CEH Cost in 2026: Exam Fees, Eligibility, Training, and Practical Options

The cost of becoming a Certified Ethical Hacker is not one fixed number because EC-Council offers multiple eligibility and delivery paths. In 2026, a candidate may enter through official training or qualify through an experience-based application. The knowledge exam can be delivered through EC-Council’s remote proctoring route or Pearson VUE, and CEH Practical is a separate performance-based exam. Training packages add another layer of cost.

The most useful budget therefore separates mandatory certification costs from optional preparation costs. A self-study candidate who already has qualifying experience faces a different total from a newcomer buying official training, a Pearson VUE voucher, and the CEH Practical exam.

The CEH certification should be planned as a pathway: eligibility, knowledge exam, optional practical validation, study resources, and possible retakes. Pricing can change, so candidates should verify the EC-Council store immediately before purchasing anything.

The exam voucher price depends on delivery method

EC-Council currently lists different voucher prices for the CEH knowledge exam depending on how it is delivered. The Pearson VUE testing-center voucher is listed at US$1,199, while the EC-Council remote-proctored RPS voucher is listed at US$950. Both are for the CEH knowledge examination rather than the separate practical assessment.

The CEH knowledge exam uses exam code 312-50, contains 125 multiple-choice questions, and has a four-hour duration. Candidates should compare not only the voucher price but also testing preference, travel, scheduling, and whether their training provider already includes an exam attempt.

Do not buy a voucher before confirming eligibility. EC-Council states that official-training candidates need the appropriate proof of attendance, while self-study candidates must be approved through the eligibility process before purchasing the exam voucher.

Self-study can lower training cost, but the eligibility application matters

Candidates who complete official EC-Council training can proceed to the certification exam without the separate experience-based eligibility application. Candidates who want to skip official training need to demonstrate relevant information-security experience and follow EC-Council’s eligibility process.

EC-Council’s published eligibility guidance has historically required at least two years of information-security experience for the experience-based route and a non-refundable US$100 eligibility application fee. Candidates should confirm the current application terms when they apply because certification policies can change independently of exam voucher prices.

This creates an important budgeting distinction. “Self-study” does not mean “buy a voucher with no other requirements.” It means you are using experience rather than official training as the eligibility path. The article on how to earn CEH can help map the steps before money is committed.

Official training is the largest variable in the total budget

EC-Council markets multiple training formats, including its iClass options and authorized training partners. Public pricing varies by package, geography, format, promotions, included labs, and whether the exam voucher is bundled. EC-Council’s current North American on-demand certification-course offering is advertised from several thousand dollars, far above the standalone exam-voucher cost.

That premium can be reasonable for someone who needs structured instruction, labs, official materials, and an integrated exam path. It is less attractive for an experienced practitioner who already understands most exam domains and only needs targeted review.

Evaluate what the package actually includes: course access period, cyber-range labs, official e-books, exam voucher, retake coverage, instructor access, practice material, and support. The CEH course structure is more useful for this decision than comparing headline prices alone.

CEH Practical is a separate cost and a different kind of assessment

The CEH knowledge exam is multiple choice. CEH Practical is a separate six-hour, remotely proctored cyber-range assessment that requires candidates to complete hands-on challenges. EC-Council’s store currently lists the CEH Practical exam at US$550 as a standalone purchase.

Candidates who hold both CEH and CEH Practical can qualify for the CEH Master designation under EC-Council’s current program structure. That means the practical exam is not required merely to hold the standard CEH credential, but it can provide stronger evidence for people who want to demonstrate applied offensive-security skills.

The decision should be role-driven. A candidate targeting penetration testing, vulnerability assessment, red-team support, or hands-on security engineering may get more value from practical validation than someone using CEH mainly as a broad security credential.

Bundles can reduce combined exam cost, but only if you need both exams

EC-Council currently sells packages that combine the CEH knowledge exam and CEH Practical. The published package price differs by delivery route. A Pearson VUE knowledge-exam plus Practical bundle is listed at US$1,499, while an EC-Council remote knowledge-exam plus Practical bundle is listed at US$1,250.

