OSWP certification: exam, PEN-210 training and cost
OSWP is OffSec’s Wireless Professional certification, earned through the PEN-210 Wireless Network Attacks course. The proctored exam gives you 3 hours and 45 minutes against three wireless network scenarios; you pass by capturing proof on two of them, one of which is mandatory, then you have 24 hours to submit your report. The course comes with any OffSec Learn subscription, and the certification does not expire.
- Certification
- OffSec Wireless Professional (OSWP)OffSec PEN-210 course page, checked 10 October 2026
- Course
- PEN-210 Wireless Network Attacks, included free with any OffSec Learn subscriptionOffSec PEN-210 course page, checked 10 October 2026
- Exam duration
- 3 hours 45 minutes, plus 24 hours to submit documentationOffSec OSWP Exam Guide, checked 10 October 2026
- Exam task
- Three network scenarios; pass by obtaining proof.txt on two, one mandatoryOffSec OSWP Exam Guide, checked 10 October 2026
- Proctoring
- Proctored; taken remotely over an exam VPN on an assigned Kali Linux machineOffSec OSWP Exam FAQ, checked 10 October 2026
- Access
- Learn Fundamentals US$799/year (includes OSWP and KLCP attempts); Learn One US$2,749/yearOffSec PEN-210 course page and Certification Exam FAQ, checked 10 October 2026
- Prerequisites
- None published by OffSec for PEN-210OffSec PEN-210 course page, checked 10 October 2026
- Validity
- Does not expireOffSec Certification Exam FAQ, checked 10 October 2026
Know if you're ready for OSWP — before you book.
Certsqill measures your OSWP readiness across every official exam domain — one 0–100 score from coverage, accuracy and consistency that tells you whether to book, keep studying, or sit.
Why people switch to Certsqill
Everything you need to walk in ready
Know where you stand, understand every mistake, and study in your language — one payment, no subscription.
Your OSWP Readiness Score, not a guess
One number from three signals — coverage, accuracy, and consistency — tells you whether to book the exam or keep studying.
Understand every OSWP mistake
When you miss a question, it explains why — using your own answer history to catch the patterns you keep repeating. Included, no subscription.
Explanations in your language, questions stay exam-accurate
Get every explanation in your language while the questions stay in exam-accurate English. Technical terms stay in English — the way the exam writes them.
Everything you need to pass
Why you can trust these OSWP questions
What is the OSWP certification?
OSWP stands for OffSec Wireless Professional. It is OffSec’s wireless-security certification, earned through the PEN-210 Wireless Network Attacks course, and it is entirely hands-on: there is no multiple-choice paper, only a practical exam against live wireless networks.
The course covers wireless standards, analysing encryption vulnerabilities, and capturing and interpreting wireless traffic. The certification shows you can assess the security of Wi-Fi networks in practice rather than just describe the attacks.
Source: OffSec — PEN-210 Wireless Network Attacks (OSWP). Checked 10 October 2026.
How do you get the OSWP cert? The PEN-210 course and training
The path to OSWP runs through PEN-210. OffSec includes the course free with any Learn subscription, so you do not buy PEN-210 on its own; you buy access to OffSec’s library and the exam attempts that come with it.
The 2026 PEN-210 syllabus lays out the material in modules, from the fundamentals of IEEE 802.11 and Wi-Fi encryption up to the specific attacks the exam expects you to run.
- IEEE 802.11 and wireless networks
- Wi-Fi encryption and cracking authentication hashes
- Linux wireless tools, drivers and stacks
- Wireshark and Aircrack-ng essentials
- Attacking WPS networks and WPA Enterprise
- Rogue access points and captive portals
- bettercap and Kismet essentials
Source: OffSec — PEN-210 Syllabus (2026). Checked 10 October 2026.
How much does the OSWP certification cost?
OffSec sells OSWP through subscriptions rather than as a standalone exam fee. The OffSec certification exam FAQ states that Learn Fundamentals includes certification attempts for OSWP and KLCP, and the PEN-210 course page lists Learn Fundamentals at US$799 per year.
If you want the wider library and the 200- and 300-level courses as well, Learn One is listed at US$2,749 per year and includes two exam attempts for its course. Both subscriptions auto-renew unless cancelled. OffSec does not publish a separate one-off price for just the OSWP exam, so the subscription is the route to the attempt.
Source: OffSec Help — OffSec Certification Exam FAQ. Checked 10 October 2026.
OSWP exam format: how the exam works
The OSWP exam is proctored and lasts 3 hours and 45 minutes. OffSec presents three network scenarios to attack. You pass only if you complete and obtain the proof.txt file on two of the three, and one of the scenarios is mandatory to complete.
