OSCP Expiring?

OffSec has released their latest updates for the OSCP exam. Starting November 1st of 2024, Offsec is replacing the long standing non-expiring OSCP exam with OSCP+.

What we know so far:

• Original OSCP will remain lifetime, but not receive “+” designation
• OSCP+ will expire every three years
• Certification holders can keep the designated “+” status by taking the exam again or utilizing the not yet revealed OffSec CPE program within six months of expiration
• If not renewed the OSCP+ certificate will revert to just a lifetime “OSCP” certificate

My thoughts on OSCP+:

First, I will say I purchases OSCP in 2015 and did not end up taking the exam. I recently have been saving up for a while and planned on getting their one-year subscription in October, but now I am undecided if that’s a good use of money at this point. I will wait for pricing to be released before I make my final decision on this.

I am disappointed to see OffSec changing their certification model. I think continuing education is mandatory in the tech field, but at the individual s discretion. Forcing people to pay again to show a skill set that remains the same at the fundamental level does not incite people to want to learn and grow. Eventually these things become a task to just do because you must check the box, rather than something you take pride in.

I am hopeful that maybe their pricing models could change with the introduction of the OSCP+ though. I would like to see the price barrier to entry for their exams drastically drop knowing they will be requiring more money down the line from their students. Currently their website states there will be a promotional price of $800 for first time purchasers, which doesn’t seem like the price point will come down if even their promotion is far exceeding their competitors, but we won’t know until November.

I believe cybersecurity certifications are in dire need of a re-vamp. There are a lot of companies offering great training and certifications these days, but no one has the true standard the community is following. This is creating a hiring dilemma for many people in the field and those looking to fill roles. I personally would love to see an overarching authority who is not part of the game come in and evaluate all available certifications and align them to job paths/difficulties and that be used as the standard for evaluating these credentials.

I would like to hear from others in the community. What are your thoughts on these changes and how do you see this impacting the cybersecurity job market?

Offical Article on these changes:

There are additional FAQs on OffSec’s website. The link is below.

[embed]Changes to the OSCP Effective November 1, 2024, OffSec will replace the current OSCP exam with an updated version. The updated exam version…help.offsec.com