Independent training guide · credential sources: October 11 · training options: October 16, 2026

CEH: training, costs, requirements and related work

Understand CEH versus CEH Practical, check your eligibility route and separate exam fees from training before choosing preparation.

312-50 · 125 questions · four hoursExam-only budget: USD 1,050–1,299Training or approved experience routeTraining and maintenance priced separately

See exam and training costs · Compare preparation options

Research and detailed planning are optional. A short request asks for your need, name, email and permission to reply.

Who it fits

CEH organizes broad ethical-hacking knowledge. Consider it when the named credential meets a work or employer requirement and you want structured security-testing preparation.

It is not a from-zero IT foundation. If you need to build networking or operating-system confidence, do that before an accelerated class. If your goal is a particular practical testing capability, compare the actual practice and feedback rather than buying the label alone.

Compare CHFI for evidence and investigation work · Compare Security+ foundations · Browse other certifications

Requirements & experience

Exam access: official training provides an eligibility route. Without it, EC-Council requires two years of applicable information-security experience, an application and approval. See the CEH application section before buying a voucher.

Recommended preparation from Learnerside: working TCP/IP, Windows and Linux knowledge, basic security administration and experience in a lawful practice lab. These are learning recommendations, separate from the issuer’s entry rules.

For a team, compare starting skills and job tasks individually. Eligibility or course completion alone does not show that a learner can benefit from a fast review class.

Exams & specializations

312-50 · 125 questions · four hours. The certification-body exam page identifies the assessment. Confirm delivery and accommodations before booking.

The 312-50 knowledge exam earns CEH. The optional CEH Practical is a separate six-hour, 20-challenge assessment. Holding both earns the CEH Master designation; do not mistake a knowledge-exam voucher for both assessments. Check the issuer’s exam comparison.

Course branding and exam blueprints serve different purposes. Require an outline mapped to the linked blueprint; a familiar course title does not establish coverage.

Skills measured

CEH blueprint v5.0, pages 2–5 lists the following knowledge domains. These are exam-scope weights, not evidence of performed work or a complete course syllabus.

Information Security and Ethical Hacking Overview

6% of the published blueprint

Reconnaissance Techniques

17% of the published blueprint

System Hacking Phases and Attack Techniques

15% of the published blueprint

Network and Perimeter Hacking

24% of the published blueprint

Web Application Hacking

14% of the published blueprint

Wireless Network Hacking

5% of the published blueprint

Mobile Platform, IoT, and OT Hacking

10% of the published blueprint

Cloud Computing

5% of the published blueprint

Cryptography

5% of the published blueprint

The issuer’s rounded domain percentages total 101%. They are reproduced as published, not silently normalized. Training-module counts and “AI” course branding should not be substituted for these blueprint weights.

Original practice idea: in an isolated authorized lab, examine a fictional vulnerability report, separate verified findings from assumptions, recommend a fix and explain how you would retest it. Ask for feedback on the reasoning and report. This is a learning exercise, not an exam question or pass predictor.

Costs

CEH exam-only budget: USD 1,050 for ECC online proctoring or USD 1,299 for VUE, including the USD 100 application. These are published-route arithmetic for an approved applicant without official training, observed October 11, 2026—not an all-in training quote. Check the applicable fee table.

After official training, inspect the bundle before adding another voucher. CEH Practical is separate unless explicitly included. Tuition, taxes, retakes, licensed labs, access expiry and study time must be priced separately. Regional and seller terms may change the total.

Include annual maintenance and continuing education. Use confirmed charges, estimates and unknowns as separate lines in an employer budget.

Training options

Compare CEH self-paced and live training

Self-paced study fits flexible hours; live instruction adds scheduled explanation and questions. Start with the support you need, then compare the exact package. A lower video-course price does not show savings on equivalent live instruction.

Free blueprint review, approved internal learning and lawful synthetic practice can help identify gaps before buying. They do not automatically establish the official-training eligibility route.

EC-Council CEH v13 official training options

Format and published cost: Displayed starting amounts: self-paced on-demand $1,699; live online $2,499; live in-person $3,299. The $3,999 unlimited on-demand library is a different product. Confirm currency, region, exact package, access length, voucher identity, proctoring and total.

Teaching, starting knowledge and authorization

Taught topics: Ethical testing foundations and boundaries; reconnaissance of a target; network discovery; service and account enumeration; vulnerability assessment; compromising operating systems in a lab; malicious software and defenses; packet interception and defenses; human manipulation and defenses; availability attacks and protections; session compromise; perimeter-control bypass and defenses; web-server assessment; web-application assessment; database-query injection; wireless testing; mobile-platform testing; connected-device and industrial-system testing; cloud-platform security testing; encryption and cryptanalysis.

