Ethical Hacking Trainings

Ethical Hacking: offensive security at the service of companies

Ethical hacking has become, in 2026, a structuring discipline of business cybersecurity. Application pentest, infrastructure pentest, red team, offensive security audit, vulnerability research, attack simulation: offensive security enables organisations to anticipate attacks before they happen. In Geneva, Lausanne and across French-speaking Switzerland, private banks, international organisations, hospitals, public services, retailers and industrial companies structure their security teams around CEH, OSCP or PenTest+ certified profiles.

Following a recognised Ethical Hacking training opens access to highly valued roles: pentester, offensive security engineer, cybersecurity auditor, red teamer, application security consultant, CISO. The EC-Council Certified Ethical Hacker (CEH), CompTIA PenTest+ and Offensive Security Certified Professional (OSCP) certifications are internationally recognised and widely expected in offensive security job descriptions. Investing in an ethical hacking certification sustainably enhances your profile in a segment where demand widely exceeds supply.

ITTA offers training dedicated to ethical hacking in connection with the audit and cybersecurity sub-domain: CEH preparation, pentest training, application security and offensive security. Each session is built around hands-on labs on test environments (Kali Linux, CTF platforms, vulnerable virtual machines), with limited group sizes to enable personalised support.

Whether you are a security engineer, system administrator ramping up on security, profile transitioning to cybersecurity or senior consultant, our training in Geneva and Lausanne provides the practical skills expected on the Swiss market to pass your target certification and access the most sought-after ethical hacking positions.

Skills covered by our ethical hacking catalogue

Certified Ethical Hacker (CEH) EC-Council

The EC-Council CEH certification remains the most recognised in offensive security. The programme covers reconnaissance, scanning, enumeration, vulnerability exploitation, access maintenance, trace cleaning, web audit, network audit, mobile testing, IoT and ethical pentest best practices. This certification targets security engineers, administrators ramping up on security and profiles transitioning to cybersecurity.

CompTIA PenTest+ and pentest basics

CompTIA PenTest+ is an alternative to CEH, particularly valued in CompTIA-oriented organisations. The programme covers pentest planning, information gathering, vulnerability identification, exploitation, reporting and result communication. This certification is accessible to profiles already with a security base (CompTIA Security+).

Application security and OWASP

Application security is a central part of ethical hacking. Our training courses cover the OWASP Top 10, web pentest techniques (SQL injection, XSS, CSRF, IDOR, SSRF), secure coding best practices and market tools (Burp Suite, OWASP ZAP). This skill is particularly expected from senior web developers and DevSecOps engineers.

Pentest tools and environments

Tool mastery is essential daily: Kali Linux and its integrated tools (Nmap, Metasploit, John the Ripper, Hydra, Wireshark), practice platforms (TryHackMe, HackTheBox), Parrot OS distributions, fuzzing frameworks and Python script writing to automate tests.

Build your ethical hacking path

A starting security engineer follows CompTIA Security+ to acquire the foundation, then CEH to move to offensive security. A senior web developer wishing to reinforce application security follows OWASP and web pentest training. A career changer follows Linux Essentials then CEH. An experienced profile targeting expert level progresses to OSCP after CEH. A senior consultant combines CEH and CISSP for a transverse offensive and defensive view. Our pedagogical team guides you towards the sequence suited to your current level.

Ethical hacking and related skills

Ethical hacking fits into a broader cybersecurity ecosystem. The audit and cybersecurity sub-domain covers CompTIA Security+, CISSP, ISO 27001 and defensive fundamentals, naturally complementary to offensive. Cloud computing training brings AZ-500 (Azure Security Engineer) and AWS Security Specialty for cloud security. The GDPR and nFADP sub-domain covers the data compliance dimension, complementary to technical audits. On the DevOps side, observability and DevSecOps training covers shift-left security in pipelines. The systems and networking domain brings the Linux and network basics essential to pentest.

Ethical hacking trends in 2026

Several evolutions are shaping ethical hacking in 2026. Cloud pentests (AWS, Azure, GCP) become majority over traditional on-premise pentests. AI agents and LLMs (ChatGPT, Claude) are used both by attackers (payload generation, social engineering) and by defenders (finding triage, report generation). Red teaming and purple teaming structure the collaboration between offensive and defensive. Supply chain security (signatures, SBOM, SLSA attestations) is gaining importance. OSCP remains the most demanding certification in practice. Our pedagogical content regularly integrates these evolutions to remain aligned with current company practices.

Ethical Hacking training in Geneva, Lausanne and online

All our Ethical Hacking training courses are available on-site in our Geneva (Route des Jeunes 35) and Lausanne (Avenue de Mon-Repos 24) centres, as well as in interactive virtual classroom with a live trainer. Our sessions are organised in 5-week cycles. Each session includes hands-on labs on Kali Linux and secure test platforms. Customised corporate training is also possible at your premises, in Geneva, Lausanne, Vaud and across French-speaking Switzerland, with a programme adapted to your internal stack and pentest scope. Several professional funding paths can be considered depending on your profile and employer.

Why choose ITTA for your CEH or pentest certification

ITTA is a certified training centre based in French-speaking Switzerland, official partner of EC-Council and CompTIA. Our ethical hacking trainers are pentesters and offensive security consultants active in projects for Swiss and international companies. Our pedagogical team supports you in choosing the right path, preparing the CEH or PenTest+ exams and identifying the funding solutions that fit your professional situation.

FAQ

Is security experience required before CEH?

Prior experience in system administration, networking or security (CompTIA Security+) significantly facilitates CEH onboarding. Profiles completely new to IT benefit from following Linux Essentials and Security+ before CEH.

CEH or OSCP: which to choose?

CEH is more theoretical, accessible and globally recognised, ideal to start in offensive security or consolidate a CV. OSCP is exclusively practical (24-hour live pentest) and demanding, particularly valued for senior pentesters. Many profiles follow CEH before OSCP.

Is ethical hacking legal in Switzerland?

Ethical hacking is legal when exercised within a clear contractual framework (written authorisation, defined scope, NDA). Pentest without authorisation remains illegal in Switzerland. Our training courses cover the legal and ethical framework of the role.

Are your Ethical Hacking courses available for companies?

Yes, the entire Ethical Hacking catalogue is available in-house, in Geneva, Lausanne and in virtual classroom, with a programme adapted to your internal stack and pentest scope. Our team builds the specifications with you and organises sessions according to your calendar.