Domain crossover
Offsec Training by Domain
Where Offsec training overlaps the domains your team hires for — each domain page shows the full picture.
Full catalog
All Offsec Courses
Every Offsec course in the CBT Nuggets catalog.
Frequently asked questions about Offsec training
Common questions IT directors ask when evaluating Offsec training for their team.
Which roles and experience levels do the OffSec courses serve?
PEN-100 suits entry-level security staff and help desk or network admins moving toward security roles. PEN-200 is Expert-level content for security analysts, blue team members moving into red team work, and professionals building advanced penetration testing skills.
How should a Training Manager sequence a team through the OffSec courses?
Start with PEN-100 to standardize baseline knowledge across Kali setup, Linux and Windows command lines, networking, scripting, Metasploit, cryptography, web applications, and Active Directory concepts. Then assign PEN-200 to staff who are comfortable with those fundamentals and ready for reconnaissance, vulnerability scanning, exploitation, privilege escalation, and tunneling.
How much time should we plan per learner?
PEN-100 runs about 14 hours, 18 minutes of video, which fits within a typical onboarding window for new security staff. PEN-200 is deeper Expert-level material, so plan additional time for learners moving on to it.
Which tools will our team practice with?
The courses work with Kali, Nmap, Wireshark, Metasploit, PowerShell, Bash, and Python, and PEN-200 adds Nessus, OpenVAS, and Burp Suite for vulnerability scanning and web application testing of XSS, directory traversal, file inclusion, and command injection.
Does the training cover how to report findings to leadership?
Yes. PEN-200 teaches teams to report findings in executive summaries that non-technical leadership can act on, so offensive testing results translate into decisions about risk and remediation.
How do we track team progress and document completion?
Team reporting shows per-learner progress and completion, cohort and group views, and completion exports for audit evidence. That gives an IT Director one place to assign OffSec training and confirm who has finished each course.