Starting knowledge: Establish networking, operating-system and security foundations before an accelerated class. This is Learnerside preparation advice; check the selected course entry rules separately.

Issuer-direct catalogue with a 20-module v13 outline and separate delivery formats. It does not establish the selected package or a seat. CEH knowledge and CEH Practical are separate assessments; do not assume both vouchers are included.

Read EC-Council course details and outline · Checked 2026-10-16

Ask about this course

New Horizons CEH v13

Format and published cost: Five-day virtual instructor-led course; published USD 3,495 with an exam voucher listed as included. Virtual labs and live interaction are described. Confirm voucher type, Practical inclusion, lab expiry, post-class access, dates and total. Private group delivery is separately offered.

Teaching, starting knowledge and authorization

Taught topics: Ethical testing foundations; reconnaissance and vulnerability assessment; operating-system and network testing; web, wireless and mobile security; connected-device and cloud testing; cryptography and defenses.

Starting knowledge: Confirm starting TCP/IP, operating-system and security knowledge with the seller; the course page does not establish a universal admission rule.

Course ID 300201523. New Horizons describes itself as an EC-Council Authorized Learning Partner on its vendor-training page. Confirm current issuer authorization for the contracting seller and region; a brand-level claim does not verify the selected seat.

Read New Horizons course details and outline · Checked 2026-10-16

Ask about this course

ONLC Ethical Hacking and Countermeasures 13

Format and published cost: Five-day live online class, displayed fee $3,495. Attend from home/office or an ONLC center; a center does not establish an on-site instructor. Confirm currency, voucher inclusion, lab access, selected dates, daily hours and final total.

Teaching, starting knowledge and authorization

Taught topics: Ethical testing foundations; reconnaissance and vulnerability assessment; operating-system and network testing; web, wireless and mobile security; connected-device and cloud testing; cryptography and defenses.

Starting knowledge: Confirm starting security, networking and operating-system knowledge, plus ONLC funding and jurisdiction eligibility, before selecting an accelerated class.

Course code SCEH13; a 20-section outline is published. ONLC identifies itself as an EC-Council Accredited Training Center on its CEH catalogue. This provider claim is separate from current issuer confirmation for the exact seller and region.

Read ONLC course details and outline · Checked 2026-10-16

Ask about this course

Learning Tree CEH v13 (course 2031)

Format and published cost: Five-day live instructor-led course; U.S. catalogue displays $3,850 with a CEH exam voucher and after-course sandbox listed. In-person and AnyWare online attendance are offered; coaching is described as available. Confirm currency, voucher type, access term, selected format, coaching terms and total.

Teaching, starting knowledge and authorization

Taught topics: Ethical testing foundations; reconnaissance and vulnerability assessment; operating-system and network testing; web, wireless and mobile security; connected-device and cloud testing; cryptography and defenses.

Starting knowledge: The course recommends two years of security-related experience and strong TCP/IP knowledge. Its FAQ also phrases experience as mandatory for certification; use the issuer eligibility routes above rather than treating that seller wording as universal.

Course 2031 publishes 20 modules. Learning Tree describes official curriculum and an Accredited Training Center status on its EC-Council page. Historical issuer awards and provider claims do not establish current authorization for every legal seller or region; confirm employer sponsorship and contract terms.

Read Learning Tree course details and outline · Checked 2026-10-16

Ask about this course

Global Knowledge CEH v13 training formats

Format and published cost: U.S.-locale catalogue: five-day virtual instruction at displayed $3,595 excluding VAT; it also lists self-paced e-learning and company events. The page says knowledge and Practical exam vouchers are included. Confirm currency, which format that bundle covers, voucher expiry, lab access, selected dates and total; no self-paced price is established.

Teaching, starting knowledge and authorization

Taught topics: Ethical testing foundations; reconnaissance and vulnerability assessment; operating-system and network testing; web, wireless and mobile security; connected-device and cloud testing; cryptography and defenses.

Starting knowledge: The seller lists at least two years of IT-security experience and strong TCP/IP knowledge as course prerequisites. Those are training-entry requirements, separate from the issuer exam-eligibility routes.

Course code CEH, version 13, with a 20-module outline. The self-paced detail page could not be read in this check, so its exact package remains unresolved. Current issuer authorization of the selected U.S. seller remains unconfirmed; the published course is not proof of a partner relationship.

