Choose the certification
We map your role and goals to the right certification — offensive, defensive or cloud.
INE Security certifications
Hands-on exams that prove what you can actually do.
01
Official & practical
Certifications that prove
what you can do.
MindSec is an official reseller of INE. We provide the training paths and exam vouchers for the full INE Security certification catalog.
These are not theoretical exams. Every INE Security certification is a practical, hands-on assessment that simulates real-world scenarios — so a credential means your people can actually do the work.
02
Red Team — Offensive security
Think like the adversary.
Prove it hands-on.
The Red Team track takes you from your first foothold to advanced, enterprise-grade offensive operations — every exam is performed inside a live, realistic environment.
eJPT · Junior Penetration Tester
Entry level. For people starting in offensive security — no prior penetration testing experience required.
A hands-on, entry-level Red Team exam that simulates a real-world engagement. Candidates locate hosts, exploit services and pivot through the network exactly as they would on an actual assessment. It is the entry point to the INE Red Team track; the natural next step is eCPPT.
Exam domains: Host and network penetration testing (35%) · Assessment methodologies (25%) · Host and network auditing (25%) · Web application penetration testing (15%)
eCPPT · Certified Professional Penetration Tester
Professional. For penetration testers and ethical hackers ready to work at a professional, client-facing level.
A fully practical, highly respected certification that validates the complete skill set of a modern penetration tester — from initial access through exploitation, post-exploitation and full Active Directory environments.
Exam domains: Active Directory penetration testing (30%) · Exploitation & post-exploitation (25%) · Initial access (15%) · Web application penetration testing (15%) · Information gathering & reconnaissance (10%) · Exploit development (5%)
eWPT · Web Application Penetration Tester
Professional. For testers with foundational experience in web application security.
A hands-on web application penetration testing exam built around industry-standard methodology, including the OWASP Web Security Testing Guide. Candidates assess, inspect and manually exploit modern web applications and web services.
Exam domains: Web application security testing (25%) · Manual exploitation of common web vulnerabilities (20%) · Web application vulnerability assessment (15%) · Web service security testing (10%) · Processes & methodologies (10%) · Information gathering & reconnaissance (10%) · Web application analysis & inspection (10%)
eWPTX · Web Application Penetration Tester eXtreme
Advanced. For professionals with intermediate-to-advanced experience in web application security.
The most advanced web application penetration testing certification INE offers — 100% practical and focused on the modern attack surface: APIs, authentication flows and injection vulnerabilities in complex applications.
Exam domains: API penetration testing · Authentication attacks (15%) · Injection vulnerabilities (15%) · Web application reconnaissance (15%) · Penetration testing methodology (10%)
eCPTX · Certified Penetration Tester eXtreme
Advanced. The top of the INE Red Team track, for experienced penetration testers.
A red team, offensive security certification that proves advanced penetration testing capability against realistic, hardened targets. Full objectives are published on the official INE Security page.
eMAPT · Mobile Application Penetration Tester
Professional. For cybersecurity professionals with intermediate experience who want to specialize in mobile application security.
A hands-on exam covering real Android and iOS applications. Candidates perform comprehensive assessments — from static analysis and reverse engineering to dynamic runtime testing — and exploit genuine vulnerabilities on both platforms.
Exam domains: Reconnaissance & static analysis (20%) · Dynamic testing & runtime manipulation (20%) · API & backend security testing (15%) · Mobile application security foundations (10%) · Threat modeling & attacker mindset (10%) · Reverse engineering & code deobfuscation (10%) · Mobile malware analysis (10%) · Reporting & communication (5%)
eCXD · Certified eXploit Developer
Specialist. For offensive security professionals who build their own tooling.
A red team certification that proves your ability to develop exploits — moving beyond using public tooling to writing reliable exploits of your own.
03
Blue Team — Defense, forensics & response
See the attack coming.
Know what it did.
The Blue Team track validates the people who detect, investigate and respond: incident responders, forensics analysts and malware analysts working under real operational pressure.
eCIR · Certified Incident Responder
Professional. For professionals in — or moving into — incident detection, analysis and response roles.
A fully practical exam that immerses candidates in a realistic lab environment simulating a corporate breach. Examinees investigate the incident and answer scenario-based questions that mirror a professional incident report — the same skills modern SOC and IR teams use daily.
Exam domains: Endpoint & network analysis (35%) · Threat detection & SIEM operations (20%) · Digital forensics & evidence-based analysis (20%) · Reporting & communication (15%) · Threat intelligence & attribution (10%)
eCDFP · Certified Digital Forensics Professional
Professional. For senior-level professionals building a career in digital forensics and incident response.
A professional-level digital forensics exam conducted inside a fully featured, real-world environment. Candidates identify, preserve and analyze digital evidence from endpoints and the wire, and understand what a proper forensic report looks like.
Exam domains: Fundamentals of digital forensics (33%) · Preservation of evidence (20%) · Storage device fundamentals (20%) · Digital forensics tools & techniques
eCMAP · Certified Malware Analysis Professional
Specialist. For analysts who want to dissect malicious code rather than just detect it.
Instead of multiple-choice questions, candidates perform a full analysis of a real malware sample and prove exactly what the malware does — the most practical, professionally oriented malware analysis certification available.
04
Cloud — Cloud foundations
Cloud fluency,
from the first hour.
For teams whose workloads, risks and conversations have moved to the cloud, INE's cloud certification builds shared vocabulary and fundamentals across the organization.
ICCA · INE Certified Cloud Associate
Entry level. For anyone who wants to take part in the cloud conversation within their organization — technical or not.
An entry-level certification with a structured learning path of 10+ hours of training material. It establishes the shared fundamentals every modern team needs when infrastructure, security and development move to the cloud.
05
How it works
From first lab to official credential.
Train. Certify. Prove it.
Train the official path
Each exam has a matching INE learning path with labs and training material built to prepare you for it.
Take the practical exam
INE Security exams are fully hands-on: you prove your skills in a realistic environment, not with multiple choice.
Get your credential
Pass and you receive an official digital credential. A free retake is available if the first attempt falls short.
Vouchers & training