EC-Council is a global cybersecurity education, training, and certification organization founded in 2001. It is best known as the creator of Certified Ethical Hacker (C|EH), but its business now spans a broader portfolio that includes technical certifications, executive education, online skills development, professional services, and degree programs. The company serves a worldwide market of cybersecurity professionals, employers, and public sector organizations that need validated skills across offensive security, defense, digital forensics, cloud security, governance, and leadership.
EC-Council has expanded beyond standalone certification into a multi-format learning and workforce development ecosystem. Its portfolio includes EC-Council Learning for digital training, CodeRed for subscription-based on-demand content, EC-Council Global Services for consulting and technical services, and EC-Council University for fully online degree pathways. More recently, EC-Council has added role-based AI security and governance training through its Enterprise AI Credential Suite, extending its focus from traditional cyber defense into enterprise AI readiness.
Offerings, Capabilities, and Integrations
EC-Council delivers cybersecurity capability development through certifications, self-paced and instructor-led training, virtual labs, cyber ranges, structured learning paths, and online degree programs. Its coverage spans ethical hacking, penetration testing, network defense, digital forensics, cloud security, application security, governance, risk and compliance, incident response, and AI security. The company emphasizes practical skill validation through lab-based learning and scenario-driven training rather than theory alone.
For organizations, EC-Council combines workforce development with operational support. It provides team training programs with custom curriculum mapping, analytics, group administration, and role-based upskilling, while EC-Council Global Services adds advisory and technical engagements such as vulnerability assessment and penetration testing, compromise assessment, cloud security services, digital forensics, security operations support, ISO 27001 advisory, and business continuity and disaster recovery planning. EC-Council also supports multi-cloud learning through live labs and product content tied to AWS, Microsoft Azure, and Google Cloud.
Products and Services
- Certified Ethical Hacker (C|EH): Flagship ethical hacking certification and training program focused on attacker techniques, vulnerability discovery, exploitation concepts, and hands-on practice through labs, cyber ranges, and practical assessment pathways.
- Certified Chief Information Security Officer (C|CISO): Executive-level certification designed for security leaders responsible for governance, risk, security program management, strategic planning, finance, and aligning information security with business goals.
- Computer Hacking Forensic Investigator (C|HFI): Digital forensics certification covering evidence handling, acquisition, preservation, analysis, reporting, and investigative workflows across modern environments including cloud, mobile, IoT, and malware-related cases.
- Certified Network Defender (C|ND): Vendor-neutral network defense certification for IT and security administrators who need to securely configure, monitor, protect, and maintain enterprise systems and network services.
- Certified Penetration Testing Professional (C|PENT): Advanced penetration testing program built around real-world enterprise attack scenarios, live cyber ranges, hands-on labs, exploitation techniques, reporting, and coverage of areas such as cloud, IoT, and OT testing.
- Certified Cloud Security Engineer (C|CSE): Multi-cloud security certification that blends vendor-neutral principles with platform-specific skills for AWS, Microsoft Azure, and Google Cloud, supported by hands-on performance labs.
- EC-Council Learning: EC-Council’s digital learning environment for official training, short courses, structured learning paths, practice labs, certificates of completion, and team-based learning management.
- CodeRed: Subscription-based on-demand learning platform offering microlearning-style cybersecurity content, demo labs, and continuously updated video courses for working professionals and teams.
- EC-Council Global Services: Professional services division that helps organizations assess and improve security posture through services such as vulnerability assessment and penetration testing, compromise assessment, cloud security, digital forensics, SOC-related services, and advisory support.
- EC-Council University: Fully online higher education arm offering career-focused cybersecurity degree programs, MBA options, graduate certificates, and non-degree study with hands-on labs and embedded EC-Council certifications.
- Enterprise AI Credential Suite: Role-based AI education portfolio built around AI adoption, security, and governance, including certifications for AI program management, offensive AI security, responsible AI governance and ethics, and foundational AI literacy.
Target Customers
EC-Council targets individual learners across the cybersecurity career lifecycle, from beginners and career changers to experienced practitioners and executive leaders. Its audience includes ethical hackers, penetration testers, network defenders, digital forensics professionals, cloud security practitioners, security managers, and working adults seeking flexible online training or degree-based advancement.
EC-Council also serves organizations that need structured cyber workforce development and specialized security support. Its customer base includes private enterprises, government entities, defense and military audiences, academic institutions, authorized training centers, and enterprise teams building capabilities in offensive security, defensive operations, compliance, cloud security, and AI readiness.
Cloud Integrations and Marketplace
- AWS: EC-Council supports AWS through live lab connectivity and multi-cloud training content, especially within Certified Cloud Security Engineer (C|CSE), where learners work with AWS services and security controls such as IAM, VPC, Security Hub, KMS, Inspector, CloudWatch, and related tooling.
- Microsoft Azure: EC-Council supports Microsoft Azure through live labs and platform-specific cloud security training, including Azure-focused coverage in Certified Cloud Security Engineer (C|CSE) and related learning content using services such as Defender for Cloud, Azure Active Directory, Azure Monitor, Network Watcher, and Azure Policy.
- Google Cloud: EC-Council supports Google Cloud through live labs and multi-cloud curriculum, including Google Cloud-focused instruction in Certified Cloud Security Engineer (C|CSE) using services such as Cloud Identity, Security Command Center, Cloud Armor, Cloud Security Scanner, Chronicle Detect, and Cloud Key Management.
Key People
- Jay Bavisi: Founder & Group President
- Denise Yu: Chief Financial Officer
- Sean Lim: Senior Vice President (International)
- Steve Graham: Senior Vice President | EC-Council Global
- Karan Henrik Ponnudurai: Senior Vice President, Strategy and Digital Transformation
Key Facts
- Headquarters: Albuquerque, New Mexico, United States
- Employees: Approx. 1,400+
- Annual Revenue: $407.3M (estimated)
- Parent Company: None
- Subsidiaries: EC-Council University (ECCU); EC-Council Global Services (EGS); EC-Council Learning (ECL)
- Publicly Listed: No (privately held)
