OSWA
OffSec

Offensive Security Web Assessor

Intermediate Practical web assessment exam + report Pass: Objective/report-based; exact threshold may vary … $1,499

OSWA is a practical web-assessment certification focused on finding and exploiting web vulnerabilities in realistic environments. For 2026 readiness, focus on API-first testing, auth logic flaws, and report clarity.

Official Page
IssuerOffSec
FormatPractical web assessment exam + report
Duration48h exam window + report window (indicative)
Pass ScoreObjective/report-based; exact threshold may vary …
Valid For3y
Practice Labs
PortSwigger Web Security Academy
Web Recon & Attack Surface Mapping
Difficulty: easy
OWASP Juice Shop
Input Validation & Injection
Difficulty: easy
Hack The Box Web challenges/labs
Authentication, Session & Access Control
Difficulty: medium