IntermediateOffensive

CPTS

HTB Certified Penetration Testing Specialist · Hack The Box

The CPTS is Hack The Box’s flagship penetration testing certification: after a 28-module path, a 10-day exam on a large network ends with a commercial-grade report. It is reputed to be one of the toughest intermediate exams and is gaining recognition quickly, including in France. Its strength is depth and realism (Active Directory, web, report) at a low price; its limits are HR recognition still behind the OSCP and a learning path that takes months.

Exam
10-day practical exam on a realistic corporate network: collect enough flags to reach the required points and submit a commercial-grade report. Two attempts per voucher; results within 20 business days.
Exam price
$210Voucher excluding VAT (US$249.90 including VAT). The required Academy path needs a subscription; Silver Annual (US$490 a year) includes one voucher.
Required experience
Complete 100% of the Penetration Tester job-role path on HTB Academy (28 modules) before starting the exam.
Validity and maintenance
No expiry date according to Hack The Box. Passing also earns 40 CPE credits that can be claimed with ISC2.
Format
Hands-on

Who is it for?

Juniors and intermediate penetration testers ready to invest several months, and OSCP holders who want a deeper, more realistic exam with a real report.

Domains covered

  • Penetration testing process and attack planning
  • Enumeration and information gathering
  • Exploitation of network services
  • Web application attacks
  • Windows and Linux privilege escalation
  • Active Directory attacks
  • Pivoting, tunnelling and lateral movement
  • Documentation and commercial-grade reporting

Nestor’s take

Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.

Official site

The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.

All certifications

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.