83%

of cybersecurity professionals see real changes in cyber attacks driven by the rise of AI. EC-Council C|EH Threat Report 2024.

Certified Penetration Testing Professional (CPENT AI) certification

Attacks Evolved. Have You?

AI is changing how attacks are built and launched. CPENT AI tests you on live ranges for 24 hours, with AI in every phase, so you can work at the level attackers now do.

HRD Corp claimableYayasan Peneraju: may be eligibleKL, Penang or online

Exam

24-hr practical

Course

5 days

Course fee

RM8,100

Exam fee

Included

Next intake

14 Dec 2026

Quick answer

What is CPENT AI?

The Certified Penetration Testing Professional (CPENT), branded CPENT AI, is EC-Council’s advanced, hands-on penetration testing certification. It proves you can run a full test across web apps, APIs, Active Directory, binaries and IoT, then report it. The exam is 100% practical: 24 hours on live ranges, plus a report within seven days.

Exam facts verified against eccouncil.org on 23 Oct 2026

FOR

Experienced testers, CEH holders and red team members

ROLES

Penetration tester, red team operator, VAPT consultant

SKIP IF

You are new to hacking. Start with CEH v13

01

The Credential

What you study, practise and sit to earn it.

Pass the 24-hour practical exam and you hold CPENT. Score 90% or more and EC-Council also awards Licensed Penetration Tester (LPT) Master, with no extra exam.

COURSE

5 days, 14 modules

HANDS-ON

110+ labs, 5 live ranges

EXAM

24-hr practical

CREDENTIAL

CPENT, or LPT (Master)

Awarded by

EC-Council

Level

Advanced, not for beginners

Recommended

CEH or 2 years in information security

Exam

100% practical, remotely proctored

Tools

50+ tools, AI in every phase

Validity

Renewed yearly with CE fee

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Prove you can run a full pen test under pressure

→

CPENT AI

24 hours on live ranges, plus a report

Learn the attacker’s toolkit first

→

Certified Ethical Hacker v13

Broad attack techniques with 221 labs

A vendor-neutral pen testing credential

→

CompTIA PenTest+

Full engagement, from scoping to the report

Investigate after the breach

→

CHFI

Forensics across systems, networks, cloud and mobile

Not for beginners. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with CEH v13.

03

What the Exam Covers

One practical exam, two possible credentials.

24 hours, or two 12-hour sessionsReport due within 7 days

Earns CPENT

Score 70% or More

  • 100% practical, on live ranges
  • Remotely proctored online
  • Exploits tested against different defences

Earns LPT (Master)

Score 90% or More

  • Awarded automatically with CPENT
  • No separate exam
  • EC-Council’s top penetration testing credential

Prepare

Practise on 5 Ranges

  • Active Directory and Binaries ranges
  • IoT and Web ranges
  • Capture the Flag range

Source: EC-Council CPENT AI programme page.

04

What the Course Covers

14 modules in five themes, plus 110+ labs and 12 self-study modules.

Five days of EC-Council’s official CPENT AI course. You work through a full engagement, from scoping to the report, with AI-assisted reconnaissance, scanning and exploitation along the way.

4 modules

Plan and Recon

  • Introduction to Penetration Testing and Methodologies
  • Penetration Testing Scoping and Engagement
  • Open-Source Intelligence (OSINT)
  • Social Engineering Penetration Testing

2 modules

Web and APIs

  • Web Application Penetration Testing
  • API and Java Web Token Penetration Testing

4 modules

Breaking In

  • Perimeter Defence Evasion Techniques
  • Windows Exploitation and Privilege Escalation
  • Active Directory Penetration Testing
  • Linux Exploitation and Privilege Escalation

3 modules

Advanced Exploitation

  • Reverse Engineering, Fuzzing and Binary Exploitation
  • Lateral Movement and Pivoting
  • IoT Penetration Testing

1 modules

Report

  • Report Writing and Post-Testing Actions

110+

hands-on labs and CTF challenges with 50+ tools, plus 12 self-study modules covering scripting, Metasploit, wireless, OT and SCADA, cloud, database and mobile testing.