Read Global Knowledge course details and outline · Checked 2026-10-16

Ask about this course

Course observations above were checked October 16, 2026. Listed tuition, starting prices and included-voucher claims are seller observations, not complete quotes or confirmed seats. Keep taxes, proctoring, retakes and access expiry separate; avoid adding an included voucher twice.

Check the authorized seller and exact package

EC-Council supplies the issuer-direct option. New Horizons, ONLC and Learning Tree describe authorization or accreditation on their own sites. Confirm the contracting seller, territory and selected course with the issuer. Historical awards do not establish current authorization.

Review EC-Council authorization evidence. Ask the seller to name each included assessment: the CEH knowledge exam, CEH Practical, or both. Passing both earns Master; a training-completion certificate alone does not.

What the official CEH course teaches

The issuer’s CEH v13 outline lists 20 modules. These topic summaries follow that teaching sequence; the exam-domain weights above describe a different structure. Provider outlines may use different labels. Verify delivered coverage and permitted practice before selecting a class.

  1. Ethical testing foundations and boundaries
  2. reconnaissance of a target
  3. network discovery
  4. service and account enumeration
  5. vulnerability assessment
  6. compromising operating systems in a lab
  7. malicious software and defenses
  8. packet interception and defenses
  9. human manipulation and defenses
  10. availability attacks and protections
  11. session compromise
  12. perimeter-control bypass and defenses
  13. web-server assessment
  14. web-application assessment
  15. database-query injection
  16. wireless testing
  17. mobile-platform testing
  18. connected-device and industrial-system testing
  19. cloud-platform security testing
  20. encryption and cryptanalysis

For an employer brief, name the work task and starting skills, required lab feedback, attendance hours and chosen assessment. For a team, check individual readiness and require a practice environment the organization permits.

Earlier CEH provider and price observations — checked September 13, 2026

Historical September 13 observations, not current prices or availability. EC-Council’s North America CEH page showed direct on-demand training starting at USD 1,699, live online training starting at USD 2,499 and an unlimited on-demand library starting at USD 3,999. New Horizons showed a USD 3,495 five-day public virtual course. These are different products and “starting at” amounts—not interchangeable total-cost quotes.

Provider-published observations checked September 13, 2026.
RouteObserved priceWhat to verify
EC-Council single on-demandStarting at USD 1,699Access length, included exam, practical exam, labs, support and refund terms.
EC-Council single live onlineStarting at USD 2,499Exact dates, daily hours, time zone, recordings, instructor, exam and cancellation terms.
EC-Council unlimited on-demandStarting at USD 3,999Course-library scope, per-user term, CEH lab and exam inclusions, renewal and access limits.
New Horizons public virtualUSD 3,495December seat, ATC identity, seller, delivery, authorized instructor, exact voucher and terms.
ONLC SCEH13 live onlineUSD 3,495December seat, exam exclusion or inclusion, ATC identity, labs, seller and delivery relationship.
Learning Tree course 2031USD 3,850Calendar year, voucher identity, sandbox access, commercial eligibility, seat and terms.

The least expensive headline can cost more if the required exam, practical assessment, lab time, retake protection or schedule fit is missing. Keep each inclusion and unknown visible in the employer proposal.

CEH training: separate credential identity before comparing providers

EC-Council and provider pages checked September 13, 2026. These are dated research observations, not confirmed seats, quotes or a provider ranking.

Compare the CEH credential, practical path and delivered course—not just the badge

CEH v13 is three linked decisions: the 312-50 knowledge exam earns CEH, the separate CEH Practical adds a six-hour performance assessment, and passing both earns CEH Master. Compare the exact credential outcome, eligibility route, learner-performed labs, pace, voucher and seller-versus-delivery identity.

Official baseline

Exam scope: EC-Council identifies the CEH knowledge exam as 312-50 with 125 multiple-choice questions in four hours. CEH Practical is a separate six-hour assessment with 20 challenges. Passing the knowledge exam earns CEH; passing both assessments earns CEH Master. Do not assume an included “exam voucher” covers both.

Training scope: The current CEH v13 / CEH AI program publishes 20 module families spanning reconnaissance, scanning, enumeration, vulnerability analysis, system and web attacks, networks, wireless, mobile, IoT, cloud and cryptography. EC-Council markets extensive cyber-range practice, but a provider outline still must establish what this learner actually performs, for how long and with what post-class access.

How to use it: Official training is one exam-eligibility route; it is not proof of readiness. Without official training, EC-Council requires an eligibility application backed by at least two years of applicable information-security experience. For an intensive week, Learnerside recommends comfortable TCP/IP, networking, Windows and Linux administration, security fundamentals and legal lab boundaries.

