EC-Council

The International Council of E-Commerce Consultants, or EC-Council, is a member-based organization that provides cybersecurity training and certifications. Its core mission is to validate the skills and knowledge of information security professionals to prevent cyber conflicts. EC-Council aims to establish and refine the cybersecurity profession through the development of educational programs and certifications. The organization operates globally, with a presence in 145 countries, and has certified over 400,000 information security professionals.

EC-Council is widely known for creating the Certified Ethical Hacker (C|EH) certification. This and other certifications like the Computer Hacking Forensics Investigator (C|HFI) are recognized by various government agencies, including the U.S. Department of Defense. While some industry professionals question the practical value of its certifications, EC-Council’s programs are generally acknowledged by employers and have a significant global presence in the cybersecurity training market.

Offerings, Capabilities, and Integrations

EC-Council is a global leader in cybersecurity education, training, and certification. Its offerings are designed to equip individuals and organizations with the skills needed to address and combat cyber threats. The company’s core capabilities lie in developing and delivering a comprehensive portfolio of cybersecurity training programs and certifications that cover a wide spectrum of the field, from foundational knowledge to advanced, specialized skills. This extensive range of programs, including the renowned Certified Ethical Hacker (CEH), provides a competitive edge by catering to various career tracks and levels of expertise within the cybersecurity industry.

EC-Council’s reputation is built on its globally recognized certifications, which are endorsed by government agencies and trusted by major corporations worldwide. The company’s integration with academic institutions, government bodies, and corporate enterprises allows it to provide tailored cybersecurity solutions and workforce development programs. Furthermore, EC-Council’s commitment to practical, hands-on learning through platforms like its CyberQ cyber range and immersive labs ensures that certified professionals possess real-world skills. The recent integration of AI into its programs, such as the Certified Penetration Testing Professional (C|PENT AI), demonstrates a forward-looking approach to cybersecurity education.

Products and Services

EC-Council provides a wide array of products and services centered around cybersecurity education and certification. These offerings are available through various delivery formats, including instructor-led training, on-demand online courses, and academic partnerships.

  • Certified Ethical Hacker (C|EH): This is EC-Council’s flagship program and a globally recognized certification for ethical hacking. The latest version, CEH v12, incorporates a new learning framework of Learn, Certify, Engage, and Compete. A new version, CEH powered with AI capabilities, has also been launched.
  • Certified Penetration Testing Professional (C|PENT AI): An advanced penetration testing program that includes hands-on labs and teaches how to perform effective penetration tests in an enterprise network environment, now with AI techniques.
  • Computer Hacking Forensic Investigator (C|HFI): A certification that validates expertise in computer forensics investigation to identify and gather evidence of cyberattacks.
  • Certified Network Defender (C|ND): This program focuses on the skills needed to protect, detect, and respond to network attacks.
  • Certified Chief Information Security Officer (C|CISO): A certification designed for top-level information security executives, focusing on governance, risk management, and strategic planning.
  • EC-Council University: An accredited online university offering undergraduate and graduate degrees in cybersecurity.
  • EC-Council Academia: A partnership program providing cost-effective learning resources to academic institutions to prepare students for EC-Council exams and cybersecurity careers.
  • Cyber Essentials Series: A new suite of entry-level courses covering key cybersecurity domains like Ethical Hacking, Network Defense, and Cloud Security, designed to be accessible and affordable.
  • CodeRed: A cybersecurity learning platform with a library of video lessons and “microdegrees” on specialized technical topics.
  • CyberQ: A cloud-based cyber range platform that automates the deployment of cyber targets for hands-on training.
  • Other Certifications: EC-Council offers a broad range of other certifications covering areas such as cloud security, application security, disaster recovery, and threat intelligence.

Target Customers

EC-Council’s target customers span a wide range of individuals and organizations within the cybersecurity ecosystem. This includes aspiring and current cybersecurity professionals, IT professionals seeking to transition into cybersecurity, and students. The company’s products and services are designed to benefit these individuals by providing them with industry-recognized credentials and practical skills that can lead to career advancement.

