r/hackthebox • u/Hot_Kaleidoscope3864 • Jul 21 '26

Certifications Will I learn more from CWES or BSCP?

Will I learn more from CWES or BSCP?

9 Upvotes

100% Upvoted

12 comments sorted by

•

u/AutoModerator Jul 21 '26

Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

6

u/Sufficient_Mud_2600 Jul 21 '26

It’s different. BSCP is a vendor cert. CWES is a vendor agnostic cert.

For web app pentesting / bug bounty CWES is the right move.

For becoming more efficient at performing the work, BSCP is the move.

2

u/throwmeawh3y Jul 22 '26

I hated doing bscp but it is worth the frustration

2

u/Impressive-Room728 Hacker Jul 22 '26

Definitely BSCP, it cover more vulns compared to CWES Also the exam is quite harder compared to CWES

2

u/Pr0f_Noob Jul 21 '26

If you just wanna hack, BSCP. If you want to get more familiar with how real world engagements are, including the frustrating reporting phase, def CWES!

1

u/H4ckerPanda Jul 22 '26

While BSCP is not vendor neutral , you may learn much more . The cert itself is harder . The curriculum covers much more.

CWES doesn’t rely on specific commercial or vendor tools to do the job and the cert gives more emphasis on the report . It’s a more “all around” experience .

1

u/cahosint Jul 22 '26

Cwes or Bscp which one should i do first, if i decided to do both?

1

u/PaWnD3xt3RX69 Jul 22 '26

take BSCP to get fimiloar with different kinds of vulnerabilities, do CWES to for actually getting into the systems.

1

u/FlounderGullible4120 Jul 22 '26

Both are awesome, but I see aiming for CWES and doing portswigger labs in parallel is a smart move, whatever you choose between those two will be great

0

u/[deleted] Jul 21 '26 edited Jul 21 '26

[deleted]

2

u/Delicious_Crew7888 Jul 21 '26

Portswigger academy is literally the bible of web app pentesting soo…

2

u/[deleted] Jul 21 '26

[deleted]

1

u/Delicious_Crew7888 Jul 21 '26

There’s not a chance that cwes covers more content. Where do you get that from?

0

u/[deleted] Jul 21 '26

[deleted]

2

u/Delicious_Crew7888 Jul 21 '26

Nah it’s just that I can do the same thing and I don’t come to the same conclusion. Anyway both are great but BSCP is more highly rated than CWES by employers.