EC-Council certification path

Overview

The CEH is EC-Council's flagship certification, validating comprehensive ethical hacking knowledge. It covers reconnaissance, scanning, enumeration, system hacking, malware analysis, social engineering, cryptography, and modern cloud/IoT attacks.

Exam Details:

• Format: 125 multiple-choice questions
• Duration: 4 hours
• Passing score: 60%+ (70%+ recommended)
• Validity: 3 years
• Renewal: 120 ECE credits or retake exam

Skills Covered:

• Network scanning and enumeration
• System hacking and password cracking
• Malware analysis and reverse engineering
• Cryptography and secure communication
• Social engineering and physical security
• Cloud and IoT security
• AI/ML-driven threat detection (CEH v13)

---

CPENT — Certified Penetration Tester

Exam Details:

• Format: 24-hour practical penetration test
• Environment: Live network with vulnerable systems
• Deliverable: Professional penetration test report
• Validity: 3 years
• Prerequisites: CEH (or 8+ years experience)

Specializations:

• Web application penetration testing
• Network infrastructure testing
• Wireless security testing
• Social engineering assessments
• Physical security testing

---

CHFI — Computer Hacking Forensic Investigator

Exam Details:

• Format: 150 questions, multiple-choice
• Duration: 4 hours
• Focus: Digital forensics, e-discovery, evidence handling
• Validity: 3 years

Coverage:

• Hard drive and memory forensics
• Email and mobile device forensics
• Network traffic analysis
• Chain of custody and legal procedures
• Malware forensics
• Cloud forensics

---

CND — Certified Network Defender

Exam Details:

• Format: 85 questions
• Duration: 3 hours
• Focus: Defensive security operations, incident response
• Validity: 3 years

Coverage:

• Intrusion detection and prevention
• Firewall management and hardening
• Incident response procedures
• Compliance and risk management
• Threat intelligence and hunting
• SIEM and SOC operations

---

ECSA — Certified Security Analyst (Practical)

Exam Details:

• Format: Practical exam with security analysis methodology
• Focus: Vulnerability assessment, penetration testing methodology
• Validity: 3 years

Coverage:

• Security assessment frameworks
• Vulnerability analysis and remediation
• Penetration testing methodologies
• Report writing and compliance
• Business risk evaluation

---

Exam Details:

• Format: Advanced practical penetration test (48+ hours)
• Scope: Multi-tier infrastructure, cloud environments, compliance scenarios
• Deliverable: Executive-level penetration test report
• Validity: 3 years
• Industry recognition: Government and enterprise contracting

---

Path 1: Ethical Hacker / Penetration Tester (CEH → CPENT → LPT)

Target: Aspiring red teamers, bug bounty hunters, independent consultants

Timeline:

Cost Breakdown (USD/ZAR):

• CEH: $1,899 / R34,182 (training + exam)
• CPENT: $999 / R17,982 (exam + labs)
• LPT: $1,200 / R21,600 (advanced exam)
• Total: $4,098 / R73,764

Salary Progression:

• Year 1: $60K-$75K USD / R1.08M-R1.35M ZAR
• Year 2: $78K-$98K USD / R1.404M-R1.764M ZAR
• Year 3: $98K-$128K USD / R1.764M-R2.304M ZAR
• Year 5: $128K-$155K USD / R2.304M-R2.79M ZAR
• Year 7+: $155K-$178K USD / R2.79M-R3.204M ZAR

Job Outcomes:

• Penetration tester roles (+45,000 active postings)
• Red team operators
• Security consultant
• Bug bounty programs ($5K-$50K/year additional)
• Freelance/contract work: $150-$250/hour

---

Path 2: Digital Forensics Investigator (CEH → CHFI)

Target: Law enforcement, incident response teams, legal tech analysts

Timeline:

Cost Breakdown (USD/ZAR):

• CEH: $1,899 / R34,182
• CHFI: $500 / R9,000
• Advanced tools (EnCase, FTK): $1,500-$3,000 / R27,000-R54,000
• Total: $3,899-$5,399 / R70,182-R97,182

Salary Progression:

• Year 1: $65K USD / R1.17M ZAR
• Year 3: $85K-$95K USD / R1.53M-R1.71M ZAR
• Year 5: $105K-$125K USD / R1.89M-R2.25M ZAR

Job Outcomes:

