CEH Exam Cost — How Much Is the CEH Certification?

The CEH (Certified Ethical Hacker) is one of the most recognized cybersecurity certifications in the world, issued by the International Council of E-Commerce Consultants (EC-Council). It is widely sought after by security professionals, penetration testers, and IT staff who want to formalize their ethical hacking knowledge and demonstrate competence in offensive security techniques. As CEH's popularity has grown, so has interest in understanding exactly what the certification costs — not just the exam fee but the full investment required to achieve and maintain the credential.

The cost of the CEH certification is not a single, simple number. Several factors affect the total amount you will spend: which exam delivery pathway you choose (Pearson VUE vs. the EC-Council ECC exam), whether you purchase a formal training course, whether your employer subsidizes the cost, and which region of the world you are testing in. Understanding these variables before you commit to a pathway helps you budget accurately and potentially reduce your out-of-pocket costs significantly.

EC-Council offers two primary pathways for CEH certification. The first is the self-study or work-experience pathway: candidates who can demonstrate at least two years of information security work experience can apply directly for the exam eligibility through Pearson VUE, paying the application fee ($100) and the exam fee ($950) for a total of approximately $1,050 in direct certification costs before any study materials. The second pathway involves purchasing an EC-Council-approved training course, which comes with an exam voucher at a significantly reduced price — typically bringing the exam cost down to $400–$500 when bundled with training.

For many candidates, the total investment in CEH certification extends beyond the exam fee to include study materials, practice question platforms, and preparation time. Official EC-Council courseware, third-party CEH prep books, and practice exam subscriptions each add to the total cost. Candidates who choose the training course pathway receive official study materials as part of their course, which can make the bundled option more cost-effective than it appears when you compare the exam-only fee to the full exam-plus-materials cost of the self-study route.

Cybersecurity hiring managers across industries consistently rank CEH among the most frequently requested certifications in job postings, particularly for roles that involve penetration testing, vulnerability assessment, and security operations. The combination of market recognition and DoD compliance requirements ensures that the credential retains strong demand regardless of broader IT certification market fluctuations.

This article breaks down the full cost of the CEH certification — exam fees, application fees, training options, and renewal costs — and provides guidance on how to minimize your total spend while still achieving a well-prepared, first-attempt pass on the CEH exam.

The CEH exam itself consists of 125 multiple-choice questions and allows four hours to complete. The passing score is not fixed at a specific percentage — EC-Council uses a cut score that varies by exam form based on difficulty calibration, but most candidates target 70% or above as a safe preparation threshold.

The exam covers 20 knowledge domains including introduction to ethical hacking, footprinting and reconnaissance, scanning networks, enumeration, vulnerability analysis, system hacking, malware threats, sniffing, social engineering, denial-of-service attacks, session hijacking, evading IDS/firewalls/honeypots, web server attacks, web application attacks, SQL injection, wireless network hacking, mobile platform attacks, IoT hacking, cloud computing attacks, and cryptography.

For candidates evaluating the cost-to-value ratio of the CEH, it helps to consider where the certification has the most practical impact. The CEH is specifically listed in the U.S. Department of Defense Directive 8570.1 and its successor, DoD 8140, as an approved baseline certification for Information Assurance Technical (IAT) Level II and III roles.

This means that defense contractors and federal agencies that handle classified systems are required — not just encouraged — to have CEH-certified personnel in specific roles. For candidates targeting government IT and defense contracting jobs, CEH is not merely valuable but functionally required, making the $1,000–$1,500 investment less of a discretionary expense and more of a career prerequisite.

CEH certification also carries significant salary implications. According to multiple compensation surveys, cybersecurity professionals with CEH certification earn a median salary premium compared to non-certified peers in similar roles. Penetration testers, ethical hackers, and security analysts with CEH certification regularly earn $90,000–$130,000 annually in mid-career roles, with senior positions exceeding $150,000 in high-cost markets. When viewed against a multi-year career income differential, the $1,000–$1,500 certification cost represents a very high return on investment — often recouped within weeks of a salary increase or a new role secured on the basis of the credential.

