OSCP: are you ready, which package fits, and what keeping OSCP+ costs
OffSec sells PEN-200 and OSCP+ directly in three ways: the exam alone for $1,699, the course with 90 days of labs and one attempt for $1,749, or a year with two attempts (Learn One) for $2,749, offered at $2,199 when we checked in November 2026. OSCP is for people who already know networking and Linux and Windows administration and want a hands-on penetration-testing credential. Our rough planning figure is 3 to 6 months of lab work.
Key facts
- OffSec sells the PEN-200 course with 90 days of labs and one exam attempt for $1,749, and Learn One for $2,749 a year (list price; $2,199 on offer when checked). (OffSec, checked November 5, 2026)
- The OSCP+ exam on its own costs $1,699. (OffSec, checked November 5, 2026)
- The exam lasts 23 hours and 45 minutes, followed by 24 hours to submit a report. (OffSec, checked November 5, 2026)
- OSCP does not expire; OSCP+ expires three years after it is issued. (OffSec, checked November 5, 2026)
Short answers
- How much does the OSCP exam cost?
- $1,699 for the exam alone, or $1,749 with the PEN-200 course and 90 days of labs, as of November 2026.
- How many attempts do I get?
- One with the exam or the bundle; two with Learn One.
- Does the OSCP expire?
- OSCP does not; OSCP+ expires after three years unless you renew it.
- How long is the OSCP exam?
- 23 hours and 45 minutes, plus 24 hours to submit the report.
Are you ready for OSCP?
OSCP shows that you can break into machines and an Active Directory environment under time pressure, then document it in a report someone else could follow. It is taken by people moving into penetration testing or red-team work who already know networking and Linux and Windows administration. The exam is practical from start to finish, so lab hours matter far more than reading.
A good fit if
- You already administer Linux and Windows systems and are comfortable with TCP/IP networking
- You want penetration-testing work, where a hands-on exam shows the skill directly
- You can put 3 to 6 months into lab work and can clear about two days in a row: nearly 24 hours for the exam, then a day for the report
Think twice if
- You are still learning networking basics or the Linux command line
- You want a defensive role, such as SOC analyst, rather than offensive testing
- You cannot set aside one block of nearly 24 hours, plus a day to write the report
Consider instead: CompTIA CySA+ for defensive analyst work, or Network+ to build the networking base first; if the Linux command line is the gap, take a Linux administration course before PEN-200.
A nearly 24-hour practical exam
The OSCP exam is a hands-on test lasting 23 hours and 45 minutes, followed by 24 hours to upload a written report. It has three standalone machines worth 60 points and an Active Directory set worth 40 points. OffSec sets no formal prerequisites but recommends TCP/IP networking, Windows and Linux administration and some Bash or Python.
The three ways to buy it
| Option | First attempt | What you get |
|---|---|---|
| Exam only | $1,699 | One OSCP+ exam attempt, no course or labs. For people who prepared elsewhere. |
| Course + Cert Bundle | $1,749 | PEN-200 course and labs for 90 days, one exam attempt. One payment. |
| Learn One (list price) | $2,749 | 365 days of PEN-200 and lab access, two exam attempts; renews automatically. Shown at $2,199 with a $550-off anniversary offer when we checked. |
The bundle costs only $50 more than the exam alone, so buying the exam by itself only makes sense if you already have PEN-200 material. The real decision is the bundle against Learn One: 90 days and one attempt for $1,749, or a year and two attempts for $2,749 ($2,199 on the current offer).
Is a cheaper route possible?
You can practice on other platforms and buy the exam alone, but the saving over the bundle is only $50. The cheaper overall route is to arrive well prepared, so one 90-day bundle is enough.
Picking an OffSec package without regret
OffSec sells PEN-200 and the exam directly, so the choice is between its packages rather than between providers. Check:
- Lab time against your timeline. The bundle gives 90 days of PEN-200 and labs; Learn One gives 365. If you plan on 3 to 6 months of lab work, 90 days is tight unless you start already practiced.
- How many attempts you get. One with the exam or the bundle, two with Learn One.
- That Learn One renews automatically. Note the renewal date when you buy if you do not want a second year.
- The price at checkout. The $2,199 Learn One price was a $550-off anniversary offer when we checked; the list price is $2,749.
OSCP versus OSCP+, and the yearly cost
Passing earns both: OSCP never expires, while OSCP+ expires three years after it is issued. To keep the plus, OffSec lists three routes: a recertification exam in the six months before expiry, passing another qualifying OffSec exam (OSEP, OSWA, OSED or OSEE), or its continuing-education program, which needs annual maintenance at $145 a year, or OffSec's membership at $299 a year, which includes the maintenance fee, lab access and continuing-education content.
Training a penetration-testing team
For a penetration-testing team, Learn One gives each person a year of labs and two attempts, which suits people studying alongside a full-time job. For several seats, ask OffSec directly about team pricing.
Next step
Ask for help choosing OSCP training
Sources
- OffSec: pricing (Learn One, Course + Cert Bundle), checked November 5, 2026
- OffSec: PEN-200 (standalone exam price, OSCP and OSCP+ validity, prerequisites), checked November 5, 2026
- OffSec: annual membership (maintenance fee and membership prices), checked November 5, 2026
- OffSec: OSCP exam guide (format and points), checked November 5, 2026
Prices are published list prices we recorded on the dates shown, not quotes. How we research.