EC - Council

What EC - Council does

EC-Council (legally the International Council of E-Commerce Consultants) is a private cybersecurity certification and training organization founded in 2001 by Jay Bavisi and headquartered in Albuquerque, USA. The company created the Certified Ethical Hacker (CEH) credential in 2003, which has become one of the most recognized certifications in ethical hacking with 400,000+ certified professionals across 170+ countries and accreditation by ANAB under ISO/IEC 17024, U.S. DoD 8140, NICE, GCHQ under CYBOK, and the American Council on Education. The current portfolio spans 25+ cybersecurity certifications and 200+ courses across offensive security, defensive operations, digital forensics, cloud security, DevSecOps, and executive leadership, with AI-integrated versions of flagship credentials (CEH v13, CCISO v4) and a new Enterprise AI Credential Suite (CAIPM, COASP, CRAGE, AI|E) launched in February 2026.

The technology stack is built around a cloud-based cyber range (221 hands-on labs, 550 attack techniques, 4,000+ hacking tools), integrated with the Skillable lab platform (where learners have launched 60M+ labs since 2004), and includes proprietary AI tools such as STORM (Mobile Security AI Toolkit), ShellGPT for command generation, and the ADG AI Framework for enterprise AI governance aligned with EU AI Act, ISO/IEC 42001, and NIST AI RMF. Distribution operates through a multi-tier channel: 900+ Authorized Training Centers in 145 countries, 1,200+ academic institution partners (with degree programs via EC-Council University), 4,500+ Pearson VUE testing centers, and the iClass self-paced and live instructor-led online platform.

Revenue is generated through certification exam fees, training course fees ranging from $699 per seat for ECL Pro+ to $3,999 for unlimited annual iClass access, ATC partnership fees, EC-Council University tuition, enterprise training contracts (sold to Fortune 500 companies, government agencies, and DoD), and adjunct product sales such as STORM. The customer base spans individual professionals, enterprises (IBM, Microsoft, Google, AWS, Citi, JPMorgan Chase, KPMG, Deloitte), military and defense organizations under DoD 8140, and academic institutions. Named enterprise customers include IBM, Microsoft, Accenture, Cisco, TCS, Google, AWS, Citi, JPMorgan Chase, KPMG, Deloitte, GE Healthcare, Salesforce, Prudential, and BBC. EC-Council has six wholly-owned operating subsidiaries (EC-Council Learning, iClass, EGS, CodeRed, ECCU, Aspen) and is founder-controlled with no disclosed external shareholders or PE/VC involvement.

Name

EC - Council

Legal name

International Council of E-Commerce Consultants

Website

https://eccouncil.org

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

EC-Council is a private cybersecurity certification and training organization that created the Certified Ethical Hacker credential, serving 400,000+ professionals across 170+ countries through 900+ ATCs, 1,200+ academic partners, and the iClass online platform, with flagship ANAB/DoD/GCHQ-accredited credentials and a growing AI credentialing portfolio.

Ownership category

akta.pro rank

Product category

Cybersecurity Training and Certification

NAICS

Computer Training (611420), Computer Training (61142), Software Publishers (5132)

SIC

Services-Educational Services (8200), Services-Prepackaged Software (7372)

akta.pro primary industry

Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

akta.pro secondary industries

Information Technology & Cybersecurity Certification Prep (CompTIA, Cisco, Microsoft, AWS, ISC2/ISACA) (EDANAIAF), Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH), Information Security, Privacy & IT Governance (CISSP CPE, Privacy CE) (EDAAALAL), Legal, Governance, Privacy & Audit Certifications (EDAAANAN)

Keywords

• Cybersecurity certification
• Ethical hacking training
• Penetration testing
• Information security credentials
• Cyber defense education

Headquarters

HQ city

Albuquerque

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Marketing or Sales, Technology or R&D, Operations, Infrastructure, Others

Revenue model

1. Certification and Training Fees: Primary revenue stream from certification exam fees and training course fees. EC-Council offers multiple training formats including on-demand self-paced, live online instructor-led, and in-person boot camps at ATCs. Pricing varies by course format and package level.
2. Training Partner Program Revenue: Revenue generated from Authorized Training Centers (ATCs) that pay for training materials, exam vouchers, and partnership fees to deliver EC-Council certifications
3. Academic Partnership and Degree Programs: Revenue from universities and colleges that integrate EC-Council certifications into degree programs. EC-Council University offers degree programs (BS, MS, MBA in cybersecurity) with tuition fees
4. Enterprise and Corporate Training: Enterprise offerings for teams and organizations providing cybersecurity training for corporate workforces with custom packages

Pricing tiers

Go-to-market motion5 records

Distribution channels6 records

Marketing channels7 records

Core offering

EC-Council develops, owns, and delivers globally recognized cybersecurity certifications and training programs, anchored by the Certified Ethical Hacker (CEH) credential. It sells self-paced and live online courses, in-person boot camps at Authorized Training Centers, enterprise workforce development packages, university degree programs through EC-Council University, and the proprietary Adopt. Defend. Govern. (ADG) AI Framework for enterprise AI governance.

