eCPPT
INE Certified Professional Penetration Tester · INE
Overhauled in 2024, the eCPPT validates professional penetration testing skills: reconnaissance, initial access, web testing, exploitation and post-exploitation, basic exploit development and, above all, Active Directory (30% of the exam). Its strength is a practical, AD-heavy exam at a moderate price; its limits are lower recognition than the OSCP, a subscription requirement and, since the overhaul, no report to write.
- Exam
- Fully practical exam in a lab, auto-graded through questions on what you find; results within a few hours. INE does not publish the duration on its page (candidates report 24 h).
- Exam price
- $450Voucher reserved for INE Premium subscribers (US$799 a year, one free voucher a year included), with one free retake. eCPPT + 3 months of Premium bundle: US$599.
- Required experience
- No formal prerequisite. INE designs it for professionals with two or more years of offensive security experience.
- Validity and maintenance
- Valid 3 years. Renew with 36 CPE credits and a US$99 fee per 3-year period, by earning a higher INE certification, or by passing the latest exam version (no fee).
- Format
- Hands-on
Who is it for?
Penetration testers with a couple of years of practice, often eJPT holders, who want to consolidate Active Directory and post-exploitation before tackling the OSCP or CPTS.
Domains covered
- Information gathering and reconnaissance: 10%
- Initial access: 15%
- Web application penetration testing: 15%
- Exploitation and post-exploitation: 25%
- Exploit development: 5%
- Active Directory penetration testing: 30%
Nestor’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
Some figures come from secondary sources: check them on the official site before you register.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
