PNPT
Practical Network Penetration Tester (PNPT)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Practical Network Penetration Tester (PNPT) is a hands-on certification from TCM Security that assesses a candidate's ability to perform an external and internal network penetration test at a professional level. Unlike multiple-choice exams, the PNPT requires you to conduct a realistic pentest over five full days, followed by two days to write a professional report. You must perform OSINT reconnaissance, exploit Active Directory (including A/V and egress bypassing, lateral and vertical movement) to compromise the Domain Controller, and then defend your findings in a live 15-minute debrief with senior penetration testers. The exam is designed for aspiring penetration testers, network pentesters, and red team operators. It is recommended that candidates without professional hacking experience start with the PJPT. Preparation includes 45+ hours of on-demand training covering Practical Ethical Hacking, Windows and Linux Privilege Escalation, OSINT, and the External Pentest Playbook. The voucher costs $499, includes one free retake, and provides 12 months of access to training materials. The certification does not expire as of April 17, 2023. TCM Security offers a 20% discount for military, veterans, students, teachers, and first responders. The exam is not proctored but monitors network traffic for cheating.
What you'll study
About PNPT preparation
What is the exam format?
The PNPT is a practical, hands-on penetration test with no multiple-choice questions and no flags to capture. You have five full days to complete the assessment and two additional days to write a professional report. You must also perform a live 15-minute report debrief in front of senior penetration testers.
How difficult is the PNPT?
Difficulty varies by experience. TCM Security states that for beginners the exam will be very difficult and recommends completing the included training first. Junior penetration testers may find it difficult and need additional training, while mid to senior level pentesters can expect moderate difficulty.
Can I retake the exam if I fail?
Yes. Every exam voucher includes one free retake. TCM Security emphasizes that they do not profit from failure, so you can attempt the exam a second time at no additional cost.
How long is the exam voucher valid?
Your exam voucher is valid for 12 months starting from the day of purchase. This includes access to the training materials the exam is based on.
What training is included with the voucher?
The $499 voucher includes 12 months of access to 45+ hours of on-demand video training covering Practical Ethical Hacking, Windows Privilege Escalation, Linux Privilege Escalation, Open-Source Intelligence, and the External Pentest Playbook. Hands-on local labs are also included.
What should I study before attempting the PNPT?
TCM Security recommends completing the included training, which is designed to take students from absolute beginner to moderate levels. If you lack professional hacking experience, start with the PJPT. The Enterprise Penetration Testing learning path provides a structured progression from fundamentals to the PNPT.
What are common failure modes on the PNPT?
Common pitfalls include insufficient OSINT, weak Active Directory exploitation skills (such as A/V and egress bypassing, lateral and vertical movement), and poor report writing or debrief performance. The exam requires a professional report and a live debrief, so candidates should practice documenting findings clearly and defending their methodology.
Is the exam proctored?
No. The exam is not proctored and does not require intrusive software. However, TCM Security monitors network traffic and has detection mechanisms in place for cheating in the environment and the exam.
Does the PNPT certification expire?
As of April 17, 2023, the Practical Network Penetration Tester (PNPT) certification does not expire. You can view an example of the digital certification on TCM Security's website.
Are discounts available for the PNPT?
Yes. Military, veterans, students, teachers, and first responders can save 20% by contacting [email protected] with proof of status. The discount is valid on certification vouchers.