OSEE certification: exam, EXP-401 training and pass score
OSEE is OffSec’s Exploitation Expert certification, earned after the in-person EXP-401 Advanced Windows Exploitation course. The proctored exam gives you 71 hours and 45 minutes for two assignments, then 24 hours to submit a PDF report; you need 75 of 100 points to pass. OffSec publishes no price for the course or exam, and the certification does not expire.
- Certification
- OffSec Exploitation Expert (OSEE); OffSec’s course page writes Offensive Security Exploitation ExpertOffSec EXP-401 course page, checked 10 October 2026
- Course
- EXP-401 Advanced Windows Exploitation (AWE), in-person only, no online contentOffSec EXP-401 course page and FAQ, checked 10 October 2026
- Cost
- Not published by OffSecOffSec EXP-401 course page and FAQ, checked 10 October 2026
- Exam duration
- 71 hours 45 minutes, plus 24 hours to upload the reportOffSec OSEE Exam Guide, checked 10 October 2026
- Exam tasks
- Two assignments; 25 points for partial and 50 for full completion eachOffSec OSEE Exam Guide, checked 10 October 2026
- Pass score
- 75 of 100 pointsOffSec OSEE Exam Guide, checked 10 October 2026
- Proctoring
- All OSEE exams are proctoredOffSec OSEE Exam Guide, checked 10 October 2026
- Recommended background
- 300-level OffSec certifications, Windows exploit-development and debugger experienceOffSec EXP-401 course page, checked 10 October 2026
- Validity
- Does not expireOffSec Certification Exam FAQ, checked 10 October 2026
Know if you're ready for OSEE — before you book.
Certsqill measures your OSEE readiness across every official exam domain — one 0–100 score from coverage, accuracy and consistency that tells you whether to book, keep studying, or sit.
Why people switch to Certsqill
Everything you need to walk in ready
Know where you stand, understand every mistake, and study in your language — one payment, no subscription.
Your OSEE Readiness Score, not a guess
One number from three signals — coverage, accuracy, and consistency — tells you whether to book the exam or keep studying.
Understand every OSEE mistake
When you miss a question, it explains why — using your own answer history to catch the patterns you keep repeating. Included, no subscription.
Explanations in your language, questions stay exam-accurate
Get every explanation in your language while the questions stay in exam-accurate English. Technical terms stay in English — the way the exam writes them.
Everything you need to pass
Why you can trust these OSEE questions
What is the OSEE certification?
OSEE stands for Exploitation Expert. OffSec’s course page uses the longer form, Offensive Security Exploitation Expert, and calls it the most difficult exploit-development certification you can earn. It sits at the top of OffSec’s exploit-development track, above the 300-level certifications OffSec recommends completing first.
The certification is tied to a single course: EXP-401 Advanced Windows Exploitation, usually shortened to AWE. Anyone who passes the exam earns the OSEE certification. OffSec frames the real-world value as being able to analyse vulnerable software, locate the problematic code and demonstrate a working proof-of-concept against modern Windows defences — a defensive research skill set aimed at professionals.
Source: OffSec — EXP-401 Advanced Windows Exploitation. Checked 10 October 2026.
How do you earn the OSEE cert? The EXP-401 course and training
EXP-401 is not a self-paced online course. OffSec limits AWE to an in-person, hands-on environment with live student-instructor interaction, and the EXP-401 FAQ confirms the course does not include online content.
According to the FAQ, scheduled EXP-401 trainings are offered periodically throughout the year at various venues. OffSec does not list dates or locations on the course page. For organisations, OffSec’s In-House Training can bring the course to your own site; the course page asks you to contact OffSec for details.
That structure matters for planning: the training schedule, not your own study pace, decides when you can begin, so check OffSec’s calendar early.
Source: OffSec Help — EXP-401 FAQ. Checked 10 October 2026.
How much does the OSEE certification cost?
OffSec does not publish a price for EXP-401 or the OSEE exam. The course page and the EXP-401 FAQ show no figure, and OffSec’s general pricing page covers its subscription and bundle options rather than AWE.
Retakes are handled differently from most OffSec exams as well: the certification exam FAQ says that to buy an OSEE retake you submit a request and support helps with the purchase. No retake price is published, so ask OffSec directly before you budget.
Source: OffSec Help — OffSec Certification Exam FAQ. Checked 10 October 2026.
OSEE exam format: how the exam works
The OSEE exam is proctored and lasts 71 hours and 45 minutes of hands-on work. It contains two assignments; each awards 25 points for partial completion and 50 points for full completion, so the maximum is 100 points.
