ethical hacking certifications is tricky because each one measures different things: some are multiple-choice exams on concepts, others drop you into a network for days and ask for a professional report. In this guide we order them by level (entry, intermediate and advanced) and explain which makes sense for your experience and what you want to achieve with it.

A note before starting: prices, formats and renewal conditions change often. We give you the general description of each, but always check the current conditions and price on the official website before deciding.

How to choose an ethical hacking certification

Ask yourself three questions:

• Is it hands-on? An exam where you have to compromise machines proves real skills. A multiple-choice one proves theoretical knowledge. For technical profiles, hands-on ones carry more weight.
• Who recognises it? Some certifications are well known in HR and appear in job postings; others are highly respected by practitioners even if they are mentioned less.
• Are you ready? Sitting a hard exam too early is the most expensive way to find out what you are missing.

Entry-level ethical hacking certifications

eJPT (INE Security)

The eJPT is one of the most common first hands-on certifications. The exam takes place in a lab where you must enumerate and exploit systems to answer the questions. It covers reconnaissance, scanning, basic exploitation and simple pivoting. It is a good goal if you have already done a few easy machines and want to validate what you learned.

CompTIA Security+

Security+ is not an offensive certification but a security fundamentals one. It combines multiple-choice questions with scenario-based questions. It is widely recognised by companies and in the public sector of some countries, and it is useful if you are looking for a first job in cybersecurity in general, not just pentesting.

CEH (EC-Council)

The CEH is probably the best known outside the technical world and often appears in job postings. Its main exam is multiple-choice, although there is an additional practical part. Among technical professionals it is valued less than fully hands-on certifications, but it can help you get past HR filters.

Intermediate level: PNPT, CPTS and OSCP

These are the most compared certifications, because they all aim to prove you can carry out a real penetration test. There is a detailed comparison in OSCP vs PNPT vs CPTS; this is the summary.

PNPT (TCM Security)

The PNPT simulates a real engagement: several days to perform the audit, including OSINT and Active Directory, extra time to write the report and an oral presentation of the results. It is a very complete option for a first serious offensive exam and its training is affordable.

CPTS (Hack The Box)

To sit the CPTS you must first complete the Penetration Tester path on HTB Academy. The exam lasts several days and requires a professional-quality report. It has a reputation for being demanding and very technical, with very thorough preparatory training.

OSCP (OffSec)

The OSCP is still the offensive certification with the most recognition in pentesting job postings. The exam is hands-on, with a limited time of about 24 hours to compromise machines, including an Active Directory environment, followed by submitting the report. Since late 2024, OffSec issues the OSCP+ version, which requires periodic renewal; check the current conditions on its website.

Which of the three?

• If you want recognition in job postings, OSCP.
• If you want the best balance between training and a realistic exam, PNPT or CPTS.
• If you train on Hack The Box, CPTS fits naturally with what you already practise.

Advanced and specialisation certifications

• OSWE (OffSec): advanced web exploitation based on source code review. For those who want to specialise in web applications.
• CRTO: focused on red team operations and the use of command and control frameworks in Active Directory environments.
• GPEN (GIAC): highly recognised, usually tied to SANS training, which is expensive.
• CISSP: not technical or offensive, but about security management. It requires several years of verified experience and makes sense in leadership roles.

You can see them all in the certifications section.

Recommended route by level

1. No experience: do not get certified yet. Spend a few months on fundamentals following a plan like the one in how to learn ethical hacking from scratch.
2. You solve easy machines: eJPT as a first hands-on validation.
3. You solve medium machines comfortably: PNPT, CPTS or OSCP, depending on your goals.
4. You already work in the field: specialise with OSWE, CRTO or others depending on your area.

A certification opens doors, but what keeps you inside is knowing how to do the job. Practise more than you study for the exam.

Frequently asked questions

What is the best ethical hacking certification to start with?

For a technical profile just starting out, the eJPT is a reasonable first hands-on goal. If you are looking for a first job in cybersecurity in general, Security+ is also a common choice.

Do I need a certification to work as a pentester?

It is not mandatory, but it helps a lot to get past the first filters, especially if you have no demonstrable experience. A good portfolio of writeups and projects also counts.

Is the CEH worth it?

It depends on the goal. It is well known in HR, but if you want to prove technical skills, a fully hands-on certification usually carries more weight among professionals.

How long do I need to prepare for the OSCP?

It varies a lot depending on your background. Usually people get there after many months of practice on intermediate machines; it is not a good first certification if you are just starting.

Before any certification come the fundamentals. If you want to build them with a guided route in Spanish, we are preparing Ethical hacking from scratch ("Hacking ético desde cero"), a beginner course in 8 modules. The launch price will be 29 € (49 € afterwards) and the waitlist is already open.