Practical Penetration Tester
Web, API, infrastructure, identity, cloud and realistic attack paths · 80–120h proposed learning effort; authorized simulated environments; supervised capstone.
What you will be able to demonstrate
- Write a rules-of-engagement brief, define target limits and safe stop conditions
- Test authentication, authorization, tenant isolation, business logic and API behavior
- Assess identity, cloud and network relationships without confusing scanner alerts with confirmed exploitable paths
- Preserve minimal reproducible evidence, communicate exposure and prioritize remediation
- Perform a targeted retest and explain which attack path is no longer viable
Evidence from the practical assessment
- Signed lab authorization and scope checklist
- Attack surface and coverage register
- Finding-by-finding evidence with impact and remediation
- Attack-path decision card with uncertainty and compensating controls
- Client-ready technical report, oral defense and retest statement
How practical competence is assessed
Assessment scenario: an authorized fictional company with two applications, an API, service identities and a segmented network. The candidate must distinguish seeded false positives from actionable exposures and respect the agreed safety limits.
How this connects to customer work
Client scope and engagement safety → hands-on assessment → reproducible report → review by a qualified lead → remediation verification.
Download sample working documents
Training and assessment are separate from independent certification. Published course durations and assessment designs are programme proposals subject to final scheduling and scheme approval.
Restricted operational specializations
Selected advanced specialist modules are offered only after institutional eligibility review. Public course descriptions do not confer access to restricted instruction or assessment environments.