1 What is CPTS?
The HTB Certified Penetration Testing Specialist (CPTS) is HackTheBox's flagship penetration testing certification. It's designed to test real-world skills in a simulated enterprise environment with Active Directory.
Unlike multiple-choice exams, CPTS is 100% hands-on. You get 10 days to compromise an enterprise network and write a professional penetration test report. The exam environment includes multiple subnets, domain controllers, and realistic vulnerabilities.
2025 Update: CPTS continues to gain recognition as a serious OSCP alternative. At $210 for the exam voucher (with HTB Academy subscription), it offers exceptional value. The exam now requires completing 100% of the Job Role Path before attempting.
Why CPTS is Hot in 2026
CPTS has gained massive traction as an OSCP alternative. The training path is top-tier, the exam is realistic, and the price point ($490 vs $1,649) makes it accessible. Many hiring managers now recognize CPTS alongside OSCP.
The Good
- ✓Exceptional training quality via HTB Academy
- ✓More affordable than OSCP ($490 vs $1,649)
- ✓10 days = less time pressure than 24hr exams
- ✓Heavy AD focus-realistic enterprise scenarios
- ✓No proctoring-work at your own pace
The Tough
- ✗Still growing industry recognition
- ✗Technically demanding-heavy AD knowledge needed
- ✗Report quality heavily affects pass/fail
- ✗Challenging exam-not for beginners
- ✗Requires HTB Academy subscription
2 Exam Structure
Phase 1: Penetration Test (10 Days)
- • Full enterprise network with multiple machines
- • Active Directory environment with trusts
- • Web applications, databases, and services
- • Must achieve specific flags/objectives
- • No hints, no hand-holding
Phase 2: Report Writing
- • Professional penetration test report required
- • Must document all findings with evidence
- • Executive summary + technical details
- • Remediation recommendations
- • Report quality affects pass/fail
💡 Pro Tip: Start your report template BEFORE the exam. Document everything as you go. Screenshots, commands, outputs-capture it all. You'll thank yourself later.
3 HTB Academy Path
The official training path covers everything you need. Complete these modules before attempting the exam:
4 Study Resources
Official Resources
- • HTB Academy Path - The official training
- • HTB Main Platform - Practice machines
- • HTB Pro Labs - Dante, Offshore, RastaLabs
Video Content
- • IppSec - HTB walkthroughs
- • John Hammond - CTF explanations
- • TCM Security - AD attacks
Practice Machines
- • HTB Boxes: Forest, Monteverde, Sauna
- • HTB Boxes: Resolute, Blackfield, Active
- • HTB Pro Lab: Dante (essential!)
Documentation
- • HackTricks - Attack techniques
- • Red Team Notes - AD attacks
- • The Hacker Recipes - Methodology
5 CPTS vs OSCP
| Aspect | CPTS | OSCP |
|---|---|---|
| Price | $490 | $1,649+ |
| Exam Duration | 10 days | 24 hours |
| Report Required | Yes (graded) | Yes (graded) |
| Proctored | No | Yes |
| AD Focus | Heavy | Moderate |
| Industry Recognition | Growing fast | Gold standard |
💡 Bottom line: CPTS is better training, better value, and more realistic. OSCP still has more name recognition, but CPTS is catching up fast. Many people do both.
6 FAQ
Is CPTS harder than OSCP?
Many say CPTS is technically harder because of the heavy AD focus and longer exam. However, you get 10 days instead of 24 hours, which balances it out. The training quality is exceptional.
Can I use the HTB Academy path alone to pass?
Yes, the HTB Academy path is comprehensive and covers everything on the exam. However, supplementing with Pro Labs (especially Dante) is highly recommended for realistic practice.
Is CPTS recognized by employers?
Recognition is growing rapidly in 2026. More hiring managers understand HTB's quality. While OSCP still has broader recognition, CPTS holders consistently report positive experiences in job interviews.
What's the retake policy?
The $490 bundle includes one free retake. If you fail twice, you'll need to purchase another exam voucher. There's a waiting period between attempts.
Do I need prior pentesting experience?
Some background helps, but the HTB Academy path starts from fundamentals. Complete the full path, practice on HTB machines, and do a Pro Lab before attempting the exam.
Join the CPTS Community
Connect with CPTS holders and aspirants. Get study tips, share your progress, and find study partners.