Hack The Box Academy
Category: Ethical hacking / cybersecurity training & certifications · Price: Free tier; certification packages from ~$490 up to ~$1,260 · Status: Pre-use / first-look (not yet completed a path)
Platform · Sign up via my referral link (disclosure: this is a referral link)
What it is
HTB Academy is Hack The Box’s structured training arm, separate from the open-ended CTF-style Hack The Box labs. It organizes 500+ courses into General, Offensive, and Defensive tracks, with role-oriented “job paths” and skill paths that build toward vendor certifications: HTB Certified Junior Cybersecurity Associate (CJCA), Certified Penetration Testing Specialist (CPTS), Certified Web Exploitation Specialist/Expert (CWES/CWEE), Certified Defensive Security Analyst (CDSA), Certified Active Directory Pentesting Expert (CADE), Certified Wi-Fi Pentesting Expert (CWPE), and Certified Offensive AI Expert (COAE). Labs run in-browser via Pwnbox, an embedded pentesting VM, so there’s no local lab environment to stand up. There’s a free tier for limited access, with paid subscriptions and per-certification exam packages on top.
Why it’s on my radar
For systems engineering and infrastructure work, understanding offensive security (how systems actually get broken into) informs better defensive design — and a hands-on, lab-based platform beats reading a textbook for that kind of skill. CPTS in particular has a solid reputation as a practical, exam-based alternative to more theory-heavy certifications, and the job-path structure makes it easier to target a specific outcome (e.g. web exploitation vs. Active Directory) instead of a generic “learn hacking” course.
Things to verify before I’d fully recommend it
- Time-to-certification — the paths are hands-on and thorough, which also means they’re a real time investment; worth sizing that against the free-tier preview before buying a certification package.
- Exam difficulty and retake policy — practical, VM-based exams (like CPTS) can vary in pass rate and require real lab time to prepare for, not just course completion.
- Value of paid tier vs. free tier for the amount of content actually needed to reach a given certification.
- How certifications are received by employers in your specific field — respected in offensive security circles, but worth confirming relevance for your target roles.
Verdict: Pending. Curriculum structure and certification lineup look strong on paper, but I’m holding off on a rating until I’ve actually worked through a path and sat an exam. I’ll update this entry with real time and difficulty notes once that’s done.