OSWA — OffSec Web Assessor
OffSec's intermediate web application security certification — a black-box 100% practical exam covering standard web vulnerability exploitation. Positioned as the web equivalent of OSCP in terms of methodology and serves as a natural progression toward OSWE. The OffSec brand carries strong employer recognition in offensive security. For practitioners working toward OSWE's advanced white-box testing, OSWA provides the foundational web exploitation credential at the intermediate level.
| Issuer | OffSec |
|---|
| Level | intermediate |
|---|
| Domains | Offensive Security, Application Security |
|---|
| Practical weight | 100% |
|---|
| Cost (USD) | 1749 |
|---|
| Renewal | Does not expire (lifetime) |
|---|
| Skills | web_vulnerability_exploitation, owasp_top_10_exploitation, authentication_attacks, sql_injection, xss, burp_suite_basics, web_application_recon |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap