What Is the CEH Certification?
On this page
The Certified Ethical Hacker (CEH) is a broad, well-known certification covering ethical hacking concepts, tools, and attack techniques. It carries a mixed reputation: widely recognized by HR and required for some roles, yet viewed by many practitioners as less demonstrative of real skill than hands-on certifications. Understanding that nuance helps you decide whether it fits your goals.
What does the CEH cover?#
The CEH surveys a wide range of offensive topics:
- Reconnaissance, scanning, and enumeration.
- System hacking, malware, and sniffing.
- Web and wireless attacks.
- Social engineering, and more.
The core exam is primarily knowledge-based (multiple choice), with a separate optional practical exam for those who want to demonstrate hands-on ability.
The reputation nuance#
The CEH’s value depends heavily on your goal:
| Strength | Weakness |
|---|---|
| Broadly recognized by HR | Core exam is not hands-on |
| Required for some (compliance) roles | Seen as less rigorous than OSCP |
| Wide topic coverage | Knowledge ≠ demonstrated skill |
If a specific job or contract requires it, that requirement settles the question. If your goal is to prove practical offensive skill, a hands-on certification may serve you better.
The CEH is a broad, recognized credential with caveats. Compare options in the certification roadmap and the Careers & Practice hub.
Frequently asked questions#
What is the CEH?
The Certified Ethical Hacker (CEH), from EC-Council, is a broad certification covering ethical hacking concepts, tools, and attack techniques across many domains. The core exam is primarily knowledge-based (multiple choice), with an optional separate practical exam. It is widely known and sometimes required by employers, especially for compliance reasons.
Is the CEH respected in the industry?
Its reputation is mixed. The CEH is broad and well-recognized by HR and required for some roles, but many practitioners consider the knowledge-based core less demonstrative of real skill than hands-on certifications like the OSCP. It has value for checkbox requirements and breadth, but it is not primarily a proof of practical ability.