The OSCP and the CEH are both offensive-security certifications, and they are often named in the same breath. But they test fundamentally different things, in fundamentally different ways, and confusing them leads people to buy the wrong one. This page is informational only and contains no operational attack instructions. Here is the detailed comparison, beyond the table above.
The core difference
The OSCP (Offensive Security Certified Professional, tied to OffSec’s PEN-200 course) is proven entirely by doing. There are no multiple-choice questions. You sit a 24-hour practical exam, attacking machines on a private VPN lab and then writing a professional report, and you either demonstrate the skill or you do not.
The CEH (Certified Ethical Hacker, from EC-Council) is proven mostly by knowing. It is a broad, knowledge-based exam, 125 multiple-choice questions, covering offensive tools and techniques from a defender’s standpoint, with an optional separate practical exam available.
So the headline is simple: the OSCP measures demonstrated exploitation skill; the CEH measures breadth of offensive concepts. Almost everything else follows from that.
Cost compared
Both are among the more expensive certifications, and the totals land close together:
- OSCP: roughly US$1,699 for the standalone exam, or about US$1,749 for the PEN-200 course-plus-exam bundle that includes lab access, with retakes around US$249.
- CEH: roughly US$1,199 for the exam, but you usually add eligibility or official EC-Council training, which can run to US$1,000 or more on top.
So neither is cheap. With the OSCP, much of the value (and the time cost) is in the lab practice; with the CEH, a large slice of the spend is the training or eligibility route. Confirm current pricing with each provider before you commit.
Difficulty and time
This is where they separate most sharply:
- OSCP: a 24-hour proctored practical, roughly 23 hours 45 minutes of attack time against an Active Directory set (40 points) and three standalone machines (60 points) in an assumed-compromise model, then a further 24 hours to write and upload the report. You need 70 of 100 points. Candidates with a strong Linux and networking background often budget 200 to 300 hours of lab practice; those newer to hands-on work, considerably more.
- CEH: 125 multiple-choice questions in four hours, with a cut score that varies by exam form (roughly 60 to 85 percent). It is intermediate and concept-focused, so most people prepare in a fraction of the OSCP’s lab time.
Neither result is in doubt: the OSCP is the harder, more time-intensive credential by a wide margin. The CEH is a manageable knowledge exam.
Recognition and ecosystem
Both are recognised, but by different audiences:
- OSCP is highly respected among practitioners and hiring managers for hands-on penetration-testing and red-team roles, precisely because it is hard to fake. Its reputation rests on the practical exam.
- CEH is well recognised by HR and meets some government and compliance baselines, which is its main strength. Among hands-on practitioners, opinions on its depth vary, and practical certifications are often rated more highly for red-team work.
In other words, the CEH is strong at getting you past filters; the OSCP is strong at proving you can do the job once you are in the room.
Career outcomes
- OSCP maps to: penetration tester, red-team operator, and security roles where demonstrated exploitation skill is the point.
- CEH maps to: security analyst, junior penetration tester, and roles that explicitly list CEH for compliance or government baselines.
The two are not mutually exclusive. A common pattern is to hold the CEH to clear HR and compliance screens, and the OSCP to prove genuine ability for the hands-on work. If you can only do one, your target role decides it.
How to decide
Answer one question: do you need to prove skill, or pass a filter?
- You want a hands-on penetration-testing or red-team role and must demonstrate real exploitation ability → OSCP (and budget serious lab time, not just the exam fee).
- You need a widely recognised baseline to pass HR or meet a government or compliance requirement, or you want structured breadth first → CEH.
- You are early and lack networking and Linux fundamentals → build those first (for example with Security+ or Network+) before attempting the OSCP; the CEH is the gentler entry of the two.
One credential proves you can do the work; the other proves you know the concepts and clears the filters. Choose the one your target role actually rewards.