Am I starting too early with CWES? Need honest opinions.
I’m just a student with basic penetration testing and SOC analysis hands-on experience. I know some basic web pentesting too. Recently I’ve become obsessed with the HTB certifications—especially CWES—because it also helps with bug bounty skills, and I really want to start my BB journey.
I’m planning to use the HTB Student Plan and follow the full Web Pentesting Job Path from start to finish.
But here’s my real doubt:
Am I too early for CWES? I noticed many CWES holders already have big certs like OSCP, CPTS, or EWPTv2. So I’m wondering… if I study every part of the HTB learning path properly and solve CTFs based on each topic, can I crack CWES as my first certification?
Also, how long would it realistically take to reach CWES level if I study around 3 hours per day?
Any advice from people who’ve taken the exam or followed a similar path would help a lot.
Thanks in advance!
Posted Nov 14, 2025, 7:06 PM UTC