It is also worth understanding what the CEH does not cover, because this affects how candidates should budget their overall skill development. CEH is a knowledge-based certification — it tests understanding of hacking concepts and methodologies but does not require hands-on practical skill demonstration in the standard exam.

Candidates who want to demonstrate practical offensive security skills should consider the CEH Practical (an additional EC-Council exam) or other hands-on certifications like OSCP (Offensive Security Certified Professional). The OSCP is generally considered more technically rigorous and prestigious in pure penetration testing circles, though it also requires more time and preparation. For candidates who need DoD 8570 compliance specifically, CEH is the more commonly accepted credential.

Understanding CEH cost in the context of your career stage is important. For professionals already working in security who need to document their skills for a promotion or government contract role, the $1,050 direct cost (application + Pearson VUE exam) is typically the most efficient path. For career changers or recent graduates who need both the knowledge and the credential, the training-bundled pathway provides a structured learning environment alongside the certification, making the higher total cost more justifiable when measured against the comprehensive skill development it provides.

Candidates who are weighing CEH against other ethical hacking certifications should consider both the direct cost and the market demand at their target employers. For those targeting DoD and federal government work, CEH's inclusion in the approved baseline list for multiple IAT levels makes it the pragmatic choice regardless of how other certifications compare technically. For candidates pursuing pure commercial penetration testing roles, comparing the market reception of CEH versus OSCP in their specific niche is worthwhile before committing to the investment.

The most significant lever for reducing CEH certification cost is the choice between pathways. If you already have two or more years of information security experience and strong self-study discipline, the self-study pathway — application fee plus Pearson VUE exam fee — is the most direct route, costing approximately $1,050 before study materials. If you need structured training, the training course pathway bundles the exam voucher with courseware, which means you pay more upfront but avoid paying separately for expensive study materials.

Employer reimbursement is a major cost reduction opportunity that many candidates overlook. CEH is widely recognized under the DoD 8570/8140 framework, which means employers in defense contracting, federal agencies, and cybersecurity services firms have strong incentive to fund employee CEH certification. If your employer has a professional development or certification reimbursement program, submitting a CEH reimbursement request before you pay out of pocket is worth doing. Some employers cover the full cost including training; others cover only the exam fee. Even partial reimbursement significantly reduces your personal investment.

Timing can also affect cost. EC-Council occasionally offers promotional pricing on training courses, particularly during cybersecurity awareness events and industry conferences. Watching for these promotions — which may offer discounts of 10–30% on official iLearn or iWeek courses — can reduce the cost of the training pathway substantially. Signing up for EC-Council email notifications or following their social media channels is a simple way to stay aware of promotional windows.

For candidates who choose the self-study pathway, free and low-cost study resources reduce the total investment. The CEH exam blueprint is publicly available and lists exactly what content is tested across the 20 knowledge domains. Using the blueprint alongside a good third-party CEH prep book (typically $40–$80) and a practice exam platform (typically $50–$150 for a 90-day subscription) provides strong preparation at a fraction of the cost of formal training. Many candidates supplement with free resources — YouTube walkthroughs, open-source hacking labs, and practice tools like Kali Linux — to build hands-on familiarity with the techniques the exam covers.

Passing on the first attempt is the single most effective cost control strategy. Each failed attempt requires paying the full exam fee again ($950 for Pearson VUE or the voucher fee for the ECC exam), so investing adequately in preparation before your first attempt is financially as well as professionally important. Candidates who take 300+ practice questions under timed conditions and review the rationales thoroughly are significantly more likely to pass on the first attempt than those who proceed to the exam after only a light content review.

Before scheduling the CEH exam, take at least one full-length timed practice test to establish a baseline score. If your baseline falls below 60%, allocate more review time before paying the $950 exam fee. The cost of a $50–100 practice exam subscription that helps you identify weak domains is a worthwhile investment to avoid a $950 retake fee.

