OSCP vs CEH: What Each One Proves

What each certification is

The OSCP (Offensive Security Certified Professional, from OffSec) is a fully hands-on exam: you get roughly 24 hours to compromise a set of machines you’ve never seen, then write a professional report proving how you did it. There is no multiple choice — you either broke in and documented it, or you didn’t. It’s widely treated as the practical ‘gold standard’ for demonstrated offensive skill.

The CEH (Certified Ethical Hacker, from EC-Council, currently v13) is a 125-question, four-hour multiple-choice exam covering 20 domains of the ethical-hacking workflow. It’s a broad knowledge certification — and a widely recognised one, mandated for some government roles. There is an optional hands-on ‘CEH Practical’, but the standard, most common CEH is the knowledge exam.

The difference that matters

Recognising the right answer about an attack in a list of four options is a different skill from executing that attack against a live system that’s trying to stop you. OSCP tests the second; the standard CEH tests the first. Neither is worthless — breadth of knowledge is genuinely useful, and CEH is a credible foundation — but if the thing you’re buying is the ability to find and exploit real weaknesses, OSCP (and demonstrated real-world work) is the far stronger signal.

What this means when you hire

Don’t hire on a certificate alone, and be wary of tenders that require the CEH by name — it can screen out excellent testers while letting through people who only passed a multiple-choice exam. Weight hands-on qualifications like OSCP and OSWE, independent CREST accreditation, and above all a verifiable track record: published CVEs, bug-bounty results and disclosure credits. We cover this in full on our certified ethical hacker page and our guide to vetting a tester.

Common questions