Product overview

EC-Council is a global cybersecurity certification and training organization founded in 2001, offering a comprehensive portfolio of certifications and training programs. The portfolio includes flagship certifications (Certified Ethical Hacker CEH, Certified Chief Information Security Officer CCISO, Computer Hacking Forensic Investigator CHFI), network and cloud security certifications (Certified Network Defender CND, Certified Cloud Security Engineer CCSE), offensive security certifications (Certified Penetration Testing Professional CPENT, Certified SOC Analyst CSA), and AI-focused certifications within the Enterprise AI Credential Suite (Certified AI Program Manager CAIPM, Certified Offensive AI Security Professional COASP, Certified Responsible AI Governance & Ethics CRAGE, Artificial Intelligence Essentials AI|E). The organization also offers foundational programs through its Essentials Series, executive leadership pathways (CCISO, Associate CCISO), academic degree programs through EC-Council University, and the proprietary Adopt. Defend. Govern. (ADG) AI Framework for enterprise AI governance. With 400,000+ certified professionals across 170+ countries, EC-Council provides training through iClass online platform, 900+ Authorized Training Centers in 145 countries, and academic partnerships with over 1,200 colleges and universities.

Differentiator

Problem solved

Functional benefit

Brands

• EC-Council University (ECCU): University offering bachelor's and master's degree programs in cybersecurity and computer science, with courses mapping to EC-Council certifications.
• EC-Council Global Services (EGS)
• EC-Council Learning (ECL)
• iClass
• CodeRed
• Aspen
• Hackerverse

