What is OffSec Proving Grounds?
OffSec Proving Grounds (PG) is the official practice platform from Offensive Security — the same company that creates OSCP, Kali Linux, and the Exploit Database. For candidates targeting the OffSec Proving Grounds OSCP path, the platform splits into two tiers: PG Play (free, community-contributed machines) and PG Practice (paid, officially curated machines with official write-ups). For serious candidates, PG Practice is the closest legal simulation of the actual exam environment available anywhere. When OffSec says these machines mirror the exam experience, they mean it literally — the same team builds both.
Is This Right for You?
This is for you if...
- You’re actively preparing for OSCP and want the most accurate practice available
- You want official OffSec write-ups to study methodology, not just solutions
- You need machines that mirror OSCP difficulty ratings (Easy, Medium, Hard)
- You want a free starting option — PG Play gives 3 hours daily at no cost
- You’re practicing for PenTest+ or CPENT in realistic pentest environments
This is NOT for you if...
- You’re brand new to security — TryHackMe is the right starting point
- You want the largest machine library — HTB has more volume
- You need community walkthroughs — PG has fewer than HTB’s retired machine ecosystem
Platform Overview
| Feature | PG Play (Free) | PG Practice (Paid) |
|---|---|---|
|
Machine count |
50+ community machines |
60+ officially curated machines |
|
Daily access limit |
3 hours free per day |
Unlimited |
|
Official write-ups |
No |
Yes — step-by-step solutions |
|
Difficulty ratings |
Community rated |
Officially rated — Easy / Medium / Hard |
|
OSCP alignment |
Partial |
Direct — same team builds both |
Platform Overview
| Tier | Price | Includes |
|---|---|---|
|
PG Play |
Free |
3 hours/day, community machines, no write-ups |
|
Learn One |
$2,499/year |
PEN-200 (OSCP course) + 1 exam attempt + PG Practice unlimited |
|
Learn Unlimited |
$5,499/year |
All OffSec courses + unlimited exam attempts + PG Practice |
OffSec Proving Grounds OSCP Practice is only available as part of Learn One or Learn Unlimited — not sold standalone. If you’re enrolled in PEN-200, PG Practice access is included.
Certification Prep — What PG Helps With
| Certification | How PG Helps | Recommended PG Content |
|---|---|---|
|
Virtualization software |
VirtualBox (free) or VMware Workstation Pro |
$0 / $199 |
|
Attacker machine |
Kali Linux VM or native install |
$0 |
|
Network mode |
Host-only or NAT network (VirtualBox) |
$0 |
|
RAM |
8GB minimum, 16GB recommended |
Hardware cost |
Recommended Resources
- Official PG page and account creation
- TJ Null’s OSCP prep list — curated PG and HTB machines for OSCP prep
- IppSec (YouTube) — methodology videos that apply directly to PG machine solving
- HackTricks — technique reference for every stage of a PG machine
── SecVerse Marketplace — Resources ──
Which Platform is Right for You?
OffSec Proving Grounds OSCP is the right choice when OSCP is your target. Here is how it compares to similar practice platforms:
| If you want... | Best Choice |
|---|---|
|
You want the largest machine library and community |
Hack The Box — 500+ machines, Pro Labs, global ranking |
|
You want completely free offline machines |
VulnHub — no subscription, downloadable VMs |
|
You want guided beginner-friendly practice |
TryHackMe — structured paths, in-browser machines |
|
You want the closest possible simulation to the OSCP exam |
OffSec Proving Grounds OSCP — this is the right choice |
How to Get Started
To start with OffSec Proving Grounds OSCP apply the following steps :
- Create a free account and start PG Play. Start with an Easy-rated PG Play machine. You have 3 hours of daily access — use it deliberately, not casually.
- Work machines without Metasploit first. OSCP restricts Metasploit on exam machines. Practice that restriction from the start. Try every exploit manually before reaching for automated tools.
- Use official write-ups as methodology study, not answer keys. Read write-ups as methodology documents — why did the tester enumerate that service? The reasoning matters more than the commands.
📌 Note: The information on this page — including certification details, exam codes, pricing, and salary ranges — is regularly reviewed and updated to reflect the latest data from official sources. Always verify current details directly with the relevant certification body or platform before making any decisions.
Community & Support
── OffSec Communities ──
Related Articles
Networking for Cybersecurity Part 4 — Firewalls, VPNs, and How Traffic Gets Controlled
Firewalls, VPNs, and traffic control are the mechanisms that determine what enters, leaves, and moves through a network. Understanding how they work — and how they fail — is essential for both offensive and defensive security. This article covers the fundamentals every cybersecurity professional must know.
Networking for Cybersecurity Part 3 — Protocols You Must Know (HTTP, SSH, FTP, SMTP)
Protocols are the rules that every network communication follows. HTTP, HTTPS, SSH, FTP, SMTP — every one of them has a specific vulnerability profile. This article breaks down the protocols every cybersecurity professional must know: what each does, how it works, and exactly where attackers look for weaknesses.
Networking for Cybersecurity Part 2 — IP Addressing, Subnets, and DNS
Before you can attack a network or defend one, you need to understand how data actually moves. Not in theory — in practice. This article breaks down the TCP/IP model and the OSI model: what they are, what each layer does, and exactly why every cybersecurity professional must understand them.
