CWES vs OSCP
| CWES Hack The Box | OSCP OffSec | |
|---|---|---|
| Focus | Offensive · Intermediate | Offensive · Intermediate |
| Price | $210 Voucher with 2 attempts. You must first finish 100% of the HTB Academy Web Penetration Tester path (20 modules, subscription extra); the Silver Annual plan (USD 550/year) includes it along with the CJCA one. | $1,749 PEN-200 course with 90 days of lab access and one exam attempt. |
| Study hours | 150–300 h | 300–600 h |
| Real difficulty | ●●●○○ | ●●●●○ |
| Exam | Hands-on Length: 168 h | Hands-on Length: 24 h |
| Validity | Does not expire | OSCP does not expire; OSCP+ lasts 3 years |
| Job ads in United States | 28 | 2,096 |
| Avg. salary | $115,873 | $163,208 |
| Index | 41 | 66 |
| Summary | Web application pentesting and bug bounty: injections, XSS, authentication, access control and APIs. A 7-day hands-on exam with a professional report. | The pentesting certification most requested in job ads. A 24-hour exam plus a report. Expensive, but it still opens more doors than any other hands-on cert. |
Highlighted: the best in that row.