Our course offerings are expanding and when taken in combination, they are learning journeys. In this article, you will find clearer distinctions of our course's code and levels.
In here, designation system and difficulty levels are listed.
For more information, you may also visit Understanding the OffSec Learning Library Content Designation System.
The table below shows the content designation system and difficulty levels.
| Content | Course Level Difficulty | OS Designation: | OS | Designation Example: | PEN-210 | ||
| N/A | Essential/Introductory-level | 0 | Multiple OS | PEN | Track | ||
| 200 | Foundational-level | 1 | Windows | 2 | Tier/Difficulty | ||
| 300 | Advanced-level | 2 | macOS | 0 | Course | ||
| 400 | Expert-level | 3 | Linux | 1 | Operating System |
| Foundational | Advanced | Expert | ||
|
OFFENSE |
Network Penetration Testing | PWK (PEN-200) | ETBD (PEN-300) | |
| WiFu (PEN-210) | ||||
| Web App Security | WEB-200 | AWAE (WEB-300) | ||
| Exploit Dev |
WUMED (EXP-301) OSMR (EXP-312) |
AWE (EXP-401) | ||
|
EARN |
OSCP OSWP OSWA |
OSEP + OSWE + OSED = OSCE3 OSMR |
OSEE |
| Foundational | Advanced | Expert | ||
| DEFENSE | Security Operations | SOC-200 | ||
| EARN | OSDA |
| Essential/Introductory |
| Kali Linux Essentials |
| PEN: Network Penetration Testing Essentials |
| WEB: Web Application Assessment Essentials |
| EXP: Exploit Development Essentials |
| CLD: Introduction to Cloud Security |
| SOC: Security Operations Essentials |
| SSD: Introduction to Secure Software Development |
| Get Good at Python |
| Get into Active Directory |
| Get into Development |
| Get into Linux |
| Get into Low Level Binary Security |
| Get into Networking |
| Get into Windows |
| Get Good at C |
| IT Generalist (Beginner, Intermediate, and Advanced) |
| SOC/Ops (Beginner, Intermediate, and Advanced) |
| Check the Learning Paths drop-down in the Offsec Learning Library or subscribe to our newsletter, to learn when new paths are added. |
Our certifications are usually identified by our community members using the acronym. Below you can find our full certification names, acronyms, and the corresponding courses needed in order to obtain each certification.
The tables below contain information on how the course code is generated
| Certification Abbreviation | Full Certification Name | Prerequisite Course |
| OSCP | OffSec Certified Professional | Penetration Testing with Kali Linux (PEN-200) |
| OSWP | OffSec Wireless Professional | Foundational Wireless Network Attacks (PEN-210) |
| OSWA | OffSec Web Assesor | Foundational Web Application Assessments with Kali Linux (WEB-200) |
| OSWE | OffSec Web Expert | Advanced Web Attacks and Exploitation (WEB-300) |
| OSEP | OffSec Experienced Penetration Tester | Advanced Evasion Techniques and Breaching Defenses (PEN-300) |
| OSED | OffSec Exploit Developer | Windows User Mode Exploit Development (EXP-301) |
| OSCE | OffSec Certified Expert | Cracking the Perimeter (CTP) - retired |
| OSCE3 | OffSec Certified Expert 3 | WEB-300 + PEN-300 + EXP-301 |
| OSEE | OffSec Exploitation Expert | Advanced Windows Exploitation (EXP-401) |
| OSMR | OffSec macOS Researcher | Advanced macOS Control Bypasses Foundation (EXP-312) |
| OSDA | OffSec Defense Analyst | Foundation Security Operations and Defense Analysis (SOC-200) |
| KLCP | Kali Linux Certified Professional | Kali Linux Revealed (PEN-103) |
| OSCC | OffSec CyberCore Certified | CyberCore - Security Essentials (SEC-100) |
| OSTH | OffSec Threat Hunter |
Foundational Threat Hunting (TH-200) |
| OSIR | OffSec Incident Responder | Foundational Incident Response (IR-200) |