Cloud Security Certifications Compared: MCRTP vs OSCP vs AZ-500

Choosing a cloud security certification depends on whether you need to prove you can break things, defend things, or pass a compliance audit. This comparison covers the certifications most relevant to cloud security practitioners in 2026, from hands-on offensive certs to vendor-specific knowledge exams, with data on format, cost, and what each one actually proves. One entry, OSCP, is not a cloud security certification at all: it is the widely recognized hands-on standard for general network and web penetration testing, and it is included here as the benchmark that cloud-specific hands-on exams are measured against.

Certification Comparison Table

Hands-On vs Multiple Choice

The fundamental divide among these certifications is between exams that test what you can do and exams that test what you know. Hands-on exams like MCRTP and OSCP require candidates to actually exploit systems and capture flags or write reports within a time limit. AZ-500, AWS Security Specialty, CCSK, and Cloud+ are knowledge-based exams where you select answers from options.

For hiring managers evaluating candidates, hands-on certifications provide stronger signal about practical capability. For practitioners building a credential stack, a combination of both, vendor-specific knowledge certs plus at least one hands-on offensive cert, covers the broadest range of employer requirements.

MCRTP vs OSCP

OSCP is a widely recognized standard for general penetration testing, but its exam environment is predominantly on-premises infrastructure. Cloud-specific attack techniques such as IAM privilege escalation, token theft, managed identity abuse, and cross-tenant pivoting are not part of the OSCP exam. MCRTP fills that gap: a hands-on, scenario-based exam that proves you can execute real attack chains in Azure and Microsoft 365, the same way OSCP proves you can do it on traditional networks. MCRTP focuses specifically on validating Microsoft cloud offensive capability.

Where OSCP tests breadth across on-premises infrastructure, MCRTP tests depth in the platform that most enterprises actually run on. The two certifications complement each other: OSCP for traditional infrastructure, MCRTP for the cloud estate. Students often describe MCRTP as the OSCP of the cloud, for the same reason OSCP earned its reputation: it makes you prove an attack chain hands-on rather than answer questions. Practitioners holding both cover a wider attack surface.

MCRTP vs AZ-500: Theory Meets Practice

AZ-500 (Microsoft Azure Security Technologies) teaches what Azure security features exist, such as Network Security Groups, Defender for Cloud, Conditional Access policies, and Key Vault. It is a heavily theoretical exam focused on configuration knowledge. MCRTP complements AZ-500 by teaching the practical skills you can use on the job the next day: how attackers actually bypass those controls, how to detect and investigate those attacks in Sentinel and Defender XDR, and how to chain techniques the way real threat actors do.

Many practitioners pursue both: AZ-500 for the foundational knowledge and vendor credibility, MCRTP for the hands-on offensive and defensive capability that turns that knowledge into operational skill.

AZ-500 Retirement and the SC-500 Replacement

Microsoft is retiring AZ-500 and replacing it with SC-500 (exam: Implementing End-to-End Security Controls for Cloud and AI Workloads), which leads to the Microsoft Certified: Cloud and AI Security Engineer Associate credential and is designed to align with evolving cloud and AI security standards. Key dates:

• Until August 31, 2026: you can still take and pass AZ-500 to earn the Azure Security Engineer Associate credential. It still counts toward Microsoft Partner skilling requirements.
• After August 31, 2026: AZ-500 will no longer be available. You will need to take SC-500 to earn the new associate credential.
• If you already hold AZ-500: your certification remains on your active transcript until it expires, after which it moves to historical certifications.

The shift from AZ-500 to SC-500 reflects Microsoft's recognition that cloud security now extends into AI security, covering areas like securing AI workloads, managing AI-specific risks, and defending against prompt injection and data poisoning. Pwned Labs provides hands-on experience in these areas: the Mirage cyber range includes AI attack vectors alongside broader Azure security scenarios, there are dedicated Azure AI labs on the platform, and the AI security bootcamp spans multiple cloud providers, covering AI workload security, prompt injection defense, and securing AI pipelines in real environments. Practitioners pairing SC-500 theory with hands-on training build a more current Microsoft cloud and AI security skill set.

For official details, see the AZ-500 exam page and the SC-500 exam page. Review Microsoft's credential retirement policy at Microsoft Credential Retirement Support.

