OffSec · OSWA
Develop skills in security, hands-on with OffSec Web Assessor. Review the official objectives and practical assessment requirements.
Official digital record
Use the certificate QR code or the holder's official digital credential link. OffSec uses Accredible records. For older certificates without a QR code, follow OffSec's verification request procedure. Check OSCP and OSCP+ validity separately.
If your award has a public Credly badge, you can import its URL. CertSprout automatically checks supported Credly and Microsoft Learn records. Provider-site lookups and manually attached links do not automatically mark a credential verified. A public record confirms the award; it does not prove the signed-in user owns it.
Guidance checked 2026-09-06.
Study time and difficulty are CertSprout estimates. How difficulty works. Requirements and renewal rules come from the issuer.
See exam pricing for your country →We haven’t added an exam topic breakdown for this certification yet.
Topic weights reflect the catalog outline and can change between exam versions. Confirm the current objectives, prerequisites and registration rules with OffSec.
Pack your study kit
Start with the certification requirements, explore free materials, then add paid learning if it suits you.
Requirements, exam details and booking
Check the issuer’s current objectives, prerequisites, exam version and booking options. Exams and training may cost extra; local availability is confirmed by the provider.
Public guides, videos and tutorials, plus free courses. Each card explains whether you need an account.
Keep exploring certifications from OffSec.
More from this issuer →Testing methodology and reference
Public reading · no account needed
Use the guide to structure authorized web assessments and understand the evidence needed for findings. Select sections relevant to your provider's objectives.
Reviewed 2026-09-06. Check the current version and access terms.
Open free resourceExplanations and interactive web-security labs
Public explanations · free account for lab progress
Study vulnerabilities and practise in purpose-built lab applications. These labs support web-security skills; they do not replace another provider's mandatory assessment path.
Reviewed 2026-09-06. Check the current version and access terms.
Open free resourceInstallation, configuration and tooling references
Public reading · no account needed
Set up a local practice environment and learn documented system workflows. Perform security testing only within an authorized lab or agreed scope.
Reviewed 2026-09-06. Check the current version and access terms.
Open free resourcePreview the content and compare it with the free options before buying.
Hands-on courses and labs
Provider account and paid enrollment required
Choose the course and exam associated with your credential. Check syllabus, lab access, exam-attempt expiry and reporting requirements.
Reviewed 2026-09-06. Check the current version and access terms.
Explore on provider siteResources open on the provider’s website. Free reading does not include paid exams, optional upgrades or cloud usage. Check the exam version and country access. Recommendations are selected for relevance; commission does not influence their order. Any commission-earning link is disclosed beside that link. How affiliate links work