OMPE
OffensiveMind Professional Expert
Level 300ProfessionalWeb Application
Expert-level web application security assessment.
OMPE is for practitioners who assess complex web applications for a living. Candidates review application code and behaviour in depth and deliver findings that development teams can act on.
Who it is for
Built for these professionals
- Application security engineers
- Experienced web penetration testers
- Developers moving into security
- OMCP holders specialising in web
What it validates
Competency areas
- Secure code review
- Application architecture analysis
- Authentication and session design
- API security assessment
- Remediation guidance for developers
- Technical findings reports
Exam format
How the OMPE exam works
Every exam is practical and proctored. You are assessed on the work you demonstrate, in a controlled lab network.
- Practical duration
- 48 hours
- Report time
- 24 hours
- Environment
- Custom web applications with source code provided
- Passing
- Meet the objectives for each application and submit a report
- Proctored
- Yes
- Deliverable
- Application security assessment report
Prerequisites
Before you begin
- OMCP or equivalent experience
- Reading knowledge of a modern web language
Next on the ladder
Where to go after this credential
These credentials follow naturally from the skills you prove here.