Want a sequenced plan instead of a list? Join the structured learning tracks

Cert Atlas

OSWA

OffSec Web Assessor (WEB-200)

Offensive Intermediate OffSec
Target job title
Web Application Penetration Tester
Level
Intermediate. Assumes fundamentals and some hands-on time; typical first-job or first-promotion certs.
Prerequisites
HTTP, HTML/JavaScript basics, Burp Suite familiarity and Linux command line.
Official page
OffSec

Recent updates

WEB-200 focuses on black-box web testing (XSS, SQLi, SSTI, SSRF and more) with a 24-hour proctored exam.

Reviewed 2026-10-02. Confirm exam details on the official page before booking.

Where it sits in Offensive Security

  1. Entry CRTA CEH OSWP eJPT TryHackMe PT1 HackTheBox CJCA
  2. Intermediate OSCP HackTheBox CPTS CRTP OSWA CompTIA PenTest+ eCPPT TCM PNPT HackTheBox CWES CRTO BSCP GPEN CARTP
  3. Advanced CRTE OSEP OSED OSAI HackTheBox CAPE TryHackMe PT2 OSWE
  4. Expert HackTheBox COAE CRTL OSEE HackTheBox CWEE

Natural next steps: CRTE, OSEP, OSED, OSAI.

Preparing for OSWA?

Structured learning tracks

Membership with role- and cert-based learning tracks: roadmaps, cheat sheets, assessments, exclusive writeups and member pricing on notes.

Join the learning tracks

Coaching & cert roadmaps

One-to-one guidance and a roadmap built around your background, target role and timeline, so you stop guessing which cert comes next.

See coaching programs

Prep resources & cheat sheets

Cheat sheets, command references and exam-day extras for when you already know the material and need it fast and in one place.

Browse prep resources