31%

of breaches now start with vulnerability exploitation. Verizon Data Breach Investigations Report 2026.

Rocheston Certified Cybersecurity Engineer (RCCE) Level 2 certification

A Third of Breaches Start Here.

Nearly a third of breaches now begin with an exploited vulnerability. RCCE Level 2 puts you on a cyber range with more than 100 targets to find those flaws first, and you leave with two Rocheston certifications.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

RCCE Level 2

Course

5 days

Course fee

RM11,500

Exam fee

Included

Next intake

23 Nov 2026

Quick answer

What is RCCE Level 2?

The Rocheston Certified Cybersecurity Engineer (RCCE) Level 2 is Rocheston’s advanced, penetration testing focused programme. You attack more than 100 machines on the Rocheston Cyber Range, run red and blue team exercises, assess targets with Rocheston Vines and finish with a real-world pen testing project. Pass the exam on the final day and you earn two certifications: RCCE and the Rocheston Certified Red/Blue PenTester (RCPT).

Exam facts verified against rocheston.com on 25 Oct 2026

FOR

RCCE Level 1 holders and security engineers moving into penetration testing

ROLES

Penetration tester, red team operator, security engineer, threat hunter

SKIP IF

You have not completed RCCE Level 1. Rocheston makes it the prerequisite

01

The Credential

What you study, practise and sit to earn it.

Complete RCCE Level 1 first, then the five-day Level 2 course. Pass the exam on the final day and you hold both the RCCE and the Rocheston Certified Red/Blue PenTester (RCPT) certifications.

COURSE

5 days, 4 parts

HANDS-ON

Cyber range, 100+ targets

EXAM

About 90 Qs, final day

CREDENTIALS

RCCE and RCPT

Awarded by

Rocheston

Level

Advanced, penetration testing

Prerequisite

RCCE Level 1

Pass mark

72%

Validity

2 years, renew online

Lab platform

Rocheston Cyber Range and Vines

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Go deeper after RCCE Level 1, on a live range

→

RCCE Level 2

Pen testing across 100+ targets, two certifications

Prove pen testing skills in a 24-hour practical exam

→

EC-Council CPENT

Fully practical exam on live ranges

A vendor-neutral pen testing credential

→

CompTIA PenTest+

Full engagement, from scoping to the report

Build your attack and defence base first

→

RCCE Level 1

26 modules, 95% hands-on labs

RCCE Level 1 is the prerequisite. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for Level 2. Fewer: start with RCCE Level 1.

03

What the Exam Covers

Four parts, built on Rocheston’s 100-module RCPT outline.

About 90 multiple-choice questionsPass mark: 72%

Recon to access

Network and Infrastructure

  • Reconnaissance, port scanning, version detection and network mapping
  • Firewall, IDS/IPS, VPN and Active Directory testing
  • Privilege escalation, MITM and ARP spoofing

Apps and services

Applications and Cloud

  • Input validation, session management and cookie security
  • SSRF, CSRF, clickjacking and OWASP Top 10 testing
  • Cloud, container, API and database security

Wider attack surface

People and Devices

  • Phishing, spear phishing and social engineering
  • Wi-Fi, IoT, mobile and embedded device testing
  • Insider threat and HID attacks

Assure and respond

Red and Blue Readiness

  • Red teaming and zero-day exploit testing
  • Threat hunting and real-time alerting
  • Breach readiness and incident response capability

Source: Rocheston RCCE Level 2 page (RCPT outline) and RCCE Level 2 brochure. Rocheston does not publish domain weightings.

04

What the Course Covers

Four parts, from the range to a real-world project.

Five days on Rocheston’s official RCCE Level 2 programme. You work through four parts, each one hands-on, and finish with the exam on the final day.

Part 1

Cyber Range Sphere

  • More than 100 machines on Rocheston Sphere
  • Real-life scale attack simulations
  • Targets from SQL injection to ransomware and OAuth flaws

Part 2

ZombieCop.Run

  • Red team and blue team exercises
  • More than 100 targets
  • Attack, detect and respond in turn

Part 3

Vulnerability Vines

  • Vulnerability assessment with Rocheston Vines
  • Penetration testing workflow
  • Prioritising what to fix

Part 4

JuggyBank Project

  • A real-world penetration testing project
  • Testing a full banking target end to end
  • Exam on the final day

100+

machines and targets across the Rocheston Cyber Range and ZombieCop.Run. Platforms and tools include:

Rocheston SphereZombieCop.RunRocheston VinesJuggyBankNmap

05

Why Now

How attackers get in, how fast flaws pile up, and why train with us.