To pass you need 75 points. Because the ceiling is 100 and each assignment tops out at 50, that effectively means fully completing one assignment and getting at least halfway through the other — there is little room to rely on partial credit alone.
This is where the course-page figure of 72 hours and the exam guide’s 71 hours 45 minutes line up: the exam window is just under 72 hours of working time. After it ends, you have a separate 24 hours to upload your documentation.
Source: OffSec Help — EXP-401 OSEE Exam Guide. Checked 10 October 2026.
The OSEE report: documentation is part of passing
OffSec treats the write-up as part of the exam, not a formality. The course page states you must submit a comprehensive report as part of the exam, and the exam guide requires it in PDF format.
The guide is explicit that insufficient documentation results in reduced or zero points being awarded. In other words, demonstrating the work is not enough on its own — if your report does not clearly show what you did, points are lost. Plan time inside and after the exam window for a thorough write-up.
Source: OffSec Help — EXP-401 OSEE Exam Guide. Checked 10 October 2026.
What does the EXP-401 syllabus cover?
OffSec describes EXP-401 as advanced Windows exploitation, and the course page lists its subject areas at a high level. They are expert-level, defensive-research topics: how modern user-mode and kernel-mode security mitigations are evaluated and bypassed, advanced heap-related techniques, and reverse engineering of 64-bit Windows kernel drivers to find vulnerabilities.
OffSec publishes these as course topics on the EXP-401 page rather than as a separate downloadable syllabus document. The assumed starting point is significant: OffSec says learners should already be experienced in developing Windows exploits and comfortable operating a debugger.
Source: OffSec — EXP-401 Advanced Windows Exploitation. Checked 10 October 2026.
Prerequisites and recommended background
OffSec lists no formal prerequisite certification for EXP-401, but it recommends completing the 300-level OffSec certifications before registering, and states that learners should be experienced in developing Windows exploits and understand how to operate a debugger.
This is not an entry point into the field. OffSec positions OSEE as its hardest exploit-development certification, so the honest reading of the “recommendations” is that they are closer to requirements in practice: without solid prior exploit-development experience, the course and exam are extremely demanding.
Source: OffSec — EXP-401 Advanced Windows Exploitation. Checked 10 October 2026.
Does the OSEE certification expire?
No. OffSec states that, apart from a specific list of certifications that expire after three years — OSCP+, OSAI+, OSCC-SEC, OSCC-SJD, OSTH and OSIR — most OffSec certifications do not expire and remain valid indefinitely. OSEE is not on that expiring list.
So once earned, OSEE has no annual maintenance fee or renewal exam to keep it valid, which is different from OffSec’s flagship OSCP+, which does expire after three years.
Source: OffSec Help — OffSec Certification Exam FAQ. Checked 10 October 2026.
OSEE practice questions
OSEE is a hands-on, assignment-based exam, so there is no multiple-choice paper to drill. On Certsqill, question-bank practice covers the concepts behind the OSEE.
The questions are expert-developed with an explanation for every option, as a complement to the hands-on course work rather than a substitute for it — because nothing replaces the practical lab time EXP-401 is built around.
OSEE questions people ask
What is the OSEE certification?
OffSec Exploitation Expert, OffSec’s top exploit-development certification, earned through the in-person EXP-401 course. Source: OffSec, checked 10 October 2026.
How do you get the OSEE cert?
By passing the exam after the EXP-401 Advanced Windows Exploitation course, which OffSec teaches in person only. Source: OffSec, checked 10 October 2026.
How long is the OSEE exam?
71 hours and 45 minutes of hands-on work, plus a further 24 hours to upload your report. Source: OffSec OSEE Exam Guide, checked 10 October 2026.
What is the OSEE passing score?
75 of 100 points, across two assignments worth up to 50 points each. Source: OffSec OSEE Exam Guide, checked 10 October 2026.
How much does the OSEE certification cost?
OffSec does not publish a price for EXP-401 or the OSEE exam, nor a retake price. Checked 10 October 2026.
Is there an OSEE certificate for passing?
Yes — passing the exam earns the Offensive Security Exploitation Expert (OSEE) certification. Source: OffSec EXP-401 course page, checked 10 October 2026.
Are there prerequisites?
No formal one, but OffSec recommends the 300-level certifications and prior Windows exploit-development and debugger experience. Source: OffSec, checked 10 October 2026.
Does the OSEE certification expire?
No. OSEE is not on OffSec’s list of expiring certifications; most OffSec certifications remain valid indefinitely. Source: OffSec, checked 10 October 2026.
Does OffSec publish an OSEE salary figure?
No. OffSec publishes no salary data for OSEE, so this page quotes none. Checked 10 October 2026.