Study groups — whether virtual or in-person — are another low-cost preparation resource. Connecting with other CEH candidates through LinkedIn groups, Reddit communities like r/CEH or r/netsec, or Discord servers focused on cybersecurity certifications provides a way to share study notes, clarify confusing concepts, and benefit from others' exam experience. The collective knowledge in active certification communities often rivals that of expensive formal courses.

The three-year renewal cost is often overlooked in total cost calculations. Maintaining the CEH requires 120 ECE (EC-Council Continuing Education) credits over three years and payment of an annual renewal fee. EC-Council charges approximately $80 per year for the annual maintenance fee, totaling $240 over the three-year cycle. CEU credits can be earned through a wide range of activities — attending security conferences, completing online training, writing security research articles, or earning other EC-Council certifications — making the continuing education requirement manageable for active security professionals.

Free practice resources are abundant for CEH, which helps keep the self-study cost down. EC-Council publishes exam blueprints and study guides that detail the knowledge domains tested. Open-source tools like Kali Linux, Metasploit, Nmap, and Wireshark — all covered on the CEH exam — are free to download and use in home lab environments. Setting up a simple virtual lab with VirtualBox or VMware Player (free version), a Kali Linux VM, and a few vulnerable-by-design target machines (such as Metasploitable) costs nothing beyond your own time and provides hands-on familiarity with the tools and techniques that the exam addresses.

When comparing CEH costs to alternative certifications, context matters. CompTIA Security+ costs approximately $404 for the exam and is considered more entry-level. CompTIA PenTest+ costs approximately $404. The OSCP exam and course bundle from Offensive Security runs approximately $1,499. The GPEN (GIAC Penetration Tester) exam costs approximately $949 with a $429 renewal fee every four years. The CEH's Pearson VUE exam fee of $950 is therefore in line with comparable advanced cybersecurity certifications, making it competitively priced relative to its market recognition and employment demand.

Group training discounts are another avenue for cost reduction that individual candidates sometimes overlook. If you work at a company where multiple employees are pursuing CEH certification, approaching EC-Council or an Accredited Training Partner about group pricing can yield significant per-seat discounts on training courses. Corporate training agreements between employers and EC-Council ATPs frequently come with per-seat rates 20–40% below the individual retail price. Coordinating with your employer's training or HR department about group enrollment can dramatically reduce the cost of the training pathway.

Finally, consider the full lifecycle cost of CEH certification as you plan your budget. The initial exam costs $950–$1,050 plus study materials; the three-year renewal costs approximately $240 in annual fees; and each renewal cycle requires 120 CEU credits that may involve additional paid training (though many can be earned for free through community involvement, conference attendance, and free webinars). Over a five-year period, a CEH holder might spend $1,500–$2,000 total including initial certification and one renewal cycle — a modest cost relative to the career benefits the credential provides.

Another way to reduce net cost is to treat CEH preparation as an investment in negotiating a higher salary at your current job or when accepting a new offer. Security professionals who earn CEH certification during or shortly before a performance review cycle often find that the credential supports a compelling case for a raise. Even a $5,000 annual salary increase — modest by cybersecurity market standards — recoups the entire certification cost within two months. Framing CEH preparation as a salary investment rather than a training expense changes the financial calculus significantly.

Setting a calendar reminder 6 months before your CEH expiration date ensures you have adequate time to complete any remaining ECE credits and submit your renewal application without the pressure of a looming deadline. EC-Council's renewal portal allows you to track your CEU credit balance at any time, making it easy to stay current throughout the three-year cycle rather than scrambling at the end.

The CEH credential remains cost-effective over a career precisely because its market recognition is durable — the certification has been a standard in the cybersecurity hiring market for over two decades and is deeply embedded in both government and commercial employer requirements in a way that newer certifications have not yet matched.