CWEE vs GPEN
| CWEE Hack The Box | GPEN GIAC (SANS) | |
|---|---|---|
| Focus | Offensive · Advanced | Offensive · Intermediate |
| Price | $350 Voucher with 2 attempts. You must first finish 100% of the HTB Academy Senior Web Penetration Tester path (15 modules, subscription extra); the Gold Annual plan (USD 1,400/year) includes it along with the CJCA one. | $979 Exam attempt only; the SANS SEC560 course costs over USD 8,000. |
| Study hours | 250–450 h | 80–120 h |
| Real difficulty | ●●●●● | ●●●○○ |
| Exam | Hands-on Length: 240 h | Multiple choice Length: 3 h |
| Validity | Does not expire | 4 years (credits + fee) |
| Job ads in United States | 8 | 941 |
| Avg. salary | $5,850 | $156,033 |
| Index | 14 | 65 |
| Summary | Advanced white-box and black-box web exploitation: code review, deserialisation, vulnerability chaining. A 10-day exam with a report. One of the hardest on the market. | Well respected in large companies and the public sector, usually paid by the employer together with the SANS course. Open-book exam with lab questions. |
Highlighted: the best in that row.