Certification · Hands-on exam
ACIP
Attify Certified IoT Pentester
Validate your ability to assess a connected IoT ecosystem, demonstrate impact, and produce a professional report under exam conditions.
01 — What ACIP certifies
A performance signal, not a tool certification.
ACIP certifies that you can find, validate and communicate vulnerabilities across the full IoT attack surface: hardware artifacts, firmware, wireless protocols, web interfaces and networked infrastructure.
This is not a multiple-choice test. It is a performance signal for people who need to prove they can assess connected-device environments and communicate results to decision makers. One exam, one price. Your performance determines your tier.
02 — How the exam works
Two phases. One private assessment environment.
You receive an engagement brief, a prepared browser-based workstation with no internet egress, and representative evidence artifacts. Targets, topology and objective paths are revealed only in the brief.
Browser-based workstation, no internet egress.
A private assessment environment with connected systems, realistic dependencies and exam-specific evidence artifacts. Pre-configured with the required tools: firmware utilities, network tooling, protocol analysis, scripting environments.
Finalize and submit the professional writeup.
Findings, methodology, evidence, impact analysis and remediation guidance. AI tools may be used for cross-checking and polishing; you remain responsible for originality and technical correctness. About 30% of your score.
03 — Domains assessed
Six domains that mirror a real IoT engagement.
Reconnaissance & hardware artifacts
Interpret logs, dumps, images and captures from a connected-device engagement. Turn early evidence into an assessment plan.
Firmware analysis
Extract, inspect and reason about embedded firmware to recover evidence and connect device behavior to system risk.
Radio & protocol analysis
Understand what the traffic means, where trust breaks down, and how protocol findings affect impact.
Live exploitation
Move from discovery to demonstrated access. Validate findings in a live environment, not just describe them.
Post-exploitation & impact
Reason across connected systems and show why a finding matters. Attack-chain thinking over isolated wins.
Professional reporting
The report a client or hiring manager can trust: clear findings, reproducible evidence, realistic impact, actionable remediation.
04 — Evaluation
Scored on what you demonstrated, not what you intended.
Technical objectives are verified from your submitted evidence and methodology. Not all objectives carry the same weight. Every candidate gets a unique assessment instance.
Writeup quality is graded on clarity, technical correctness, impact articulation and remediation. You must meet the minimum on both dimensions or you do not certify.
ACIP Practitioner
Solid fundamentals across the IoT attack surface. Clear methodology and adequate evidence discipline.
ACIP Specialist
Demonstrated depth, effective attack chaining across connected systems, client-ready reporting.
ACIP Expert
Comprehensive mastery, full attack chain completion, professional-grade deliverables and exceptional methodology.
05 — What ACIP signals
Readable by employers, security leaders and clients, not just candidates.
06 — AI tools and FAQ
Tool output is not a substitute for demonstrated understanding.
The exam workstation has no internet access. Your evidence must come from your own investigation. In the writeup window, AI tools may be used to cross-check and polish.
Do I need special hardware or software?
A modern browser and a stable connection. The workstation is accessed via noVNC with all assessment tooling pre-installed.
What if I don't pass?
You receive specific feedback on the objectives and report areas that need work. Retakes are $129 after a 6-month waiting period.
How should I prepare?
Complete Offensive IoT Exploitation or build equivalent hands-on skills. The exam does not teach; it certifies.
How long is it valid?
Two years from issue. Passing candidates receive a verifiable digital badge for LinkedIn and professional profiles.
07 — Pricing
One exam. One price. Or bundle it with training, or go All-Access.
Every option includes one exam attempt, results and feedback within 72 hours, a session recording, and a verifiable digital badge valid for 2 years. Retakes are $129 after a 6-month waiting period.
Every live Attify track, anything that ships during your paid year, and one certification attempt. Founders' price, locked while you renew.
Get All-Access