PWPA — Practical Web Pentest Associate
TCM Security's entry-level web application pentesting certification — 100% practical 2-day exam followed by 2 days to write a professional pentest report, reviewed by human graders. Training included, one free retake, never expires. At $249 it's excellent value as a first practical web security credential. The report-writing requirement is a genuine differentiator from flag-only alternatives and develops the professional communication skills that separate practitioners from hobbyists. Natural stepping stone to PWPP and then BSCP or OSWE.
| Issuer | TCM Security |
|---|
| Level | beginner |
|---|
| Domains | Offensive Security, Application Security |
|---|
| Practical weight | 100% |
|---|
| Cost (USD) | 249 |
|---|
| Renewal | Does not expire |
|---|
| Skills | web_application_recon, owasp_top_10, authentication_testing, sql_injection, xss, access_control_testing, web_pentest_report_writing |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap