A Cut Above the CREST with New Exam


CREST has launched its new Registered Penetration Tester (CRT) certification globally.

It is now available in more than 70 countries and in more than 1000 Pearson VUE test centres.

Reflecting the ever-changing needs of the cyber security sector, CREST says it has also updated the CRT exam. CRT is an intermediate level exam that tests a candidate’s ability to carry out penetration testing tasks.

It offers a greater depth of knowledge testing and introduces new content and sections that were not previously covered.

Content now includes a wider range of topics – including Windows and Linux file permissions, processes and exploitations, mail and OS command injection and Web Application logic flaws, to name a few.

CREST’s expert assessors updated and added the new content to the exam, and it has all been rigorously tested by them.

Nick Benson, CREST CEO, said: “CREST’s goal has always been to raise the quality and professionalism of cybersecurity practices, leading the way in penetration testing and vulnerability assessment as well as red teaming, incident response and threat intelligence. Our commitment to ensuring cybersecurity professionals adhere to rigorous ethical and technical standards is exemplified by the growing popularity and recognition of our CRT qualification internationally.”

Candidates still need to hold a valid CREST Practitioner Security Analyst (CPSA) certification before sitting the CRT exam.

Andy Woolhead, CREST Head of Cyber Skills and Certifications, said: “We have fully refreshed the exam, retaining the high calibre that our member companies and exam candidates expect. We have gone to great lengths to ensure the quality of the new exam, with the support of our expert assessors and the broader CREST Community. The new CRT test is more evenly balanced across infrastructure and web and a larger skillset is tested. This is all part of our remit to fully support cyber security professionals everywhere in their ongoing professional development.

“CREST research has shown us that the quality of Pen Tests varies enormously and that the lack of defined standards complicates the landscape. The CRT exam has been designed to reflect current Pen Test practice and to accurately assess an individual’s knowledge, skills and experience. Available to take in over 70 countries, we are seeing more of a logical progression to standardisation across the sector – which can only be a good thing.”