A bundle is only a saving if you were already going to take both exams. Buying the practical assessment early because the package looks cheaper can increase total spending if your target job does not need it or if you have not yet built enough hands-on skill to benefit from the attempt.

Build the sequence around readiness: first confirm eligibility, then decide how you will prepare for the knowledge exam, then decide whether your role justifies the practical exam. The ethical-hacker skill path is useful for separating knowledge coverage from hands-on capability.

Retakes and expired vouchers are preventable budget risks

Exam failure is an obvious cost risk, but poor scheduling can be expensive too. EC-Council vouchers have validity periods and program rules around rescheduling, retakes, and extensions. A candidate who buys early and then postpones preparation can create a deadline that encourages rushed study or an unnecessary extension.

Purchase when the preparation plan is credible, not when enthusiasm is highest. Before buying, know when you expect to be ready, what evidence you will use to measure readiness, and how many weeks remain for unexpected work or personal interruptions.

Use realistic practice to identify gaps before the voucher becomes a countdown clock. A baseline assessment of networking, operating systems, web security, reconnaissance, vulnerability analysis, cloud, cryptography, and attack methodology can show whether the next expense should be an exam or more training.

Lab cost matters because CEH covers tools and attack workflows, not only definitions

CEH spans reconnaissance, scanning, enumeration, system attacks, malware, sniffing, social engineering, denial of service, session attacks, web servers, web applications, SQL injection, wireless security, mobile platforms, IoT and OT, cloud, and cryptography. Even for the multiple-choice exam, tool behavior and attack sequence are easier to understand when candidates have practiced them safely.

Official training may include lab access, while self-study candidates may build their own legal practice environment or use authorized cyber ranges. The cheapest study option is not useful if it produces only recognition-level knowledge. Practical skill reduces confusion among similar tools, protocols, attack phases, and defensive controls.

Internal coverage of penetration-testing tools can help identify which techniques deserve hands-on rehearsal without turning the study plan into a tool-collection exercise.

Salary claims should not be used to justify the cost automatically

A certification can improve a candidate’s signal to employers, but it does not create a guaranteed pay increase. The U.S. Bureau of Labor Statistics reports a May 2025 median annual wage of US$129,180 for information security analysts, yet that occupation includes professionals with many different credentials, experience levels, industries, and responsibilities.

CEH-specific marketing surveys can show how credential holders describe career outcomes, but self-selected certification populations are not the same as a controlled estimate of how much the credential itself raises pay. Treat salary as role context, not as a promise that the exam will repay its cost.

The related CEH career and salary coverage should be read the same way: compensation follows role, geography, experience, and technical scope more than the existence of one badge.

Calculate total cost against the role you want

A realistic CEH budget includes the eligibility application if required, the chosen exam voucher, training if needed, lab access, books or practice resources, possible retakes, and time. If you want CEH Practical, include that separately. If your employer pays for training or vouchers, the personal ROI changes dramatically.

Then compare CEH with the actual hiring requirements of your target roles. If employers repeatedly ask for vulnerability assessment, penetration testing, SOC analysis, incident response, or security administration, map the credential’s skills to those responsibilities. The page on CEH-related job responsibilities is useful for that comparison.

The goal is not to minimize spending at any cost. It is to avoid paying for components you do not need while investing enough in labs and preparation to make the certification reflect real capability. A cheaper failed attempt is more expensive than a well-timed, well-prepared path.

Employer funding can change the calculation more than any coupon. Security teams often have annual training budgets, partner credits, conference allowances, or reimbursement policies. If the organization already needs vulnerability assessment or incident-response skills, present CEH as a capability-development plan: what you will learn, how you will practice it safely, and how the knowledge will be applied after the exam.

Also separate sunk cost from readiness. Once a voucher has been purchased, candidates sometimes schedule too early because they want the money to “start working.” The better decision is based on evidence: current practice performance, lab competence, and whether major domains still produce repeated errors. Paying for an exam does not make the next available date the right date.