Overview
The OSWP, or OffSec Wireless Professional, shows that a candidate can attack Wi-Fi networks in a controlled setting and document the work. It's earned by passing a proctored practical exam linked to OffSec's PEN-210 course, where candidates face 3 wireless network scenarios, recover the keys or credentials, and connect to each target access point to collect a proof file. The course covers WEP, WPA, and WPA2 encryption, WPS, WPA Enterprise, rogue access points, and captive portals. Aircrack-ng is used throughout.
OffSec lists wireless security specialists, penetration testers, network security analysts, security engineers, and system administrators among the roles that hold it. Unlike the OSCP+, it doesn't expire. The OSWP is narrower than the OSCP, which covers general network, web, and Active Directory testing over a 24-hour exam, so it reads as a wireless specialty rather than a general penetration testing credential. There's no standalone OSWP exam to purchase. Exam attempts come bundled with OffSec's Learn Fundamentals and Learn One subscriptions, and retakes can be bought separately.
What the exam covers
The exam is a hands-on test against 3 live wireless network scenarios, followed by a written report.
| Part |
|---|
| 3 wireless network scenarios, attacked one at a time from an OffSec-provided Kali Linux machine with a wireless card |
| Recover the wireless key or credentials in each scenario using PEN-210 techniques |
| Connect to the target access point and retrieve proof.txt, submitted in the exam control panel |
| Report in PDF with the cracked keys, commands used, and screenshots, uploaded within 24 hours after the exam |
Requirements
No formal prerequisites. OffSec recommends comfort with the Linux command line, a solid understanding of TCP/IP networking, and basic knowledge of wireless networking concepts.
- Format
- Hands-on practical exam against live wireless networks, followed by a written report
- Questions
- 3 network scenarios
- Time
- 3 hours 45 minutes, plus 24 hours to upload the report
- Passing score
- Proof files from 2 of the 3 scenarios, including 1 mandatory scenario
- Delivery
- Online, proctored by OffSec over a VPN
The exam is open book, but tools that automate wireless attacks (such as wifite, wifiphisher, and besside-ng) and AI chatbots are banned.
Cost
Exam fee: No standalone exam. Learn Fundamentals (USD 799 per year) includes PEN-210 and 1 OSWP attempt, and Learn One (USD 2,749 per year) also includes 1 OSWP attempt.. Retakes can be bought separately and are subject to a cooling-off period. Prices change, so confirm on the issuer's site. Checked 2026-10-12.
Keeping it current
- Cycle
- Does not expire
- Continuing education
- None required
- Fees
- None
How to verify that someone holds it
OffSec issues its credentials through Accredible, and certificates issued after April 5, 2022 carry a QR code that links to the holder's credential page. For older certificates, OffSec verifies on request using the holder's full name and OSID. Use the issuer’s verification page.
On InfoSecHub, a OSWP listed on a profile shows Verified by Credly only when a current Credly badge issued to that person confirms it.
Typical roles
- Wireless security specialist
- Penetration tester
- Network security analyst
- Security engineer
- System administrator
Related frameworks
Official resources
From OffSec. Links open the issuer’s site.
- OSWP official page, OffSec
- OSWP exam guide, OffSecexam-outline
- PEN-210 syllabus, OffSecexam-outline
- How do I verify someone's certification?, OffSecverification
References
- OSWP exam guide, OffSec
- OSWP exam FAQ, OffSec
- Learn Fundamentals FAQ, OffSec
- Digital certification FAQ, OffSec
Reviewed 2026-10-12. Exam details, prices, and renewal rules change. Confirm them on the OffSec website before you register. InfoSecHub is not affiliated with OffSec.