• Digital forensics analyst
• eDiscovery specialist
• Incident response coordinator
• Law enforcement IT roles
• Legal technology consultant

---

Path 3: Network Security Defender (CND → CEH)

Target: SOC analysts, network engineers, defensive security operators

Timeline:

Cost Breakdown (USD/ZAR):

• CND: $400 / R7,200
• CEH: $1,899 / R34,182
• SIEM training (Splunk, ELK): $500-$1,500 / R9,000-R27,000
• Total: $2,799-$3,799 / R50,382-R68,382

Salary Progression:

• Year 1: $55K-$65K USD / R0.99M-R1.17M ZAR
• Year 2: $70K-$80K USD / R1.26M-R1.44M ZAR
• Year 3: $80K-$100K USD / R1.44M-R1.80M ZAR
• Year 5: $100K-$130K USD / R1.80M-R2.34M ZAR

Job Outcomes:

• SOC analyst (entry to senior)
• Security operations manager
• Incident response team lead
• Threat intelligence analyst
• SIEM administrator

---

Path 4: Security Analyst (CEH → ECSA)

Target: Risk management, vulnerability assessment, compliance roles

Timeline:

Cost Breakdown (USD/ZAR):

• CEH: $1,899 / R34,182
• ECSA: $400 / R7,200
• Risk management tools: $300-$1,000 / R5,400-R18,000
• Total: $2,599-$3,299 / R46,782-R59,382

Salary Progression:

• Year 1: $62K USD / R1.116M ZAR
• Year 2: $75K-$85K USD / R1.35M-R1.53M ZAR
• Year 3: $85K-$105K USD / R1.53M-R1.89M ZAR
• Year 5: $110K-$140K USD / R1.98M-R2.52M ZAR

Job Outcomes:

• Security analyst
• Risk assessment specialist
• Vulnerability manager
• Compliance analyst
• Business security consultant

---

┌─────────────────────────────────────────────────────────────┐
│ Level 1: CEH (Foundation — Required for all paths)          │
│ Prerequisites: 2+ yrs security exp OR EC-Council training   │
│ Duration: 8-12 weeks | Cost: $550-$1,899                   │
└─────────────────────────────────────────────────────────────┘
                            ↓
            ┌───────────────┼───────────────┐
            ↓               ↓               ↓
    ┌──────────────┐ ┌──────────────┐ ┌──────────────┐
    │ CPENT        │ │ CHFI         │ │ CND          │
    │ (Offensive)  │ │ (Forensics)  │ │ (Defensive)  │
    │ 5+ yrs exp   │ │ 2+ yrs exp   │ │ 5+ yrs exp   │
    │ 12-16 weeks  │ │ 8-10 weeks   │ │ 6-8 weeks    │
    │ $999         │ │ $500         │ │ $400         │
    └──────────────┘ └──────────────┘ └──────────────┘
            ↓
    ┌──────────────┐
    │ LPT Master   │
    │ (Advanced)   │
    │ 5+ yrs exp   │
    │ 12-16 weeks  │
    │ $1,200       │
    └──────────────┘

Sequencing Rules:

1. CEH is mandatory entry point for all pathways
2. CPENT/CHFI/CND require CEH as corequisite
3. LPT requires CEH + CPENT (48+ hours practical)
4. ECSA can follow CEH; no CPENT prerequisite
5. Parallel study: CND + CEH can overlap (shared topics)
6. Recommended: Complete CEH → choose specialization → advance to master

---

---

EC-Council certifications bridge effectively to complementary vendor ecosystems:

Recommended Bridges:

• CEH → CISSP: Enterprise security management (2+ years as CEH first)
• CPENT → OSCP: Advanced exploitation and proof-of-concept focus
• CPENT → GPEN: Graduate-level penetration testing methodology
• CND → CCSP: Cloud security architecture and operations
• CEH → PenTest+: CompTIA alignment for DoD contractors

---

Investment Summary (USD & ZAR)

Exchange Rate: 1 USD = R18 ZAR (2026 rate)

Cost Per Certification

Renewal Costs (per 3 years): 120 ECE credits = $0 (maintain via training) or $300/exam retake

---

Active Job Postings by Role

Geographic Demand (USA)

• Highest: Silicon Valley, DC, NYC, Austin, Seattle
• Growing: Remote roles (+35% post-2024)
• Salary variance: $60K (tier 2 cities) → $200K+ (FAANG/government)

Government & Enterprise Adoption

• DoD 8570 Compliance: CEH counts as approved certification (IA-CND tier)
• FISMA: CEH acceptable for federal contractors
• SEC 303: Increasingly required for healthcare and finance sectors
• Government contractors: 78% require CEH or CISSP for senior roles

---

Penetration Tester Path (Path 1)

Progression Details

Note: Penetration testers in FAANG/Big Tech: $200K-$250K base + 50-100K stock; Government contractors: $130K-$170K (higher security clearance bonus).