EC-Council CEH v13 North America certification page (checked September 13, 2026) · EC-Council exam eligibility application rules (checked September 13, 2026) · EC-Council CEH v13 iClass course page (checked September 13, 2026)

EC-Council iClass: outline fit

Course: Official CEH v13 / 312-50 training sold directly by the certification body

Format and pace: On-demand and live-online packages are advertised; no complete dated calendar is linked in Learnerside’s current collection.

Published coverage:

  • 20 official CEH v13 module families
  • AI-assisted ethical-hacking techniques
  • cyber-range labs and attack-countermeasure practice
  • knowledge-exam preparation

Hands-on evidence: EC-Council markets more than 50% hands-on official training and extensive cyber-range labs. Confirm the package-specific lab entitlement, access window, support, resets and whether the work is demonstrated or learner-performed.

Readiness evidence: Buying official training satisfies one exam-access route; it does not replace the networking, operating-system and security foundation needed to use a compressed program well.

Likely fit: A learner who wants certification-body delivery and can verify the exact format, dates or access period, included assessment, support and complete price.

Dated schedule: No exact calendar is linked in Learnerside’s retained observations. Ask for every meeting date, time and source time zone.

Verify before approval:

  • whether the package includes only 312-50 or also CEH Practical
  • access length, labs, support, retake and refund terms
  • complete price, tax and any regional eligibility
  • live dates, daily hours, time zone, instructor and seat when applicable

EC-Council CEH v13 iClass course (checked September 13, 2026)

New Horizons: outline fit

Course: Provider course 300201523 / 3605460E, EC-Council Certified Ethical Hacker (CEH) v13

Format and pace: Five consecutive virtual instructor-led weekdays; private-group delivery is a separate offer.

Published coverage:

  • all 20 CEH v13 agenda families
  • AI across ethical-hacking phases
  • attack methods and countermeasures
  • live demonstrations and virtual labs

Hands-on evidence: The page states virtual labs and real-time participation but does not identify the exact learner-performed exercises, lab platform, access period or reset limits.

Readiness evidence: The public page does not establish a sufficient prerequisite baseline. Treat networking, TCP/IP, Windows, Linux and security administration comfort as safer preparation for the intensive pace.

Likely fit: A prepared learner who needs a dated live week and can verify the legal seller, delivery organization, ATC identity, exact labs and voucher scope.

Archived provider calendar examples: These dates were observed when the source was checked; some have passed. They are not upcoming class cards, open seats, or a current quote. Use the training finder for its time-checked references, then verify dates and availability with the provider.

  • 2026-12-07 through 2026-12-11 · USD 3,495 published tuition · America/Chicago. Provider labels this December session Guaranteed to Run; that does not establish an available seat or immutable schedule.

Verify before approval:

  • whether the included voucher is only 312-50 and whether CEH Practical is excluded
  • current EC-Council ATC and authorized instructor identity
  • legal seller, delivery organization and whether the calendar is a syndicated class
  • labs, post-class access, seat, final total and cancellation terms

New Horizons CEH v13 course 300201523 (checked September 13, 2026)

ONLC Training Centers: outline fit

Course: Provider course SCEH13, Ethical Hacking and Countermeasures 13

Format and pace: Five consecutive live-online weekdays; center attendance still uses an online instructor.

Published coverage:

  • the same 20 CEH v13 agenda families
  • AI-assisted ethical-hacking methods
  • attack techniques and countermeasures
  • course objectives matching the current provider page

Hands-on evidence: ONLC labels the course hands-on but the checked page does not publish a lab platform, exact learner-performed exercises, access period or feedback model.

Readiness evidence: The checked page does not expose a clear prerequisite section. Eligibility through training should not be confused with readiness for a five-day technical course.

Likely fit: A prepared learner who wants the listed live calendar and obtains written answers on voucher, labs, authorization, delivery identity and purchase eligibility.

Archived provider calendar examples: These dates were observed when the source was checked; some have passed. They are not upcoming class cards, open seats, or a current quote. Use the training finder for its time-checked references, then verify dates and availability with the provider.

  • 2026-12-07 through 2026-12-11 · USD 3,495 published tuition · America/Chicago. Provider labels this session Ready to Run, says it will not cancel for low enrollment, and displayed a December 2 registration deadline; seat availability still requires rechecking. Published registration deadline: 2026-12-02.

