You pass the exam in the lab, not on exam day.
OffSec exams are practical, proctored and almost always end in a report. This page shows how much lab time and how many attempts each licence package contains, how the exam works per certification, and how we support you up to exam day.
Four steps, no shortcut.
1. Establish where you stand
Before you buy, a short call establishes whether you meet the course prerequisites. Every course page lists the prerequisites and the signals that a course is still too early for you.
2. Plan lab time realistically
The Course + Cert Bundle gives 3 months of course access including labs and one exam attempt; Learn One gives 12 months and two attempts. If you are studying alongside a full-time role, the longer access is usually the honest choice.
3. Practise under exam conditions
Labs are the core of preparation: independent enumeration, clean notes, a report that makes each step reproducible. Our two-day onsite workshops in Reykjavík and Dubai drill exactly that loop against a full Active Directory environment.
4. Support up to exam day
As an OffSec Learning Partner we handle licence, voucher and scheduling questions directly, and we are reachable in German or English when you get stuck in the lab. Additional exam attempts can be purchased.
What exam day asks of you - and what you practise beforehand.
| Course | Exam | Practice environment |
|---|---|---|
| PEN-200 OSCP | 24-hour practical exam followed by a report. Passing awards the OSCP certification. | Course modules plus dedicated lab networks and challenge labs that model a complete attack path. |
| PEN-300 OSEP | 48-hour practical exam with a report. Passing awards the OSEP certification. | Extensive labs with hardened networks and multi-domain challenge labs. |
| WEB-200 OSWA | Practical exam against several applications, with a report. Passing awards the OSWA certification. | Modular labs per vulnerability class plus challenge labs with complete applications. |
| WEB-300 OSWE | 48-hour practical exam with a report. Passing awards the OSWE certification. | Labs with complete applications including source code, plus a challenge lab for exam preparation. |
| SOC-200 OSDA | Practical exam analysing live attacks, with a report. Passing awards the OSDA certification. | A lab with realistic telemetry: attacks are executed and you analyse the resulting data. |
| EXP-301 OSED | 48-hour practical exam with a report. Passing awards the OSED certification. | Labs with real Windows applications where vulnerabilities are found and exploited. |
Two days of Active Directory, onsite in Reykjavík or Dubai.
The GOAD workshop drills enumeration, attack paths and documentation in a complete Active Directory environment - the same working style a practical exam demands.