---

1. CEH vs OSCP: Which Should I Choose?

Recommendation: Start with CEH for speed and breadth; pursue OSCP if targeting independent/elite roles.

2. What are CEH v13's AI Features?

CEH v13 (2024+) introduces:

• AI threat detection simulation: Analyze AI-generated malware variants
• Machine learning-based scanning: Identify zero-day patterns
• Automated vulnerability correlation: Use MITRE ATT&CK framework with AI
• Prompt injection attacks: New section on LLM security
• Cloud AI/ML security: Azure ML, AWS SageMaker hardening

These align with 2026 threat landscape (ransomware + AI-generated exploits).

3. Do I Need 2 Years of Experience for CEH?

Short answer: No, if you attend EC-Council's official training.

Rules:

• Option A: 2+ years security experience → exam-only path ($550)
• Option B: Less than 2 years → must complete EC-Council training ($1,349) → waives experience requirement
• Smart move: Many pursue CEH within 6-12 months of joining IT/security field via official training

4. Is CEH Recognized by Government?

Yes:

• DoD 8570.01-M: CEH ≈ IA-CND tier (Certified Network Defender-like)
• FISMA contractors: CEH acceptable for baseline security roles
• Top Secret Clearance: CEH required/helpful (40% of federal cyber roles)
• NSA/CSS: CEH recognized; usually paired with CISSP for leadership

Limitation: CISSP preferred for senior federal roles; CEH is stepping stone.

5. Can I Do CEH and CPENT Simultaneously?

Not recommended, but possible:

• CPENT requires CEH-level knowledge (overlaps 40%)
• Sequential (CEH → CPENT): 5-6 months total
• Parallel attempt: Risk both exams; recommend 2-3 month buffer

Best practice: CEH 2-3 months → 1-month break → CPENT 3 months = 6 months total.

6. Renewal: How Hard is 120 ECE Credits?

Easy:

• 1 CPE point = 1 ECE credit
• CompTIA, GIAC, ISC2 certs contribute
• Online training: $50-200/course (counts toward 120)
• Work-approved training: Counts automatically
• Typical: 1-2 training courses + conference = 120 credits in 3 years

---

1. EC-Council Main Site: https://www.eccouncil.org/
2. CEH Certification: https://www.eccouncil.org/certifications/certified-ethical-hacker/
3. CPENT Program: https://www.eccouncil.org/certifications/certified-penetration-tester/
4. CHFI Certification: https://www.eccouncil.org/certifications/computer-hacking-forensic-investigator/
5. CND Program: https://www.eccouncil.org/certifications/certified-network-defender/
6. ECSA Details: https://www.eccouncil.org/certifications/certified-security-analyst/
7. Training Portal: https://www.eccouncil.org/training/
8. Exam Scheduling: https://www.eccouncil.org/exam-scheduling/
9. Job Market Data: Indeed.com, LinkedIn Salary, Payscale.com (2026)
10. Government Recognition: DoD 8570.01-M Directive, FISMA Compliance Lists

---

Last Verified: 2026-05-02 Data Sources: EC-Council official site, U.S. Bureau of Labor Statistics (Cybersecurity Analyst, 2024-2026 projections), Indeed job postings, Payscale salary data, LinkedIn Insights Salary Notes: USD figures based on 2026 U.S. market (Silicon Valley/DC tier); ZAR conversions at R18/$1 (2026 rate); contract/remote roles add 15-25% premium Job Growth: Cybersecurity analyst roles projected +33% through 2032 (USBLS) Currency Note: All ZAR values calculated as USD × 18; South African salaries typically 15-20% lower due to market differences

---

Document Version: 1.0 | Generated: 2026-05-02 | Vendor: EC-Council | Scope: 5 Certifications