In addition to individual learners, EC-Council targets several key market segments:

  • Enterprises: EC-Council provides cybersecurity training and solutions for corporate workforces to close skill gaps and build a culture of security. Its certifications are trusted by some of the world’s leading corporations.
  • Government and Military: The company offers specialized training and certifications for government and military personnel, with many of its programs endorsed by agencies like the U.S. Department of Defense.
  • Academic Institutions: Through its EC-Council Academia partnership, the company provides universities and colleges with resources to establish and enhance their cybersecurity programs.

These target customers benefit from EC-Council’s offerings by gaining access to standardized, high-quality cybersecurity education that is globally recognized. For individuals, this translates to improved job prospects and career growth. For organizations, it means having a more skilled and capable workforce prepared to defend against cyber threats.

Cloud Integrations and Marketplaces

EC-Council’s primary cloud integration is through its training programs and its cloud-based cyber range platform, CyberQ. The company’s certification courses, such as the Certified Cloud Security Engineer (C|CSE), are designed to be vendor-neutral but include hands-on labs and practical skills development for major cloud platforms including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This integration allows learners to gain experience in securing these specific cloud environments.

EC-Council provides a range of courses focused on cloud security, from foundational to advanced levels:

  • Certified Cloud Security Engineer (C|CSE): This program offers a mix of vendor-neutral and vendor-specific concepts for securing multi-cloud environments, with practical labs for AWS, Azure, and GCP.
  • Cloud Security Essentials (C|SE): This is a foundational course covering the fundamentals of cloud computing and security.
  • Google Cloud Platform Essentials: This course introduces the fundamental concepts of the Google Cloud Platform, including its security services.
  • AWS Pentesting: This course teaches students how to conduct penetration testing on AWS services such as S3, EC2, and IAM.

EC-Council also offers the CyberQ platform, which is a cloud-based cyber range that provides a hands-on, simulated environment for cybersecurity training and skill development. This platform allows users to practice and be assessed on their abilities in real-world scenarios. CyberQ is accessible from anywhere with an internet connection and supports customized learning experiences.

EC-Council does not have a direct presence on the major cloud marketplaces such as AWS Marketplace, Microsoft Azure Marketplace, or Google Cloud Marketplace for its core products and certifications. However, its training courses and certifications are available through various training partners, some of whom may have listings on these marketplaces.

Key People

  • CEO, EC-Council Group & Chairman of the Board, EC-Council University: Jay Bavisi
  • Chief Financial Officer, EC-Council Group: Denise Yu
  • Senior Vice President | International: Sean Lim
  • Senior Vice President | North America: Steven Graham
  • President, EC-Council University: Lata Bavisi
  • Vice President | Global Operations: Vivek Shally
  • Vice President | IMEA & APAC: Akash Agarwal
  • Vice President | Global: Eric Lopez
  • Director | Academics: Wesley Alvarez
  • Director | Technology: Raj Kumar Viswakarma
  • Legal Counsel: Urvashi Barman

Key Facts

  • Headquarters: Albuquerque, New Mexico, United States.
  • Number of Employees: Approximately 1,400 – 1,500.
  • Annual Revenue: An estimated $407.3 million.
  • Parent Company: EC-Council Holding Pte Ltd.
  • Subsidiary Companies: EC-Council University (ECCU), EC-Council Global Services (EGS), CodeRed, OhPhish, and EC-Council Foundation.
  • Publicly Listed: No.

Analyst Recognition

Based on publicly available information, EC-Council is not featured as a leader, major player, contender, or aspirant in the primary analyst reports from Gartner (Magic Quadrant), Forrester (The Forrester Wave), or Everest Group (PEAK Matrix). While EC-Council’s offerings are listed on Gartner’s Peer Insights platform, this reflects user reviews rather than direct analyst recognition.

International Data Corporation (IDC) included EC-Council as a vendor in its “IDC MarketScape: European IT Training Services 2023 Vendor Assessment”. However, the report’s abstract does not specify EC-Council’s position or role within the assessment.

EC-Council

Enter a search