Products and services

• Certified Ethical Hacker (CEH) EC-Council's flagship ethical hacking certification program covering AI-driven cybersecurity skills, vulnerability assessment, attack techniques, and penetration testing across 20 learning modules with 221 hands-on labs, ShellGPT integration, and 4-step Learn/Certify/Engage/Compete framework.
• Certified Ethical Hacker Master Advanced ethical hacking designation requiring both a 4-hour knowledge exam (125 questions) and a 6-hour practical exam with 20 real-world challenges on the EC-Council Cyber Range, validating applied proficiency beyond CEH theory.
• Certified Chief Information Security Officer (CCISO) Executive leadership certification covering five domains (Governance/Risk/Compliance, Security Controls and Audit Management, Security Program Management, Core Competencies, Strategic Planning/Finance/Procurement) and accredited by NICE, ANSI, DoD, and GCHQ.
• Associate CCISO Entry-level executive certification using the same CCISO courseware and five domains, designed for professionals aspiring to C-suite leadership who do not yet meet the 5-year experience requirement for full CCISO.
• Computer Hacking Forensic Investigator (CHFI) ANSI-accredited, lab-focused digital forensics certification for investigating and reporting cybercrimes, analyzing security threats, and preserving digital evidence; mapped to NICE 2.0 framework and listed under DoD Directive 8570.
• Certified Network Defender (CND) ANAB-accredited network security certification covering defensive cybersecurity operations, approved under DoD 8140 for CSSP roles including Cyber Defense Analyst, Infrastructure Support Specialist, and Incident Responder.
• Certified Penetration Testing Professional (CPENT) ANAB-accredited advanced penetration testing certification teaching effective enterprise network penetration tests, with AI skills mapped to all pentesting phases for productivity and efficiency.
• Certified SOC Analyst (CSA) SOC analyst certification training individuals for Threat Hunter, SOC Analyst, and Incident Responder roles with over 50% lab time in hands-on environments using enterprise tools like Splunk, enhanced with AI-integrated threat landscape content.
• Certified DevSecOps Engineer (ECDE) DevSecOps certification covering 15+ specialized job roles with 70% lab-focused training across multi-cloud and containerized environments, providing practical job-ready DevSecOps skills.
• Certified AI Program Manager (CAIPM) Role-based AI certification validating AI risk management, regulatory readiness, accountability frameworks, and enterprise AI oversight capabilities aligned with NIST AI RMF and ISO/IEC 42001.
• Certified Offensive AI Security Professional (COASP) Role-based AI security certification focused on offensive AI security capabilities, part of the Enterprise AI Credential Suite.
• Certified Responsible AI Governance & Ethics (CRAGE) AI governance and ethics certification operationalizing responsible AI governance aligned with NIST AI RMF and ISO/IEC 42001, validating AI risk management and enterprise AI oversight.
• Artificial Intelligence Essentials (AI|E) Foundational AI certification within the AI Security and Management career track, part of the Essentials Series requiring no prior IT experience.
• Certified Incident Handler (ECIH) ANAB-accredited incident handling and response certification approved under DoD 8140 for CSSP Cyber Defense Incident Responder role.
• Certified Threat Intelligence Analyst (CTIA) Threat intelligence certification covering the threat intelligence lifecycle, analysis methodologies, and intelligence-driven security operations.
• Certified Cloud Security Engineer (CCSE) Cloud security engineering certification covering AWS, Microsoft Azure, and Google Cloud security architectures, container security, and serverless computing threats.
• Certified Encryption Specialist (ECES) Encryption specialist certification covering cryptographic algorithms, PKI, email encryption, disk encryption, and cryptanalysis techniques.
• Certified Cybersecurity Technician (CCT) ANAB-accredited, entry-level cybersecurity technician certification requiring no prior IT experience, covering practical skills across multiple cybersecurity domains.
• ICS/SCADA Cybersecurity Industrial Control Systems and SCADA security certification covering OT technologies, vulnerabilities, threats, and security controls for critical infrastructure.
• Adopt. Defend. Govern. (ADG) AI Framework Proprietary practitioner-led modular framework for designing, implementing, and governing AI stacks, featuring three pillars, 12 minimum controls, nine governance surfaces, four harm classes, four industry threat catalogs, nine deployment pattern overlays, three autonomy tiers, and a 4-phase roadmap aligned with EU AI Act, ISO/IEC 42001, and NIST AI RMF.
• AI Readiness Self-Assessment Tool Free AI maturity self-assessment tool launched alongside the ADG AI Framework to help organizations evaluate their AI adoption readiness and governance maturity.
• Essentials Series Eight foundational courses requiring no prior IT experience: Network Defense Essentials (NDE), Ethical Hacking Essentials (EHE), Digital Forensics Essentials (DFE), DevSecOps Essentials (DSE), SOC Essentials (SCE), Cloud Security Essentials (CSE), IoT Security Essentials (ISE), and Threat Intelligence Essentials (TIE).
• Global CISO Council Independent professional body organized under Section 501(c)(6) of the U.S. Internal Revenue Code, serving as a dedicated global forum for CISOs to address AI governance and emerging technology risks including generative AI, cloud infrastructure, and quantum technologies.
• Blockchain Developer Certification (BDC) Blockchain development certification covering smart contract development, decentralized application (DApp) development, and blockchain security fundamentals.
• EC-Council University (ECCU) Accredited university offering online degrees in cybersecurity including Bachelor of Science in Cyber Security, Master of Science in Cyber Security, Master of Business Administration in Cyber Security, and Master of Science in Computer Science, integrating EC-Council certifications into curriculum.
• CEH Compete Global competitive hacking platform providing year-long access to 12 Capture the Flag challenges with monthly themes, including real-world cyber scenarios such as hospital ransomware crises.

Quantifiable outcome

• 1 in 2 professionals received promotions after obtaining CEH AI certification
• +6 more outcomes

Named customers16 records

Segments6 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability8 records

Feature6 records

Partnerships

Twelve partnerships are on record, tiered core and minor.