05

Why Now

How AI is changing attacks, what is hitting Malaysia, and why train with us.

83%

of cybersecurity professionals see real changes in cyber attacks driven by the rise of AI

EC-Council C|EH Threat Report 2024

70%+

rank social engineering and zero-day exploits as the top threat vectors

EC-Council C|EH Threat Report 2024

16%

rise in cyber incidents reported to MyCERT in Q1 2026, to 2,188 cases

MyCERT Cyber Incident Summary Report, Q1 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Testing your defences before an attacker does is how you stay off that clock.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

EC-Council Accredited Training Center

Delivering EC-Council’s official CPENT AI course

Exam included

One fee covers training and your exam

HRD Corp registered

This course is HRD Corp claimable

KL, Penang or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Five-day course with 110+ labsIncluded

CPENT practical examIncluded

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM8,100

Dates

Where

Fee

Mon 14 to Fri 18 Dec 2026

Kuala Lumpur or online

RM8,100 incl. exam

Mon 8 to Fri 12 Feb 2027

Kuala Lumpur or online

RM8,100 incl. exam

Mon 24 to Fri 28 May 2027

Kuala Lumpur, Penang or online

RM8,100 incl. exam

Mon 23 to Fri 27 Aug 2027

Kuala Lumpur or online

RM8,100 incl. exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Certified Penetration Testing Professional (CPENT)

Format

100% practical, on live ranges

Duration

24 hours, or two 12-hour sessions

Report

Due within seven days of the exam

Passing score

70% for CPENT; 90% for LPT (Master)

Delivery

Online, remotely proctored

Eligibility

Official training, or two years in information security

Exam fee

Included in the course fee

EVERY YEAR

Pay the CE fee

CPENT is valid for one year and is extended each year when you pay EC-Council’s continuing education fee.

EVERY 3 YEARS

Earn ECE credits

At the end of each three-year cycle, renewal also depends on earning the required EC-Council Continuing Education credits.

FAQ

Questions People Ask

What is CPENT AI?

CPENT AI is the current branding of EC-Council’s Certified Penetration Testing Professional programme. It is an advanced, hands-on pen testing certification with AI techniques built into every phase, from reconnaissance to exploitation.

At Trainocate Malaysia the five-day CPENT AI course is RM8,100 per person, including the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

It is 100% practical. You choose one 24-hour session or two 12-hour sessions on live ranges, remotely proctored, then submit a penetration test report within seven days.

Score 70% or more on the exam and you earn CPENT. Score 90% or more and EC-Council also awards Licensed Penetration Tester (LPT) Master, with no separate exam.

Yes. CEH teaches a broad range of attack techniques and is tested by multiple choice. CPENT is fully practical and expects you to run a complete engagement. EC-Council says CPENT is not for beginners, so most candidates take CEH first.

Not formally. With official training you can sit the exam. EC-Council expects a background in information security, CEH or equivalent knowledge.

CPENT is valid for one year and is extended each year when you pay the continuing education fee. At the end of each three-year cycle you also need the required EC-Council Continuing Education credits.

Take On the 24-Hour Test

Pick an intake. An advisor confirms fees, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 14 to 18 Dec 2026
  • RM8,100, exam included

Sources

  1. EC-Council: Certified Penetration Testing Professional (CPENT AI)
  2. EC-Council: ECE policy
  3. EC-Council certification: Certified SOC Analyst (exam 312-39)
  4. EC-Council: C|EH Threat Report 2024 press release
  5. Trainocate: CPENT course page
  6. CyberSecurity Malaysia: Q1 2026 Cyber Incident Summary Report
  7. NACSA: Cyber Security Act 2024 (Act 854)
  8. MAICSA: Act 854 regulations summary