Salary Impact

Cloud security engineers in the US earn an average of about $152,773, with top earners (90th percentile) near $205,000 (ZipRecruiter, 2026). Certifications that demonstrate hands-on cloud attack and defense capability, particularly in Azure, AWS, and GCP, are increasingly valued by employers over theory-based credentials, as the threat landscape shifts: Google's Cloud Threat Horizons H1 2026 report found that exploited software vulnerabilities overtook stolen credentials as the leading initial-access vector in cloud intrusions (44.5 percent versus 27.2 percent in the second half of 2025), and identity abuse still dominates what attackers do after gaining access, which drives demand for practitioners who understand real attacker tradecraft.

Which cloud security certification should you take first?

The honest answer depends on what you are trying to change. If you need to get past a CV screen or satisfy a partner requirement, a vendor knowledge exam does that job cheaply and quickly. If you need to demonstrate that you can actually operate, a hands-on exam is the only thing that proves it, because a multiple choice pass says nothing about whether you can execute an attack chain under time pressure.

A useful sequence for most practitioners is a vendor exam for the platform you work on, followed by one hands-on offensive certification in that same platform. The vendor exam gives you the vocabulary and the configuration knowledge, and the hands-on exam turns it into capability. Reversing the order works too, and tends to be harder going.

If you are choosing between platforms rather than between exam formats, pick the one your organisation actually runs. Cloud attack techniques transfer conceptually across providers, and the specifics do not, so depth in the platform you touch daily is worth more than breadth across three you do not.

The rest of the range: AWS, Google Cloud, Kubernetes and AI

MCRTP covers Microsoft cloud, and the same format exists for the other two major providers. The Amazon Cloud Red Team Professional (ACRTP) covers AWS attack and detection paths, including IAM abuse, privilege escalation and the routes from an application flaw into the account behind it. The Google Cloud Red Team Professional (GCRTP) covers Google Cloud and Google Workspace, where service account impersonation and transitive delegation dominate the escalation paths.

Two further tracks sit outside the provider split. The Kubernetes Attack and Defense Bootcamp, Professional Edition (KRTP) covers Kubernetes attack paths end to end, beginning in minikube because most tradecraft is identical across providers, then moving through EKS, GKE and AKS to node identity and the route from a service account token into the cloud account behind the cluster. The AI Systems Attack and Defense Bootcamp, Professional Edition (AISRTP) covers LLM-backed and agentic applications, including prompt injection, RAG and embedding poisoning, tool and agent abuse, and MCP and CI/CD agent attack paths. Both are assessed the same way as the provider tracks, with a fully hands-on, unproctored exam.

Every one of these follows the same model: an unproctored, hands-on exam in a live environment, 24 hours to complete an attack chain from a supplied entry point, no penetration test report required, and a certification that does not expire. Each includes 45 days of Academy access and two exam attempts. ACRTP, MCRTP and GCRTP are $399 each; current pricing for the Kubernetes and AI tracks is on their bootcamp pages.

For practitioners working across providers, the M-CRTP3 bundle covers all three for $999 and awards the Multi-Cloud Red Team Professional certification. That is the option worth considering if your estate genuinely spans more than one cloud, which for most enterprises it now does.

Do certifications actually get you hired?

They get you read. A certification rarely wins an offer on its own, and it reliably moves a CV from the rejected pile to the interview pile, which is the part many candidates are stuck on. Hiring managers use them as a filter rather than as evidence of skill.

What changes the interview itself is being able to talk concretely about attack paths you have executed and detections you have built. That is the argument for hands-on certifications specifically: the preparation produces the stories, not just the credential.

Multi-Cloud Certification Paths

Pwned Labs offers certified hands-on offensive exams across all three major cloud platforms: MCRTP (Azure/M365), ACRTP (AWS), and GCRTP (GCP/Workspace). The M-CRTP3 credential certifies proficiency across all three. For practitioners working in multi-cloud and hybrid environments, which Flexera's 2026 State of the Cloud Report found 73 percent of organizations now run hybrid cloud, a single provider spanning AWS, Azure, and GCP reduces the need to combine certifications from multiple vendors. Explore all certification paths at pwnedlabs.io/bootcamps.

Sources

• Microsoft AZ-500 exam page
• Microsoft SC-500 exam page
• Microsoft credential retirement schedule
• Cloud security engineer salary data, ZipRecruiter
• Flexera State of the Cloud Report