• National Applied AI Consortium (NAAIC)coreStrategic or Co-development Partner · 7 April 2026Partnership with NAAIC (led by Miami Dade College, Maricopa Community Colleges, and Houston City College, established through $2.8M NSF grant with Google.org support) to expand AI industry certifications within U.S. community colleges. Provides faculty development opportunities and turnkey certification courses to strengthen degree programs and connect students to emerging AI career pathways.
• University of PhoenixcoreChannel Partner/ Reseller/ Distributor · 26 March 2026Academia partner awarded EC-Council 2025 Academia Partner of the Year for second consecutive year, selected from over 2,200 academic institutions worldwide. Recognized for aligning cybersecurity education with workforce needs through College of Business and IT programs.
• University of West FloridacoreChannel Partner/ Reseller/ Distributor · 19 February 2026Partnership with expanded UWF Center for Cybersecurity and AI to host AI faculty development workshops and offer professional certifications, advancing national and global cybersecurity workforce and security challenges through multidisciplinary programs.
• SkillablecoreTechnology or Integration · 11 February 2026Skillable's performance-based learning platform hosts EC-Council lab experiences in Skillable Marketplace launched December 2025. Over 1.7 million learners launched 10.6 million labs on Skillable in 2025, with total lab launches exceeding 60 million since 2004.
• CloudflarecoreStrategic or Co-development Partner · 9 February 2026Collaboration at Global CyberPeace Summit 2026 in New Delhi, India (February 8-10), including hackathons, buildathons, and training initiatives. Also launching EC-Council and CyberPeace AI Scholarship Programme and Global Quantum Threat Alliance.
• Technovalley Software IndiacoreChannel Partner/ Reseller/ Distributor · 5 February 2026Technovalley Software India received EC-Council accreditation, becoming among first institutions in Kerala to offer EC-Council certification programs. Has partnered with more than 100 engineering colleges and universities across India.
• First Nations Cyber Technologies (FNCT)coreStrategic or Co-development Partner · 1 November 2025Partnership announced during ASEAN Summit in Kuala Lumpur to enhance Australia's cybersecurity workforce through certification and training programs, targeting indigenous cybersecurity talent development in the region.
• SophosminorGTM or Marketing Partner · 11 October 2024Cybersecurity webinar partnership in the Philippines as part of Sophos Women in Technology Network (SWiT) initiative supporting girls and women in technology careers on International Day of the Girl 2024.
• CiticoreStrategic or Co-development PartnerADG AI Framework advisory board member providing input on AI governance framework development alongside major organizations including JPMorgan Chase, Microsoft, KPMG, Deloitte, NTT Data, and Salesforce.
• GE HealthcarecoreStrategic or Co-development PartnerADG AI Framework advisory board member contributing to practitioner-led modular framework for designing, implementing, and governing AI stacks across enterprise environments.
• NTT DatacoreStrategic or Co-development PartnerADG AI Framework advisory board member contributing to development of AI governance framework aligned with EU AI Act, ISO/IEC 42001, and NIST AI RMF standards.
• 1EdTech ConsortiumminorStrategic or Co-development PartnerUniversity of Phoenix collaboration showcased at 1EdTech 2026 Digital Credentials Summit as model for translating employer-validated competencies into scalable, career-aligned learning pathways using Open Badges 3.0 and CTDL standards.

Scale indicators13 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SANS Institute: SANS Institute is the most direct competitor to EC-Council in advanced cybersecurity training and GIAC certifications (GPEN, GWAPT, GCFE). Both serve enterprise/government cybersecurity workforces with hands-on, accredited training and compete directly for the same pool of practitioner training dollars.
• OffSec (Offensive Security): OffSec is a direct peer competing in penetration testing and ethical hacking training through its OSCP, OSWE, and OSEP certifications. OffSec's rigorous hands-on exam model is often positioned as a more practitioner-respected credential than CEH in the offensive security community.
• ISC2: ISC2 is a direct peer offering the CISSP, CCSP, and SSCP certifications that dominate the cybersecurity management and cloud security credentialing markets. Both organizations hold ANSI/ANAB ISO/IEC 17024 accreditation and compete for enterprise and government recognition of their certifications.
• ISACA: ISACA is a direct peer offering CISM, CISA, CRISC, and CGEIT certifications for cybersecurity governance, audit, and risk management — competing directly with EC-Council's CCISO program for the same enterprise security leadership audience.
• Infosec Institute: Infosec Institute is a direct peer offering cybersecurity training and certification preparation across ethical hacking, cloud security, and security operations — competing with EC-Council in both individual learner and enterprise training segments, particularly via Skills IT platform.

Broad incumbents

• CompTIA: CompTIA is a broad incumbent offering a wider portfolio of IT certifications including Security+, CySA+, and PenTest+ that overlap with EC-Council's CND, CSA, and CPENT in the entry-to-mid-level practitioner market. CompTIA's broader catalog and lower price points give it a different competitive position than EC-Council's specialist focus.
• Pluralsight: Pluralsight is a broad incumbent tech training platform offering cloud, security, and IT certification prep courses, competing with EC-Council's online subscription iClass and CodeRed offerings for enterprise training budgets and individual practitioner subscriptions.
• Skillsoft: Skillsoft is a broad incumbent in enterprise technology training, offering cybersecurity courses alongside leadership and compliance training through its Percipio platform — competing with EC-Council's enterprise and academic partnership programs for organizational training spend.
• Coursera: Coursera is a broad incumbent online education platform offering university cybersecurity degrees and professional certificates (Google, IBM, Microsoft programs) that compete with EC-Council University degree programs and individual certification courses in the self-paced learner segment.

Emerging players

• Cybrary: Cybrary is an emerging player offering free and affordable cybersecurity training with hands-on labs, directly challenging EC-Council's entry-level Essentials Series and CC pricing with a freemium model that targets the same individual learner segment.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/eccouncil
• YouTubeyoutube.com/user/eccouncilusa
• Facebookfacebook.com/eccouncil
• LinkedInlinkedin.com/company/ec-council
• Instagraminstagram.com/eccouncil

Compliance13 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Subsidiaries6 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about EC - Council