OSWA is OffSec’s foundational web application exam. It tests black-box web testing: finding and exploiting common vulnerabilities without the source code. Our live online bootcamp prepares you for it in UAE time.
Fee for UAE learners
| What you pay for | Price |
|---|---|
| Our live online exam-prep training with an instructor | AED 3,675 (excluding 5% VAT) |
| OffSec course and exam | Bought directly from OffSec at OffSec’s current price |
We’re not an OffSec partner. This is our own independent exam-prep training: we teach, coach and run practice, and you buy the official course access and exam voucher from OffSec yourself.
How the online batches work
Classes are live and instructor-led, online, and scheduled in UAE time (the UAE is 1 hour 30 minutes behind India). You join from anywhere in the UAE: Dubai, Abu Dhabi, Sharjah or elsewhere. Our Dubai office handles UAE enquiries and enrolment. We share the next batch dates and timings when you get in touch.
What you’ll learn
- Cross-site scripting and how to show its real impact
- SQL injection, from detection to data extraction
- Server-side template injection, server-side request forgery and XML external entities
- Command injection and directory traversal
- A repeatable method for testing a web application, and writing it up
The full module list is on our main OSWA (WEB-200) course page.
The exam
The OSWA exam is a practical test of just under 24 hours, followed by 24 hours to submit your report. You book and pay for the exam with OffSec.
Who it suits in the UAE
Junior web application penetration testers, QA and development staff moving into security, and bug bounty hunters who want a recognised credential.
Ask about the next OSWA (WEB-200) batch
Tell us your background and when you’d like to start. We’ll send the next batch dates in UAE time and answer any questions about the fee.
Ask about the next batch WhatsApp us All UAE courses and fees or call +971 55 785 7891 (Dubai office)
Frequently asked questions
Does the fee include the OSWA exam?
No. We’re not an OffSec partner, so you buy the WEB-200 course and exam directly from OffSec at OffSec’s current price. Our AED 3,675 fee is for our coaching.
Is OSWA a good first certification?
If you want to specialise in web testing, yes. If you want general penetration testing, OSCP or CEH is the broader start.
Do I need programming skills?
Basic scripting helps, but OSWA is mostly about understanding how web applications work and break.
Is VAT included in the price?
No. All our UAE prices exclude 5% UAE VAT, which is added to your invoice.