EC-Council CEH (v13): The Layered Cost, Exam Format, and Renewal Math

No certification on this site makes it harder to answer the simple question of what the exam costs. EC-Council layers a non-refundable application fee underneath the voucher, prices the voucher differently depending on where you sit it, and structures eligibility so the path of least resistance runs through a training bundle that costs more than the exam itself. Pulling those layers apart honestly is most of what this page is for, along with the exam format, the separate Practical exam people confuse with this one, and nine years of renewal.

Who this cert is actually for

CEH occupies an unusual position in the market: its pull comes less from what the exam tests than from where its name appears. Government agencies, defense contractors, and large enterprises with compliance-driven hiring have named CEH in job postings and workforce-qualification lists for years, so for candidates targeting those employers, the credential clears filters that cheaper alternatives do not. The realistic profile is a mid-career security professional, a few years past Security+ territory, whose target roles specifically list CEH.

Skip it if the jobs you want do not name it. At the same experience tier, CompTIA PenTest+ covers comparable offensive-security ground for $439, roughly a third of what a CEH attempt really costs once the layers stack up. CEH vs PenTest+ runs the full comparison. And if your goal is demonstrable hands-on exploitation skill rather than a keyword, OffSec’s OSCP carries far more weight with technical hiring managers, because its exam requires compromising real machines rather than answering multiple-choice questions about how one would. CEH is a compliance and screening credential first; buy it for the doors it opens, not as proof of hacking ability.

What it costs all-in

Here is the layering, piece by piece. Self-study candidates must first prove two years of documented information-security work experience and submit an eligibility application with a $100 fee that EC-Council states is non-refundable, even if the application is rejected. That $100 is not credited toward the exam. The alternative eligibility route is buying official EC-Council training, which waives the application requirement entirely, and that design is the quiet engine of the whole pricing structure: the paperwork gate makes a four-figure training bundle feel like the convenient option.

The voucher itself has two prices depending on channel. Through the ECC Exam Center, EC-Council’s own remote-proctoring platform, the voucher is $950. Through Pearson VUE, the in-person test-center network most other IT certifications use, it is $1,199. The facts panel on this page uses $1,199, the Pearson VUE list price, because VUE is the channel most candidates default to; the honest self-study floor is $1,050 if you take the remote-proctored route ($100 application plus $950 voucher) or $1,299 at a VUE center.

Training bundles are where the numbers get slippery. EC-Council’s own pages list self-paced courseware from $1,699, live online training from $2,499 to $3,499, and subscription packages near $3,999, with promotional discounts that change frequently and do not always agree between EC-Council’s certification pages and its iClass store. Treat any bundle quote as a starting point for negotiation rather than a fixed price, and remember what the bundle actually buys: eligibility paperwork relief and courseware, not a different exam. Compare the all-in figure against every other credential on the ROI Index.

The exam itself

The knowledge exam is 125 multiple-choice questions over 4 hours, accredited under ANSI National Accreditation Board’s ISO/IEC 17024 standard. There is no single fixed passing score: EC-Council uses per-form cut scores that range from 60 to 85 percent depending on the difficulty of the specific question set you draw. EC-Council does not publish a pass rate, so any percentage circulating in prep forums is a third-party guess.

One distinction matters enough to state plainly, because vendors and resumes blur it constantly. The CEH Practical is a separate credential: a 6-hour, 20-challenge, hands-on exam conducted on a live cyber range, sold separately at $550 (bundled voucher packages run $1,250 to $1,499). Passing both the knowledge exam and the Practical earns the CEH Master designation. Everything on this page describes the standard multiple-choice knowledge exam; a candidate who holds only that has not passed a hands-on test, whatever the marketing around the CEH brand implies.

Renewal math over 9 years

CEH is valid for three years, and EC-Council’s ECE (EC-Council Continuing Education) program governs renewal: 120 ECE credits per three-year cycle, earned through training, conferences, publishing, and similar activities, logged through EC-Council’s portal. Nine years is three cycles and 360 credits total.

Running alongside the credits is an annual membership fee of $80, charged every year you hold the credential. That is $240 per cycle and $720 across nine years, a fixed cost of keeping the certification alive regardless of how cheaply you gather credits. Stack that on the acquisition cost and the nine-year picture for a self-study VUE candidate is roughly $2,000 before any prep materials, which is worth knowing before you start rather than discovering one invoice at a time.

What it does for the occupation you are entering

CEH maps to the information security analyst occupation (BLS code 15-1212), the same occupation PenTest+ and Security+ serve. The panel on this page shows the current national median wage and headcount for that field from BLS data; read it as a description of the occupation, not a premium this certificate pays out. What CEH concretely buys is narrower and more specific than its marketing suggests: it is a named qualifier in a meaningful slice of government, defense, and compliance-driven postings, and inside that slice it functions as a hard screening key. Outside it, the same dollars buy more signal elsewhere. Whether the credential converts to pay depends entirely on landing one of the roles that names it, not on holding the card.

Common mistakes

Buying a bundle to skip paperwork you already qualify to file. If you have two documented years in security, eligibility costs $100 and a form. Paying $1,699 or more in training fees principally to bypass an application you would pass anyway is the single most expensive mistake in the CEH pipeline, and the pricing structure is built to encourage it.

Confusing the knowledge exam with the Practical. The $950 to $1,199 exam is multiple choice. The hands-on exam is a separate $550 credential, and claiming hands-on validation while holding only the MCQ exam is the kind of resume inflation technical interviewers check for. Know which one a job posting actually means before you spend.

Ignoring the annual fee until the invoice arrives. The $80 membership fee is due every year, not once per renewal cycle, and letting it lapse jeopardizes a credential you paid four figures to earn. Budget $240 per cycle as a fixed carrying cost, and log ECE credits as you earn them rather than reconstructing three years of activity at the deadline.