IntermediateOffensive

PenTest+

CompTIA PenTest+ · CompTIA

PenTest+ covers the whole penetration testing engagement: scoping and rules of engagement, reconnaissance, vulnerability discovery, attacks on networks, applications and the cloud, post-exploitation and reporting. It is recognised by the US DoD and gives a methodical, vendor-neutral view. Its strength is to give weight to scoping, the law and reporting; its limit is that it is mostly questions-based, so pentest recruiters prefer fully practical exams such as OSCP, PNPT or CPTS.

Exam
PT0-003 (since 17 December 2024): up to 90 questions (multiple choice and performance-based) in 165 minutes, pass mark 750 on a 100-900 scale.
Exam price
$439US list price; €323 on CompTIA’s European store. Prices vary by country. Voucher with a retake (Retake Assurance): US$579.
Required experience
None required. CompTIA recommends 3-4 years as a penetration tester, with Network+ and Security+ or equivalent knowledge.
Validity and maintenance
Valid 3 years: 60 CEUs plus a US$150 continuing education fee per cycle, or pass the latest version or a higher CompTIA certification (no fee).
Format
Multiple choice and hands-on
Recognition
ISO/IEC 17024 accredited · DoD 8140 approved

Who is it for?

Juniors moving into penetration testing or vulnerability assessment, and security staff who manage or commission pentests and need to understand them.

Domains covered

  • Engagement management: 13%
  • Reconnaissance and enumeration: 21%
  • Vulnerability discovery and analysis: 17%
  • Attacks and exploits: 35%
  • Post-exploitation and lateral movement: 14%

Nestor’s take

Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.

Official site

The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.

All certifications

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.