Overview
The Certified Ethical Hacker credential shows that a candidate knows how attackers find and exploit weaknesses, and how those attacks are countered. The current version, CEH v13, is built on 20 training modules and adds AI-related content to topics such as footprinting, scanning, system hacking, web application attacks, and cloud and mobile threats. It's a knowledge exam. EC-Council maps the credential to more than 45 job roles, including SOC analyst, cybersecurity auditor, vulnerability assessment analyst, and penetration tester.
Candidates qualify either by completing official EC-Council training or by applying with at least 2 years of information security work experience, which carries a USD 100 application fee. Passing the 125-question multiple-choice exam earns CEH, and passing the separate 6-hour, 20-challenge practical exam as well earns the CEH Master designation. That practical step is optional. CompTIA Security+ covers attacks as one part of general security practice, while CEH is built entirely around the attacker's methods and tools. GIAC's GCIH covers attacker techniques too, but from the incident handler's side.
What the exam covers
The ANAB-accredited CEH exam blueprint in the CEH Candidate Handbook (v7.3) sets out 9 domains with published weights.
| Domain | Weight |
|---|---|
| Information Security and Ethical Hacking Overview | 6% |
| Reconnaissance Techniques | 17% |
| System Hacking Phases and Attack Techniques | 15% |
| Network and Perimeter Hacking | 24% |
| Web Application Hacking | 14% |
| Wireless Network Hacking | 5% |
| Mobile Platform, IoT, and OT Hacking | 10% |
| Cloud Computing | 5% |
| Cryptography | 5% |
Requirements
Candidates who complete official EC-Council training are eligible without an application. Others need at least 2 years of work experience in information security and must submit an eligibility application with a non-refundable USD 100 fee, which EC-Council verifies with a supervisor.
- Format
- Multiple-choice knowledge exam (exam code 312-50)
- Questions
- 125
- Time
- 4 hours
- Passing score
- Cut score varies by exam form, from 60% to 85%
- Delivery
- ECC Exam Centre, Pearson VUE test centres, or EC-Council remote proctoring
An optional CEH (Practical) exam of 20 challenges in 6 hours, taken in EC-Council's iLabs cyber range, leads to CEH Master when combined with the knowledge exam. Candidates also sign the EC-Council certification agreement and code of ethics.
Cost
Exam fee: USD 950 (CEH exam voucher, remote proctoring) or USD 1,199 (CEH exam voucher, Pearson VUE). Prices from the EC-Council store, checked 2026-10-12. Candidates using the experience route also pay a USD 100 application fee. Official training bundles are priced separately and prices change, so confirm on EC-Council's site.
Keeping it current
- Cycle
- 3 years
- Continuing education
- 120 EC-Council continuing education (ECE) credits per 3-year cycle
- Fees
- USD 80 annual continuing education fee (for members holding at least one certification under the ECE policy)
How to verify that someone holds it
An employer enters the holder's certification number on EC-Council's Aspen verification page to confirm the credential. Use the issuer’s verification page.
On InfoSecHub, a CEH listed on a profile shows Verified by Credly only when a current Credly badge issued to that person confirms it.
Typical roles
- Penetration tester
- SOC analyst
- Cybersecurity analyst
- Vulnerability assessment analyst
- Cybersecurity auditor
Related frameworks
Official resources
From EC-Council. Links open the issuer’s site.
- CEH official page, EC-Council
- CEH Candidate Handbook v7.3 (includes exam blueprint), EC-Councilhandbook
- CEH exam information and eligibility, EC-Councilexam-outline
- EC-Council Aspen certification verification, EC-Councilverification
References
- Certified Ethical Hacker (CEH) v13, EC-Council
- CEH exam information, EC-Council
- CEH Candidate Handbook v7.3, EC-Council
- Continuing education (ECE/CPE) policy, EC-Council
- CEH exam voucher, Pearson VUE, EC-Council Store
Reviewed 2026-10-12. Exam details, prices, and renewal rules change. Confirm them on the EC-Council website before you register. InfoSecHub is not affiliated with EC-Council.