HTB CJCA Study Plan 2026: Exam Format, Cost and How to Prepare

The HTB CJCA (Hack The Box Certified Junior Cybersecurity Associate) is HTB's entry-level practical certification. You earn the right to sit it by finishing the Junior Cybersecurity Analyst job-role path on HTB Academy, then you prove the skills in a hands-on exam rather than a multiple-choice test. This guide covers what HTB confirms about the exam, the figures it does not publish, and a four-week plan.

What the HTB CJCA is

HTB announced the CJCA and its Junior Cybersecurity Analyst path on 23 July 2025. HTB says the certification is aimed at complete beginners, students, IT staff moving into security, and new analyst hires. It describes the content as aligned with NIST and MITRE ATT&CK.

The exam is practical. Third-party write-ups describe a mix of offensive work and SIEM alert validation against an enterprise-style network, which fits the path's split between attack and detection. HTB's own pages describe the skills rather than the scenario, so treat the exact exam layout as something to confirm on HTB Academy before you book.

Exam Tip: The CJCA tests both sides. The path covers reconnaissance, exploitation and privilege escalation as well as SIEM monitoring, log analysis and incident response. Do not skip the defensive modules because you came for the hacking.

HTB CJCA exam format, cost and what HTB does not publish

Two points on cost. HTB bundles a CJCA voucher with the Silver Annual Academy plan and with business plans, and annual plans bought after 1 September 2025 carry an extra CJCA voucher. Half the path's modules sit in Tier 0, which is free. Most of the "HTB CJCA price" answers you will find elsewhere quote a subscription, not a per-exam fee, so check the current Silver Annual price on HTB Academy rather than trusting a blog, including this one.

HTB also lets you retake only if you submitted a report on the first attempt, so submit one even if you think you fell short.

Is the HTB CJCA worth it?

It is worth it if you want proof of practical skill and you are early in your career. It is a weaker choice if an employer screens for a named exam such as Security+, because recruiters search for those names far more often.

The CJCA suits you if:

• you want a hands-on credential with both red and blue content
• you are weighing a move towards the HTB CPTS or CDSA later
• you learn better in labs than from video lectures

It is the wrong first step if your target job list asks for CompTIA in the requirements. In that case study for the exam they name, and treat the CJCA as an optional extra.

How the CJCA fits into the HTB ladder

The CJCA is the shallow end. The CPTS and CDSA exams run longer and expect much more depth, so use the CJCA to find out which side you prefer before committing weeks to either.

A four-week HTB CJCA study plan

This plan assumes about ten hours a week and no prior security work. HTB does not publish a module count for the path in the pages I checked, so the plan is organised by topic, not by module number.

Week 1: foundations

Work through the general modules: Linux, Windows, networking and web basics. Build the habit of keeping notes in a structured way, because you will need them when you write the report. If you already work in IT, move through this week fast.

Week 2: offensive modules

Cover enumeration, exploitation and privilege escalation. After each module, repeat the technique on a free box or lab with no walkthrough open. HTB's CJCA Preparation Track on HTB Labs contains Machines that cover enumeration, exploitation, privilege escalation and basic security analysis, so use it as your rehearsal.

Week 3: defensive modules

Cover SIEM alerts, log analysis and incident response. Practise deciding whether an alert is a true or false positive and writing down why. This is the week candidates underestimate.

Week 4: rehearse and write

Run a full mock attempt against the Preparation Track with a timer. Then write a report from your notes as if a client will read it, with a finding, evidence, impact and fix for each issue. The report is part of what you are assessed on, so it deserves real practice time.

Exam Tip: Take screenshots and copy commands as you go, not afterwards. Reconstructing evidence on day five of the exam window is where marks are lost.

Where a CompTIA course fits

CertCrush has no HTB CJCA course, and nothing here claims one prepares you for the CJCA itself. If you want a structured exam-based route into offensive work, the CompTIA PenTest+ course is the closest fit on offence. If the defensive modules appeal more, the CompTIA CySA+ CS0-004 course covers the analyst side. Both are separate certifications with their own objectives.

Frequently Asked Questions

Are HTB certifications worth it?

They are respected for being practical, and a report-based exam shows you can do the work. They carry less weight than CompTIA or ISC2 names in job-board keyword filters, so match the choice to the roles you are applying for.

How much does it cost to get certified with Hack The Box?

HTB does not publish a standalone CJCA exam price on the pages I could verify. It includes a CJCA voucher with the Silver Annual plan and with business plans, so for most individuals the cost is the subscription. Check HTB Academy for the current price.

What is the best certification for hackers?

There is no single best. For beginners, the CJCA and eJPT are common starting points, with the HTB CPTS as a common next step for penetration testing.

What is the HTB CJCA pass mark?

HTB did not state one on any official page I could verify. Treat figures quoted by other sites as unconfirmed.

Ready to Start Practising?

If you are building towards a first security role, create a free CertCrush account and work through the exam-style questions alongside your lab time.