This hands-on, practitioner level certification validates your ability to operate across the full cybersecurity spectrum. Unlike theory focused credentials, it proves you can execute real tasks in real environments such as defending systems, identifying vulnerabilities, responding to incidents, and building secure infrastructure.
You complete 24 hours of hands-on assessment in our lab environment, then spend 24 hours documenting and analyzing what you did. Your work is reviewed by professionals, not algorithms. This is the foundational credential for anyone starting or advancing a cybersecurity career.
The Cyber Academy Operator pathway provides structured learning across all domains covered here. If you feel you need practice, want to learn specific topics, or just need to build foundational skills before attempting the certification, the pathway gives you full access to courses, hands-on labs, and our platform plus one certification attempt once you’re ready.
Operating Systems & Infrastructure
Linux system administration, Windows security, network configuration, and command-line operations.
Defensive Operations
SOC workflows, threat detection, incident response fundamentals, and operational cyber defense.
Offensive Security
Web application security, vulnerability identification, and hands-on exploitation.
Core Security Disciplines
Python scripting for automation, cryptography fundamentals, threat intelligence basics, and security best practices.
Phase 1: Hands-on assessment (24 hours)
You operate in Cyber Academy’s lab environment. Real scenarios across the domains: defend a network, identify vulnerabilities, configure security controls, respond to incidents, automate security tasks. Everything is logged.
Phase 2: Report & analysis (24 hours)
You document what you did, why you did it, what you found, and what it means. A human reviewer reads it. They’re looking for technical accuracy, reasoning, and evidence.
Flexible scheduling
Book your 48-hour window when it works for you.
Your hands-on work is graded based on task completion, correctness, and security best practices.
Your written analysis is reviewed by a human professional. They assess clarity, technical accuracy, and reasoning.
If you score 95% on labs but 40% on the report, you fail. Both must meet their threshold.
Retakes available through the Cyber Academy Operator pathway.
Most cybersecurity certs test knowledge. CACP tests capability. You don’t sit for multiple-choice questions, you operate systems, solve real problems, and prove you understand the implications. Your report isn’t graded by a machine but by field professionals. That’s why employers recognize it. That’s why it lasts for life.
Original price was: 99,00 €.89,00 €Current price is: 89,00 €.
No — prior completion of the 15-course pathway is not a requirement. The certification is open to penetration testers, SOC analysts, self-taught practitioners, and anyone else who believes they have the skills. However, if you are new to the field, the pathway is strongly recommended as preparation, since the exam tests full-spectrum operational capability with no hints or safety nets.
You are placed inside a live infrastructure that mirrors real enterprise networks, complete with active defenses and monitoring systems. You must identify attack paths, exploit vulnerabilities, escalate privileges, move laterally across segmented systems, and achieve defined objectives — all while evading detection. You also face defensive scenarios: analyzing SIEM alerts, investigating traffic with Wireshark, and performing memory forensics on compromised hosts. There are no hints, walkthroughs, or second chances.
After the 24-hour exam, you have a further 24 hours to submit a professional written report. It must cover your full methodology, evidence of each objective completed, attack chain reconstruction, forensic findings, and remediation recommendations. The report is evaluated to the same standard used in real penetration testing and incident response engagements — not just as a summary, but as a deliverable you would hand to a client. Both phases must be passed to earn certification.
Most certifications test either offense or defense — not both. CACP is a full-spectrum assessment: you are evaluated on exploitation and evasion alongside detection, forensics, and incident response in the same exam. There are no multiple-choice questions at any stage. Because the environment is live and changes, there is no way to prepare through memorization — only genuine capability gets you through. Passing requires you to prove you can execute under pressure and document your work to a professional standard.
Yes, retakes are available. Each additional attempt is available for purchase separately. We recommend reviewing your report feedback carefully before reattempting, as the report phase is a common area where candidates fall short even after strong technical performance.
