CEH v13 Certification 2026: How the Exam Works, What You Learn and How to Prepare
CEH v13 Certification is EC-Council’s current Certified Ethical Hacker credential for professionals developing ethical-hacking and cybersecurity skills. The program covers reconnaissance, scanning, enumeration, vulnerability analysis, system hacking, web applications, wireless networks, cloud computing, IoT, cryptography, and AI-assisted security techniques. The standard certification exam contains 125 multiple-choice questions with a 4-hour time limit. Candidates can qualify through approved EC-Council training or, if eligible, through a professional-experience-based self-study route.
Why Is CEH v13 Different From Earlier CEH Versions?
The biggest change introduced with Certified Ethical Hacker v13 is the integration of artificial intelligence into the ethical-hacking learning process.
Rather than treating AI as a standalone topic, CEH v13 introduces AI-supported approaches across different stages of ethical hacking.
The course still teaches the fundamental attack methodology expected from CEH candidates, including:
Reconnaissance
Network scanning
Enumeration
Vulnerability identification
System attacks
Web application security
Wireless attacks
Cloud security
IoT security
Defensive countermeasures
This makes CEH v13 useful for candidates who want broad exposure to offensive-security concepts without immediately entering a highly specialized penetration-testing certification.
Who Provides the CEH Certification?
EC-Council is the organization that develops and awards the Certified Ethical Hacker certification.
Therefore, the answer to “What organization offers the CEH certification exam?” is EC-Council.
EC-Council provides:
Official CEH curriculum
Certification examinations
Online training
Instructor-led programs
Authorized Training Center programs
Hands-on labs
Practical assessments
Candidates should make sure any third-party CEH certification training they choose is aligned with the current CEH v13 curriculum rather than an older version.
What Is the Latest CEH Version in 2026?
The current CEH generation is CEH v13, which EC-Council released on September 23, 2024.
You may also see the program promoted as CEH AI because artificial intelligence is a major part of the updated learning experience.
The current curriculum includes:
20 modules
221 hands-on labs
550+ attack techniques
Exposure to thousands of cybersecurity tools
AI-supported ethical-hacking techniques
Cyber-range activities
Candidates searching for the latest CEH version should therefore ensure that their books, courses, practice questions, and training materials are aligned with CEH v13 rather than previous CEH releases.
CEH v13 Exam Format
The main EC-Council CEH exam is a knowledge-based assessment.
Exam Feature | CEH v13 |
Certification | Certified Ethical Hacker |
Certification body | EC-Council |
Exam questions | 125 |
Question format | Multiple choice |
Exam duration | 4 hours |
Cut score | Varies by exam form |
Current version | CEH v13 |
Practical exam required for standard CEH? | No |
Optional practical exam | Yes |
Candidates should be cautious when searching for a single CEH passing percentage.
EC-Council uses a variable cut score rather than one permanent passing mark for every exam form. Depending on question difficulty, the required score can vary.
What Skills Does CEH v13 Cover?
The CEH syllabus is intentionally broad.
Instead of focusing exclusively on one area such as web penetration testing or Active Directory, CEH introduces candidates to multiple stages of ethical hacking.
1. Reconnaissance and Information Gathering
Candidates learn how security professionals collect information about authorized targets before deeper testing begins.
Topics include:
Footprinting
Search techniques
Network information
DNS information
Organizational intelligence
Attack-surface identification
2. Scanning and Enumeration
This area moves from passive information collection into active discovery.
Candidates study:
Host discovery
Port scanning
Service identification
Network mapping
Enumeration
Vulnerability discovery
Understanding the difference between reconnaissance, scanning, and enumeration is particularly important because these concepts regularly overlap in exam scenarios.
3. System Security and Hacking Concepts
CEH also covers techniques attackers may use after identifying exploitable systems.
Candidates learn about:
Authentication weaknesses
Password attacks
Privilege escalation
Malware
Maintaining access
Evidence and trace concepts
Defensive countermeasures
4. Network and Perimeter Security
Network security is one of the most heavily tested areas of the CEH exam.
