The first broad penetration testing certification to put a graded AI/LLM target in the exam.
In the last eight years we’ve served over 8 million of you. From getting into cybersecurity, your first certification, landing your first role, and also to helping you upskill from that point.
Our core thesis from day one has been “learning by doing” and we’re sticking to that promise we made to you. But the work you’re being asked to do has changed.
A modern Pentest can now span a web app, an LLM feature, containers, cloud infrastructure, and Active Directory in the same engagement. You are expected to move across all of it, connect the findings, and produce a report someone can act on.
Unfortunately, many certifications have not kept pace. Cloud may appear in the courseware without being meaningfully tested, while AI is often missing altogether. PT2 is how we’re looking to fill that gap. We wanted an exam that looked like a real day on the job.
PT2 is our advanced penetration testing certification. It tests whether you can take a modern engagement from start to finish:
find your own path in → chain access across machines → work across multiple attack surfaces → and deliver a professional report.
Across 72 hours, you’ll work through ten machines and multiple live attack surfaces spanning web, AI and LLM exploitation, containers, cloud, and Active Directory.
There is no prescribed route to follow, and getting the flags is only part of the job.
Meet TryHackMe PT2
PT2 is TryHackMe’s advanced penetration testing certification. It assesses whether a single person can take a modern scoped engagement end to end.
The exam
- 72 hours, hands-on and report combined.
- 10 machines across two independent sections that run in the same window and compete for your time from the first minute.
- 740 / 1000 to pass.
- Report mandatory. No report is an automatic fail, regardless of how many flags you capture.
- 3-year credential, with one free retake included.
Note: Both sections are available during the same exam window.
What makes PT2 different
A graded AI section, inside a pentest exam
We see that broad pentest certs don’t test AI, and the dedicated AI exams only test AI. That’s why we’ve created PT2, the first general penetration testing certification to grade AI , container breakout alongside cloud and Active Directory in a single engagement.
Multiple surfaces at the same time
Both sections run inside the same 72 hours. Most advanced exams are one engagement worked in sequence. But here you’re deciding where your time goes and when to switch surfaces, the way you would on a real job.
Nothing is handed to you (we trust you’re capable…)
You have no guided hints or prescribed route until you’ve broken out of the container and pivoted. And partial chains earn nothing.
The report carries 30% of the mark, graded finding by finding
Every flag splits three ways;
- flag capture 70%,
- attack description 20%,
- remediation 10%.
Capture every flag on all ten machines and you land 700 against a 740 pass mark. So flags alone can’t get you there (sorry…). You have to explain the attack and recommend the fix, which is how a client judges an engagement in the first place.
Who is PT2 for?
We built PT2 for three groups:
- Working penetration testers who already have practical experience but want stronger evidence that they can take ownership of a wider scope.
- PT1 and WEB1 holders. You already know how our exams work. This is the step up to advanced practitioner without leaving the platform you trained on.
- Single-surface specialists. You’re deep in AD or web and have no evidence on the rest. PT2 is proof you can run the surfaces outside your speciality, and a graded report that stands as portfolio evidence.
If you can already do one surface well and want a credential that says you can hold all of them, that’s the point of PT2.
How to prepare for PT2 (from PT1 to PT2)
For TryHackMe learners, PT2 also creates a clearer progression from the foundations into more advanced work.
While PT1 focuses on proving practical penetration-testing skills, we’ve built PT2 to raise the level of ownership.
We recommend preparation through:
- TryHackMe | Web Application Pentesting Training
- Authentication
- Advanced Server-Side Attacks
- TryHackMe | Web Application Red Teaming Training
- Attacking LLMs
- Chaining Vulnerabilities
- TryHackMe | DevSecOps Training
- Container Security
- TryHackMe | Compromising Active Directory Training
30% off PT2 from 18-29 September 2026 (including the PT1 + PT2 bundle) with code BREACHALL. The first 50 buyers get a free seat on our live class, Building and Breaking Active Directory Advanced.
Join our live class, Breaking Active Directory: A Look at Today’s Attack Surface. Hosted by TryHackMe Content Engineers Stefan Apostol and Tinus Green on 13th October. The class will walk through building a five-forest Active Directory environment by hand before breaking the attack paths inside it.
Ayomide Joseph A.