OffSec Threat Hunter (OSTH) — Requirements & Free Practice
US · License preparation
100 free questions · Answer explanations · No signup required
Loading selected examination banks…
Choose what to practice
Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements
Licenses, application pathways and examination requirements
Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.
OffSec Threat Hunter (OSTH)
OffSec certification demonstrating foundational threat-hunting proficiency, awarded after passing the OSTH examination; an individual award expires three years after passing.
Licensing authority: OffSec
Initial by examination
- Applicability
- Current official OSTH guide and current TH-200 page cross-link the same exam and award. No official examination-version effective or retirement date was found; null dates do not claim historical applicability or permanent availability.
- Assessment
- One eight-hour proctored threat-hunting sprint, exercise answers and a professional report. The report is due within 24 hours of completion; missing that deadline fails the exam. Passing requires at least 50 of 70 points.
- Award Validity
- Three years after passing; renewal assessments are outside this initial-examination investigation.
- Delivery
- OSLP remote scheduling from the candidate's available calendar, subject to attempt expiry, identity/technical verification and proctoring. Available dates between 2026-11-25 and 2027-02-01 are not individually verified.
- Recommended Preparation
- TCP/IP networking, Linux/Windows familiarity and basic cybersecurity knowledge are encouraged; the TH-200 page does not impose formal course prerequisites.
- Training Enrollment
- Enroll in the associated TH-200 training and hold a valid exam attempt; scheduling opens once course access starts. Training enrollment is a prerequisite, not a second examination.
OffSec Threat Hunter (OSTH)
- Provider
- OffSec
- Format
- One remotely proctored hands-on threat-hunting sprint with exercise answers and a mandatory professional report; open book subject to OffSec resource and AI restrictions.
- Exam questions
- Total questions: 7; Scored questions: 7.
- Time limit
- 8 hours for the examination; report due within 24 hours after examination completion.
- Passing score
- At least 50 of 70 points; up to 10 points per exercise question, with answer correctness and report completeness both assessed.
Examination outline
- Objectives
- Documentation Requirements
Examination sources
- OSTH Exam Guide
OSTH Exam Introduction
- OSTH Exam Guide
Section 1 / Objectives
- OSTH Exam Guide
Section 1 / Documentation Requirements
- OSTH Exam Guide
Section 2 / Suggested Documentation Templates
- OSTH Exam Report template
Requirements
- OSTH Exam Guide
Section 2 / Point Allocation
- OSTH Exam Guide
Section 2 / Point Allocation
- OSTH Exam FAQ
How long is the exam?
- OSTH Exam Guide
Section 3 / Submission / deadline
- OSTH Exam Guide
Section 3 / Results
- OSTH Exam FAQ
How can I manage my OSTH exam? / scheduling instructions
- Managing OffSec Certification Exams
Introduction / Enhanced Flow
- OffSec Certification Exam FAQ
Can I take a certification exam without buying or taking its corresponding training?
- OffSec Certification Exam FAQ
Can I schedule my exam right away after completing the registration process?
- What languages are your courses available in?
Article body
- Managing OffSec Certification Exams
Scheduling Rules, Recommendations and Tips
- Managing OffSec Certification Exams
Exam Expiry / Course & Certification Exam Bundle
- OSTH Exam Guide
Section 2 / Exam Connection
- Proctored Exam Requirements FAQ
What is expected of me as a learner to participate in a proctored exam? / Identity Verification Requirements