HTB Certified Defensive Security Analyst
Hack The Box's defensive analyst credential, bundling fifteen modules of coursework with an included exam, aimed at the SOC analyst role rather than at forensic examination.
Type: CertificationWorking practitionersCareer changers
Offered by Hack The Box Academy
The facts
- Cost
- $490, described on the certification page as covering fifteen modules with the exam included.Figure read 2026-09-12 from academy.hackthebox.com/preview/certifications/htb-certified-defensive-security-analyst
- Prerequisites
- None stated.
- Format
- Fifteen Academy modules followed by an included examination. Hack The Box's certification exams are practical; the precise structure is set out in the exam documentation rather than on the preview page.
- Length
- Self-paced through the modules, then the exam.
- Renewal
- No renewal or recertification requirement is published for this entry.
- Accreditation
- No accreditation body is named.
- Who it suits
- Someone heading for a SOC analyst role who wants one practical credential at a moderate price, with forensics as part of the job rather than the whole of it.
- Audience
- Working practitioners · Career changers
Strengths
- $490 including both the coursework and the exam is competitive for a practical credential.
- Hack The Box has broad brand recognition, which helps with recruiters who have heard of it even if they have not heard of BTL1.
- Coursework and exam in one purchase, so there is no surprise second invoice.
Limitations
- It is framed as a SOC and defensive analyst credential. How much forensics is in the module list is not clear from the pages we could read — treat forensics coverage as unconfirmed.
- No third-party accreditation.
- Hack The Box's culture is offensive-security first, and its defensive content is younger and less established.
- Not a forensic examiner credential, and should not be presented as one.
Sources
Costs, prerequisites and exam formats in this field change often, and several providers price by region, cohort or employer agreement. Every figure on this page carries the date it was read and a link to the page it was read from. Confirm current terms with the provider before you spend anything.