48%

of breaches now involve a third party, up 60% in a year

Verizon Data Breach Investigations Report 2026

40K

CVEs published in the first half of 2026, on track to roughly double for the year

Microsoft Digital Defense Report 2026

16%

rise in cyber incidents reported to MyCERT in Q1 2026, to 2,188 cases

MyCERT Cyber Incident Summary Report, Q1 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Testers who find the flaws first give their organisations time to fix them.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

Rocheston Authorized Training Partner

Delivering Rocheston’s official RCCE Level 2 programme

Exam included

Sit your exam on the final day

Two certifications

RCCE and RCPT from one course

HRD Corp registered

This course is HRD Corp claimable

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Five-day courseIncluded

RCCE Level 2 exam (RCCE and RCPT)Included

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM11,500

Dates

Where

Fee

Mon 23 to Fri 27 Nov 2026

Kuala Lumpur or online

RM11,500 incl. exam

Mon 25 to Fri 29 Jan 2027

Kuala Lumpur or online

RM11,500 incl. exam

Mon 29 Mar to Fri 2 Apr 2027

Kuala Lumpur or online

RM11,500 incl. exam

Mon 24 to Fri 28 May 2027

Kuala Lumpur or online

RM11,500 incl. exam

Mon 26 to Fri 30 Jul 2027

Kuala Lumpur or online

RM11,500 incl. exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certifications

RCCE Level 2 and Rocheston Certified Red/Blue PenTester (RCPT)

Questions

About 90, multiple choice

Passing score

72%

When

Final day of the course

Delivery

Rocheston Cyberclass or Pearson VUE

Prerequisite

RCCE Level 1

Retakes

Any time, for an additional fee

Exam fee

Included in the course fee

VALID FOR

Two years

Your RCCE Level 2 certification is valid for two years and can be renewed online.

STAY SHARP

Keep practising

Cyberclass gives you study videos, recorded lectures and white papers to keep your skills current.

FAQ

Questions People Ask

What is RCCE Level 2?

It is Rocheston’s advanced, penetration testing focused programme. You attack more than 100 targets on the Rocheston Cyber Range, run red and blue team exercises and complete a real-world pen testing project.

Yes. Rocheston makes RCCE Level 1 the prerequisite for Level 2 and RCPT. It also expects basic hacking, networking, system administration and Linux skills.

At Trainocate Malaysia the five-day RCCE Level 2 course is RM11,500 per person, including the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

Pass the exam and you earn two Rocheston certifications: RCCE and the Rocheston Certified Red/Blue PenTester (RCPT).

About 90 multiple-choice questions on the final day of the course, delivered through Rocheston Cyberclass or Pearson VUE. You need 72% to pass, and you can retake it for an additional fee.

RCCE Level 2 builds on RCCE Level 1 and gives you two Rocheston certifications from a range-based course. CPENT is EC-Council’s advanced credential, examined in a 24-hour practical exam. Pick the path that matches your first certification.

Two years, and you can renew it online.

Find the Flaws First

Pick an intake. An advisor confirms your Level 1 status, fees, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 23 to 27 Nov 2026
  • RM11,500, exam included

Sources

  1. Rocheston: RCCE Level 2
  2. Rocheston: RCCE Level 2 brochure (PDF)
  3. Rocheston: RCCE certification
  4. Rocheston: Certified Red/Blue PenTester (RCPT)
  5. Verizon: 2026 DBIR news release (19 May 2026)
  6. Microsoft Security Insider: 2026 Digital Defense Report (1 Oct 2026)
  7. CyberSecurity Malaysia: Q1 2026 Cyber Incident Summary Report
  8. Trainocate: RCCE2 course page
  9. NACSA: Cyber Security Act 2024 (Act 854)
  10. MAICSA: Act 854 regulations summary