After the hands-on portion you have a further 24 hours to send your documentation to the OffSec Challenges department, submitting a .7z file via OffSec’s upload page. As the exam FAQ makes clear, the report is part of passing, not an afterthought.
You take the exam remotely: once your scheduled exam starts you receive an exam VPN connectivity pack and are assigned a Kali Linux machine with a wireless card for the attacks. All activity must happen on the host machine running the proctoring application.
Source: OffSec Help — OSWP Exam Guide. Checked 10 October 2026.
What is allowed on the OSWP exam?
OSWP is about demonstrating the attacks yourself, so automated wireless-attack tools are not allowed. The exam guide names wifite, wifiphisher and besside-ng as examples of tools you cannot use.
OffSec also states that using LLMs and AI chatbots — it lists OffSec KAI, ChatGPT, Deepseek and Gemini — is strictly prohibited during the exam. Build the manual skills during PEN-210, because on exam day the tooling that would shortcut them is off the table.
Source: OffSec Help — OSWP Exam Guide. Checked 10 October 2026.
Are there prerequisites for the OSWP?
OffSec does not publish formal prerequisites for PEN-210 or the OSWP exam. In practice you need to be comfortable on Linux and with a command line, since the exam hands you a Kali machine and expects you to work on it directly.
The syllabus assumes no prior wireless-security knowledge and builds from 802.11 fundamentals, so OSWP is approachable as an early wireless credential provided your Linux footing is solid.
Source: OffSec — PEN-210 Wireless Network Attacks (OSWP). Checked 10 October 2026.
Does the OSWP certification expire?
No. OffSec states that, apart from a specific list of certifications that expire after three years — OSCP+, OSAI+, OSCC-SEC, OSCC-SJD, OSTH and OSIR — most OffSec certifications do not expire and remain valid indefinitely. OSWP is not on the expiring list.
So once you earn OSWP, there is no annual maintenance fee or renewal exam to keep it valid. That is a meaningful difference from OffSec’s flagship OSCP+, which does expire.
Source: OffSec Help — OffSec Certification Exam FAQ. Checked 10 October 2026.
How to prepare for the OSWP exam
Work the PEN-210 material hands-on, not just by reading. The exam is three live networks, so the skills that matter are capturing and interpreting traffic, cracking authentication hashes and running each attack type manually with Aircrack-ng and friends.
Because automated tools and AI assistants are banned, practise the full chain yourself: identify the network, capture the right frames, and get to proof.txt without a one-command wrapper. Rehearse your note-taking too, so the 24-hour report write-up afterwards is quick.
Remember the pass condition when you plan your four hours: two of three scenarios, one of them mandatory. Secure the mandatory one first, then go for a second rather than spreading yourself thin across all three.
Source: OffSec Help — OSWP Exam Guide. Checked 10 October 2026.
OSWP practice questions
OSWP is a hands-on exam, so there is no multiple-choice paper to drill. On Certsqill, question-bank practice covers the OSWP’s underlying concepts.
The questions are expert-developed with an explanation for every option, covering the wireless fundamentals behind the exam — encryption, 802.11 and the attack types — as a complement to your hands-on lab time, not a replacement for it.
OSWP questions people ask
What is the OSWP certification?
OffSec Wireless Professional, OffSec’s hands-on wireless-security certification earned through the PEN-210 course. Source: OffSec, checked 10 October 2026.
How long is the OSWP exam?
3 hours and 45 minutes, plus 24 hours to submit your documentation. Source: OffSec OSWP Exam Guide, checked 10 October 2026.
How do you pass the OSWP exam?
Obtain proof.txt on two of the three network scenarios, one of which is mandatory. Source: OffSec OSWP Exam Guide, checked 10 October 2026.
How much does the OSWP cost?
Via subscription: Learn Fundamentals at US$799/year includes OSWP attempts; Learn One is US$2,749/year. OffSec publishes no standalone exam price. Source: OffSec, checked 10 October 2026.
Is the OSWP exam taken online?
Yes. It is proctored and taken remotely over an exam VPN on an assigned Kali Linux machine. Source: OffSec OSWP Exam FAQ, checked 10 October 2026.
Are there prerequisites for the OSWP?
OffSec publishes none for PEN-210; comfort with Linux and the command line is expected in practice. Source: OffSec, checked 10 October 2026.
Can I use tools like wifite on the exam?
No. Automated tools such as wifite, wifiphisher and besside-ng are not allowed, and AI chatbots are prohibited. Source: OffSec OSWP Exam Guide, checked 10 October 2026.
Does the OSWP certification expire?
No. OSWP is not on OffSec’s list of expiring certifications; most OffSec certifications remain valid indefinitely. Source: OffSec, checked 10 October 2026.
Does OffSec publish an OSWP salary figure?
No. OffSec publishes no salary data for OSWP, so this page quotes none. Checked 10 October 2026.
