Professional Qualifications

CREST provides a recognised career path right from entry into the industry through to experienced senior tester level.  We work with the largest number of technical information security providers who support and guide the development of our examination and career paths.

All the information you need to book a CREST examination can be found on the Examination Booking page in your country of choice which  includes the Terms and Conditions for booking, information on logistics and timings and CREST’s policy for candidates requiring additional time to accommodate a medical condition (must be advised in advance and medical evidence required);  the booking form also contains a number of frequently asked questions.

A summary of the examination delivery methods is shown in the table below.

Examination Title Entire Exam at Pearson Vue Written Element at Pearson Vue Entire Exam at CREST Exam Centre Practical Element at CREST Exam Centre
Practitioner Security Analyst
Registered Penetration Tester
Certified Infrastructure Tester
Certified Web Application Tester
Certified Simulated Attack Specialist
Certified Simulated Attack Manager
Registered Threat Intelligence Analyst
Certified Threat Intelligence Manager
Practitioner Intrusion Analyst
Registered Intrusion Analyst
Certified Network Intrusion Analyst
Certified Host Intrusion Analyst
Certified Malware Reverse Engineer
Certified Incident Manager
Registered Technical Security Architect

The Examinations Overview gives information on each examination.   You can also click on the links below to access the technical syllabus of each examination:

Penetration Testing Examinations:
CREST Practitioner Security Analyst
CREST Registered Penetration Tester 
CREST Certified Web Applications Tester
CREST Certified Infrastructure Tester
CREST Certified Wireless Specialist

CBEST / Simulated Target Attack and Response (STAR) Examinations:
CREST Certified Simulated Attack Manager
CREST Certified Simulated Attack Specialist
CREST Registered Threat Intelligence Analyst
CREST Certified Threat Intelligence Manager

Incident Response Examinations:
CREST Practitioner Intrusion Analyst
CREST Registered Intrusion Analyst
CREST Certified Network Intrusion Analyst
CREST Certified Host Intrusion Analyst
CREST Certified Malware Reverse Engineer
CREST Certified Incident Manager

Security Architecture Examination:
CREST Registered Technical Security Architect

The CREST Career Path

The diagram above depicts the career path offered by CREST qualifications.  Please note that the following examinations are currently in development:

CREST have also accredited a number of training courses that align with elements of the syllabuses for our examinations.  You will find full details on this page.

Recommended preparation material for our examinations

CREST Assessors
CREST operates a small network of Assessors drawn from CREST Member Companies to manage the examination process.  You can find further information on this group and their selection here.