BTL2 — Blue Team Level 2
The senior counterpart to BTL1, assessed over up to 72 hours of practical work plus a written report that is hand-graded against a 70% pass mark.
Type: CertificationWorking practitioners
Offered by Centri (formerly Security Blue Team)
The facts
- Cost
- £1,999.00, including five months of material access. Priced in pounds only.Figure read 2026-09-12 from www.centri.org/certifications/blue-team-level-2
- Prerequisites
- No formal prerequisites. The provider recommends two or more years of experience and completing BTL1 first.
- Format
- Up to 72 hours to complete a practical assessment and submit a written report, hand-graded, 70% to pass, with a distinction at 90% or above.
- Length
- Five months of material access; the assessment window is up to 72 hours.
- Renewal
- None. The provider states you become Blue Team Level 2 certified for life.
- Accreditation
- No accreditation body is named.
- Who it suits
- An experienced defender who already holds BTL1 and wants a report-graded senior credential without a recurring renewal bill.
- Audience
- Working practitioners
- Official page
- www.centri.org/certifications/blue-team-level-2
Strengths
- The written report is graded, which is rare and directly relevant — a forensic examiner's deliverable IS a report.
- Lifetime certification with no renewal fee.
- 72 hours of practical work is a serious assessment by any standard in this field.
Limitations
- £1,999 is a large sum for a credential with no third-party accreditation.
- Hand-grading means turnaround and consistency depend on the provider's capacity.
- Blue-team rather than forensics-specific, so it is not a substitute for GCFA, CFCE or CCE if examination work is the goal.
- Sterling pricing and a recent provider rename both add friction to verifying current terms.
Sources
Costs, prerequisites and exam formats in this field change often, and several providers price by region, cohort or employer agreement. Every figure on this page carries the date it was read and a link to the page it was read from. Confirm current terms with the provider before you spend anything.