CPENT
Certified Penetration Testing Professional · EC-Council
The CPENT is EC-Council’s practical penetration testing certification: a long hands-on exam across varied environments (Active Directory, web, IoT and operational technology, segmented networks, binary exploitation) followed by a report. A very high score also earns the LPT (Master) title. Its strength is a broad and demanding practical scope; its limit is much lower recognition among pentest teams than the OSCP or CPTS.
- Exam
- Fully practical exam of 24 h (or two 12-hour sessions) on a cyber range, followed by a report. Pass mark 70%; above 90% also earns the LPT (Master) title.
- Exam price
- $999“Exam + Range” voucher; retake US$499.
- Required experience
- EC-Council asks for two years of information security experience, the CEH or equivalent knowledge; its page also refers to enrolling in the official training.
- Validity and maintenance
- Valid 3 years: 120 continuing education credits (ECE) over the cycle and an annual fee of US$80.
- Format
- Hands-on
- Recognition
- ISO/IEC 17024 accredited
Who is it for?
Penetration testers who already hold the CEH and want a practical EC-Council credential, notably for employers or tenders that reference EC-Council.
Domains covered
- Penetration testing methodology, scoping and engagement
- Open-source intelligence and social engineering
- External and internal network penetration testing
- Perimeter devices and segmented networks
- Web application penetration testing
- Wireless penetration testing
- IoT and operational technology (OT) testing
- Cloud penetration testing
- Binary analysis and exploitation
- Report writing and post-test actions
Nestor’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