Verify before approval:

  • exam-voucher inclusion or exclusion and CEH Practical status
  • current EC-Council ATC, courseware and instructor identity
  • seller eligibility, delivery organization and whether the identical New Horizons calendar is the same cohort
  • labs, seat, final total, late fees and cancellation terms

ONLC course SCEH13 and exact calendar (checked September 13, 2026)

Learning Tree International: outline fit

Course: Course 2031, Certified Ethical Hacker (CEH) Training

Format and pace: Five-day live instructor-led online or in-person course with after-course coaching.

Published coverage:

  • CEH v13 ethical-hacking scope
  • system, network and application attack methods
  • defensive countermeasures
  • certification-exam preparation

Hands-on evidence: The page describes hands-on system hacking and an after-course computing sandbox, but the exact exercises, platform entitlement and access duration need confirmation.

Readiness evidence: Learning Tree labels the course intermediate. Confirm prerequisites against the learner’s actual network, operating-system and security-administration experience.

Likely fit: An employer-sponsored learner who values a stated voucher, sandbox and coaching and can resolve calendar-year, delivery and package details.

Dated schedule: No exact calendar is linked in Learnerside’s retained observations. Ask for every meeting date, time and source time zone.

Verify before approval:

  • calendar year for every displayed date and current seat
  • whether the voucher is 312-50 only and CEH Practical is excluded
  • sandbox and coaching access terms
  • commercial buyer price and complete total
  • current EC-Council partner, instructor, seller and cancellation terms

Learning Tree CEH course 2031 (checked September 13, 2026)

Evidence boundary: This comparison paraphrases public outlines; it does not republish a provider syllabus, verify a seat, or prove that every listed topic receives equal live instruction. A provider-issued proposal should identify the exact course version, schedule, delivery organization, inclusions and terms.

“CEH exam included” is not specific enough

The 312-50 knowledge exam earns CEH. CEH Practical is a separate six-hour, 20-challenge assessment; passing both earns CEH Master. Require every quote to name the assessment, voucher delivery and expiry, retake conditions and whether CEH Practical is excluded. Do not price a CEH Master goal from a knowledge-exam voucher alone.

Two seller pages may point to one delivered class

ONLC and New Horizons publish the same December 7–11, 2026 calendar, the same 8:00 AM–4:00 PM Central daily hours and the same USD 3,495 price. Their public pages do not establish whether these are separate cohorts or two seller listings into the same delivered class. Learnerside shows both sources but does not count them as independent availability until the delivery organization, instructor and seat inventory are confirmed.

Official training creates eligibility—not a technical foundation

Without official training, EC-Council’s application route requires at least two years of applicable information-security experience and a USD 100 nonrefundable application fee. With official training, the exam-access path changes, but the learner still needs enough networking, TCP/IP, Windows, Linux, security and legal-lab foundation to benefit from the pace.

Review Learnerside’s EC-Council authorization evidence · check EC-Council’s current eligibility rules.

Jobs & salary context

Security testing and vulnerability work

Compare vulnerability-assessment and junior security-testing tasks: scope an authorized test, validate a finding, explain impact and support remediation.

Security analyst and assurance work

Some learning overlaps with understanding attacks and reviewing controls. A SOC role also needs detection, triage and response practice that a broad ethical-hacking course may not provide.

U.S. salary context: BLS reports a May 2025 median annual wage of USD 129,180 for Information Security Analysts, SOC 15-1212, checked October 11, 2026. Read the occupation data. This broad occupation is context, not a CEH-holder salary, a starting offer or a specific forensic-investigator or penetration-tester statistic. Location, responsibilities and experience affect offers; no credential pay premium is established.

Before buying, compare a real role’s requirements with your current work samples and the course’s practice. Certification, employment eligibility and demonstrated skill are separate.

Renewal

The continuing-education policy includes CEH in the 120-credit, three-year scheme. The fee table lists USD 80 annually / USD 240 over three years, observed October 11, 2026. Credit activities and personal deadlines require their own check; paying the fee alone does not meet the credit requirement.

This is maintenance context, not a complete renewal bill. Confirm your account’s cycle, eligible activities and how multiple credentials affect payment before budgeting.

Sources & next steps

Current issuer observations checked October 11, 2026: assessment details, eligibility and fee tables, CEH blueprint v5.0, pages 2–5, training options, continuing education and maintenance fees. The BLS wage source is linked above. Course and provider observations were separately checked October 16, 2026. Earlier provider observations keep their September date; exam fees, renewal and salary data keep their October 11 date.

Choose the learning outcome first, then compare preparation and a complete written offer. You can research freely, draft a private employer brief or make an optional short request. Permission to reply does not authorize sharing your details with a provider.