Topics can include:
Network attacks
Firewalls
IDS/IPS concepts
Sniffing
Session hijacking
Denial-of-service attacks
Network defense
5. Web Application Security
Candidates need to understand common application attack techniques including:
Web server attacks
Web application weaknesses
Authentication attacks
Session-related vulnerabilities
SQL injection
Security controls
6. Wireless, Mobile, IoT and Cloud Security
CEH v13 also introduces candidates to attack and defense concepts involving:
Wireless networks
Mobile platforms
IoT devices
Operational technology
Cloud environments
This breadth is one reason CEH is frequently used as a foundation before moving into a more specialized offensive-security path.
CEH v13 Course Modules
The Certified Ethical Hacker training course currently contains 20 modules:
# | CEH v13 Module |
1 | Introduction to Ethical Hacking |
2 | Footprinting and Reconnaissance |
3 | Scanning Networks |
4 | Enumeration |
5 | Vulnerability Analysis |
6 | System Hacking |
7 | Malware Threats |
8 | Sniffing |
9 | Social Engineering |
10 | Denial-of-Service |
11 | Session Hijacking |
12 | Evading IDS, Firewalls and Honeypots |
13 | Hacking Web Servers |
14 | Hacking Web Applications |
15 | SQL Injection |
16 | Hacking Wireless Networks |
17 | Hacking Mobile Platforms |
18 | IoT Hacking |
19 | Cloud Computing |
20 | Cryptography |
Candidates should not treat these 20 modules as 20 equally weighted exam areas.
The certification exam follows its own blueprint.
Which CEH Exam Domains Matter Most?
The exam blueprint gives some domains much greater emphasis than others.
CEH Exam Area | Approximate Weight |
Information Security and Ethical Hacking Overview | 6% |
Reconnaissance Techniques | 17% |
System Hacking Phases and Attack Techniques | 15% |
Network and Perimeter Hacking | 24% |
Web Application Hacking | 14% |
Wireless Network Hacking | 5% |
Mobile Platform, IoT and OT Hacking | 10% |
Cloud Computing | 5% |
Cryptography | 5% |
The key preparation lesson is simple: do not distribute study time equally.
Network and perimeter security, reconnaissance, system hacking, and web application security represent particularly important areas.
How Much Is the CEH v13 Exam?
The CEH v13 exam cost depends on how the candidate chooses to take the examination.
Common current voucher options include:
CEH Option | Approximate Listed Cost |
EC-Council Remote Proctored Exam Voucher | $950 |
Pearson VUE CEH Voucher | $1,199 |
Self-study Eligibility Application | $100 |
The ethical hacker certification cost should not be calculated from the exam voucher alone.
A candidate may also pay for:
Official courseware
Training
Hands-on laboratories
Practice examinations
Bootcamps
Retakes
Eligibility processing
Additional study resources
This means two CEH candidates may have very different total certification budgets.
Who Is Eligible for CEH v13?
There are two major routes.
Route 1: Approved CEH Training
Candidates who complete official EC-Council training or eligible training through an authorized partner can qualify for the CEH examination through the training route.
This can be useful for candidates who prefer a structured CEH bootcamp, instructor support, courseware, and labs.
Route 2: Professional Experience / Self-Study
Professionals who do not complete official training can apply through EC-Council's eligibility process.
This route generally requires two years of information-security-related professional experience.
Candidates using this approach also need to complete the applicable eligibility application.
This path is more appropriate for professionals who already possess substantial cybersecurity knowledge and prefer independent study.
CEH Knowledge Exam or CEH Practical: What Is the Difference?
This distinction is important.
CEH Certification Exam
The standard exam contains:
125 questions
Multiple-choice format
4-hour duration
Passing this examination earns the standard Certified Ethical Hacker certification.
CEH Practical
The practical assessment is different.
It includes:
20 practical challenges
6-hour examination
Hands-on cyber-range tasks
The CEH Practical is not required to earn standard CEH certification.
Candidates pursuing the advanced CEH Master designation use the practical assessment to demonstrate hands-on capability in addition to their CEH knowledge.
Is CEH v13 a Practical Cybersecurity Certification?
CEH sits between purely theoretical security education and fully performance-based penetration-testing certifications.
The CEH course includes extensive hands-on labs, but the main certification examination is still multiple choice.
This matters when selecting certifications.
A candidate can understand:
What enumeration is
Why a particular scan is performed
Which attack is associated with a scenario
Which countermeasure should stop an attack
without necessarily having the same practical exploitation ability as someone trained extensively through performance-based penetration-testing labs.
