Penetration Testing Certifications

CREST Registered Penetration Tester: a practical exam in infrastructure and web application testing, recognised by regulators and procurement teams in the US, UK and worldwide, and renewed every three years.

CREST Practitioner Security Analyst: the CREST exam covering networking, operating systems, web technologies and core security assessment methodology.

OffSec Certified Professional: a hands-on exam that requires compromising machines on a live network, including Active Directory, and writing a professional penetration test report.

OffSec Web Assessor: hands-on web application testing, including cross-site scripting, SQL injection, server-side request forgery and authentication flaws, proven against live targets.

OffSec Wireless Professional: practical attacks against Wi-Fi networks, from WPA and WPA2 cracking to rogue access points, for on-site wireless penetration testing.

OffSec Advanced AI Red Teaming: OffSec's advanced certification in attacking AI systems, earned through a hands-on exam against AI and LLM applications, agents and the infrastructure around them.

Hack The Box Certified Offensive AI Expert: specialist certification in attacking AI and LLM applications, covering prompt injection, AI agent and tool abuse, and data leakage through RAG pipelines.