Offensive security training and certification
Learn it.
Practise it.
Prove it.
OffensiveMind trains security professionals through structured courses, realistic practice labs and proctored practical exams. Every credential is earned by doing the work, within scope and to a professional standard.
- Credentials, level 100 to 400
- 5Credentials, level 100 to 400
- Lab machines across all environments
- 415Lab machines across all environments
- OMCP practical exam
- 24hOMCP practical exam
- Lab environments
- 4Lab environments
The certification ladder
Five credentials. One clear path upward.
Start at the foundation and climb as far as your career needs. Each step is a practical exam with its own course and labs behind it.
- OMCALevel 100 Foundational
OffensiveMind Certified Associate
The foundation for a career in offensive security.12h practical
View credential - OMCPFlagshipLevel 200 Practitioner
OffensiveMind Certified Practitioner
The hands-on penetration testing credential.24h practical plus 24h report
View credential - OMPELevel 300 Professional
OffensiveMind Professional Expert
Expert-level web application security assessment.48h practical plus 24h report
View credential - OMRELevel 300 Professional
OffensiveMind Red Team Expert
Adversary emulation that makes defenders stronger.48h practical plus 24h report
View credential - OMCELevel 400 Expert
OffensiveMind Certified Expert
The top of the ladder: vulnerability research.72h practical plus 24h report
View credential
How it works
Three steps from curious to certified.
Every part of the platform exists to move you from one step to the next, with no gaps between study, practice and assessment.
- 01
Learn
5 courses, one for each credential. Video lessons, written guides and knowledge checks take you from the fundamentals to expert-level specialisms.
Browse courses - 02
Practise
415 lab machines in private, isolated environments. Guided exercises for every module, then independent practice from easy to insane.
See the labs - 03
Prove
A proctored practical exam on a network built for your attempt, then a professional report. Pass and you receive a credential with a public verification page.
How exams work
Training tracks
Choose the discipline you want to practise.
Five tracks cover the core of professional security assessment, each led by one course and ending in one credential.
- 01
Core
The networking, operating system and web fundamentals every security role is built on.
OM-110Offensive Foundations
- 02
Penetration Testing
Authorised, scoped assessments of networks and hosts, delivered with a professional report.
- 03
Web Application
In-depth assessment of web applications and their code, from review to remediation advice.
- 04
Red Team
Objective-driven adversary emulation that helps defenders measure and improve detection.
OM-320Red Team Operations
- 05
Exploit Development
Vulnerability research and software security analysis at the expert level.
OM-410Vulnerability Research
Practice labs
415 machines to practise on, all of them isolated and authorised.
Private lab environments let you build real skills without touching a live system. Start with guided exercises, then move to open practice and full enterprise networks.
- Guided exercises
146
Machines
Course Labs
Guided exercises for every module.
- Standalone machines
180
Machines
Arena
Standalone machines for independent practice.
- Enterprise networks
64
Machines
Enterprise Range
Realistic corporate networks.
- Exam simulation
25
Machines
Exam Simulator
Rehearse the real thing.
The exam promise
A credential that means something, because it is hard to fake.
Our exams test what you can do, not what you can memorise. Every attempt is fair, supervised and graded by reviewers against the exam objectives.
Proctored
Identity and workspace are checked over webcam, and the practical period is supervised throughout.
Practical
Work in a private, isolated lab. The OMCP practical runs for 24 hours. There is no multiple choice.
Report-based
You document your work in a professional report, the same deliverable a client would expect.
- 01
Book
Choose a start time that suits you from the dashboard, up to 90 days ahead. Slots run around the clock.
- 02
Verify
On the day, a proctor checks your ID and workspace over webcam before the exam network opens.
- 03
Perform
Work through the exam objectives in a private, isolated lab built only for your attempt.
- 04
Report
Write up your work in the time allowed after the practical, using the format set for the credential.
- 05
Result
Graders review your evidence and report. Results arrive within ten working days.
- 06
Credential
Passing earns a digital credential with a public verification page you can share with employers.
Plans
One plan to train, practise and certify.
Pricing is straightforward and published in full. Plans start at $249, and our recommended plan is shown here. Compare every option side by side.
See all plansPro
$2,799per year
A year to train, practise and certify.
- One course of your choice
- 365 days of all labs
- Arena and Enterprise Range
- Two exam attempts
- Priority support
Questions
Answers before you enrol.
The essentials about who OffensiveMind is for, where to start and how credentials work.
Who is OffensiveMind for?
OffensiveMind provides professional training and certification for people building a career in security assessment. Our learners range from career changers and IT administrators to experienced penetration testers and vulnerability researchers. Each credential page lists its intended audience and the experience it expects.
Which credential should I start with?
Most people start with OMCA, our foundational credential, and then progress to OMCP, our flagship practitioner credential. If you already have equivalent experience, check the prerequisites for the level you are considering, as OMCP accepts equivalent experience in place of OMCA.
How do courses, labs and exams fit together?
Each credential has a course that prepares you for its exam. Labs give you hands-on practice with the material, and the Exam Simulator lets you rehearse the format, length and scoring of the real exam before you sit it.
Do OffensiveMind credentials expire?
No. OffensiveMind credentials do not expire. Optional refresher courses are available if you want to update your skills, but you do not need to take one to keep a credential.
What does the OMCP exam involve?
OMCP is assessed through a 24-hour practical exam on an unfamiliar lab network, followed by 24 hours to write a professional report. You pass by scoring at least 70 of 100 points and submitting a complete report, and there are no multiple choice questions.
How do I receive and verify my credential?
Results arrive within ten working days of your exam, after graders have reviewed your evidence and report. Passing earns a digital credential with a public verification page, which you can share with employers.
Begin
Your next credential starts with one course.
Create an account, pick your starting point on the ladder and begin practising in an environment built for it.