For this reason, CEH preparation should combine exam study with authorized hands-on practice.
CEH vs OSCP+: Which Is Better for Your Career?
The correct answer depends on the type of skills you need.
Area | CEH v13 | OSCP+ |
Learning scope | Broad | Specialized |
Primary exam | Multiple choice | Hands-on |
Ethical hacking fundamentals | Strong | Assumed/advanced |
Penetration testing depth | Moderate | High |
Active Directory | Covered | Major practical component |
Practical exploitation | Training/labs + optional practical | Core exam requirement |
Beginner accessibility | Higher | Lower |
Reporting requirement | Not central to knowledge exam | Important |
If your goal is broad security knowledge, CEH v13 may make more sense first.
If your target is specifically hands-on penetration testing, OSCP+ provides deeper performance-based testing.
Can You Take CEH and OSCP?
Yes. The two certifications do not need to be treated as competitors.
A structured path might look like:
Networking fundamentals → Security fundamentals → CEH v13 → extensive labs → OSCP+
This sequence lets a learner build broad ethical-hacking knowledge first and then move into deeper practical exploitation.
Experienced penetration testers may not need that exact progression, so certification choices should always be based on existing skills rather than simply following a list.
How Should You Prepare for CEH v13?
Use a preparation plan based on understanding, practice, and assessment.
Step 1: Read the Current Blueprint
Know what EC-Council actually tests before beginning intensive study.
Step 2: Master Networking Basics
Be comfortable with:
TCP/IP
DNS
HTTP/HTTPS
Common ports
Routing basics
Firewalls
Windows
Linux
Without these fundamentals, many CEH topics become memorization exercises.
Step 3: Study by Attack Phase
Connect individual concepts to the broader process:
Reconnaissance → Scanning → Enumeration → Vulnerability Analysis → Exploitation → Post-Exploitation
This creates stronger conceptual understanding than memorizing hundreds of unrelated tool names.
Step 4: Practice in Authorized Labs
Use legitimate lab environments for:
Scanning
Enumeration
Vulnerability assessment
Web application testing
Traffic analysis
Wireless-security concepts
System-security exercises
Step 5: Use Practice Questions Properly
Do not simply count correct answers.
For every wrong answer, determine:
What concept you misunderstood
Why your selected answer was incorrect
What clue pointed toward the correct answer
Step 6: Complete Timed Mock Exams
Practice answering 125 questions within four hours.
Timed testing helps expose both knowledge gaps and poor exam pacing.
What Should You Look for in the Best CEH Course?
Whether you search for CEH training online, CEH classes, CEH course near me, or a CEH bootcamp, evaluate the program on substance.
A good program should offer:
CEH v13-aligned content
All 20 modules
Hands-on labs
Current exam blueprint coverage
Scenario-based practice
Mock examinations
Detailed explanations
Instructor or mentor support
Regular performance assessment
Avoid selecting a course only because it promises a very large number of practice questions.
Quality explanations and practical understanding usually provide more value than question volume alone.
Who Benefits Most From CEH v13 Certification?
CEH v13 may be useful for professionals pursuing roles such as:
Ethical Hacker
Cybersecurity Analyst
SOC Analyst
Vulnerability Analyst
Security Engineer
Security Consultant
Junior Penetration Tester
Cyber Defense Analyst
It can also benefit network administrators, system administrators, and IT professionals who need to understand attacker techniques as part of their defensive responsibilities.
Is CEH v13 Certification Worth Pursuing in 2026?
CEH v13 Certification is strongest as a broad ethical-hacking credential rather than a narrowly focused penetration-testing qualification.
It introduces candidates to reconnaissance, scanning, enumeration, system attacks, networks, web applications, wireless security, cloud, mobile platforms, IoT, cryptography, and defensive concepts within one structured program.
Before choosing a Certified Ethical Hacker training course, identify your goal. If you need broad ethical-hacking knowledge and a recognized certification pathway, CEH v13 can fit well. If you already possess those fundamentals and your priority is advanced hands-on exploitation, you may be ready for a more specialized practical certification.
Whichever route you choose, verify that your CEH training online or classroom program follows the current CEH v13 curriculum, study according to the exam blueprint, and use authorized labs to turn theoretical knowledge into practical security skills.
Comments