Correction

Correction: Offensive Security Certified Expert (OSCE3) Path: Worth the $5,000 Investment in 2026?

Corrected by Melik Can Sariyer · Software Engineer and Linux OS Developer

Melik Can Sariyer found something wrong, outdated, or unsupported on this page and proposed a fix. The publisher accepted the correction.

Role
Correction
Publisher
Pass4Sure
Status
Accepted
Date
11 July 2026

The exact change

Before

"OSCE3 is the credential that separates the senior penetration tester from the operator..." -- Mati Aharoni, founder of Offensive Security and creator of Kali Linux || A penetration tester, Anh, finished OSCP in 2022, OSWE in late 2022, OSEP in 2023, and OSED in 2024... Her base salary moved from $112,000... to $168,000... A bug bounty hunter, Idris, completed OSWE and stopped there... his bounty income exceeded $200,000 from chained source-code-review findings against companies including Shopify, GitLab, and Slack.

After

OSCE3 is the credential that separates the senior penetration tester from the operator... (unattributed, generalized). || A typical path for a penetration tester might involve finishing OSCP, then OSWE, then OSEP, then OSED over roughly 18 to 24 months... Some bug bounty hunters complete OSWE and stop there... It is possible to build a strong bounty income from chained source-code-review findings with just the OSWE skill set. (generalized, named individuals, exact salary figures, and specific real-company bounty targets removed).

Suggested change

De-attributed 1 fabricated named-founder quote and generalized 2 fabricated named-individual anecdotes to plain prose, removing unverifiable real-company references.

Why this is better

De-attributed a fabricated quote attributed to Mati Aharoni (real OffSec founder, no locatable source), and generalized two fabricated named-individual anecdotes (Anh, Idris) with precise salary/income figures, removing the specific real-company names (Shopify, GitLab, Slack) used as unverifiable bounty targets. Note: separate unverified quotes/claims attributed to Heath Adams, Bruce Schneier, and Ed Skoudis later in the same article were not covered by this item's summary and were left untouched for a future pass.

How this record is verified

  • The contribution is tied to a real, identified contributor, not an anonymous byline.
  • It counts only because the publisher, Pass4Sure, accepted it. Self-claimed work earns nothing.
  • It is recorded against a specific page and cannot be bought or edited after the fact.
See the full page record View the published page

All of Melik Can Sariyer's contributions →