The eWPT - Web Application Penetration Tester exam voucher costs Rs 64,900/= at induwara.lk, payable in Sri Lankan rupees by card or bank transfer. It is an official single-use voucher for the INE exam, not a practice test or a training course. The voucher is valid for 12 months from purchase. After payment our team confirms your order and sends the voucher code by email.
What this voucher is
The INE voucher for eWPT - Web Application Penetration Tester, with no currency conversion to work out. It is the exam fee itself — a single-use code you redeem when you book your exam with the vendor's testing provider. It is not a training course, a practice test bundle or a study guide.
Each voucher is valid for 12 months from the date of purchase, so you can book the exam when you are ready rather than the day you buy.
Who sits this exam
eWPT - Web Application Penetration Tester is aimed at SOC analysts, network engineers and anyone moving into a security role. It is a professional-level exam and expects real working experience, not just study. Sri Lankan banks, ISPs and BPO firms hire against named security certifications, and the exam fee is usually the part that stalls people.
Why buy it here
Vendor exam fees are quoted in US dollars, which means the rupee price you actually pay depends on your card's rate on the day and whatever your bank adds on top. Here the price is fixed in rupees — Rs 64,900/= — so what you see is what leaves your account.
You can pay by card through PayHere, or by direct bank transfer if you would rather not put an exam fee on a card. Both are confirmed by us before anything is sent.
How delivery works
Delivery is handled by a person, not a script. Once your payment is confirmed, our team contacts you and sends the voucher code to the email address on your order. That usually happens the same day, and you will hear from us either way — if there is any delay sourcing a particular voucher, we tell you rather than leaving the order sitting.
If you need an invoice for an employer or a training budget, say so when you order and we will issue one against the order number.
Exam at a glance
Prerequisites
None enforced. INE states 'Anyone can attempt the certification exam' and describes the eWPT as 'a certification for individuals with a basic understanding of networks, systems, and an interest in penetration testing'. The page separately calls it 'a milestone certification for someone with foundational experience in web application penetration testing'. Commercial requirement: 'To take the eWPT exam, you'll need both an INE subscription and an exam voucher.'
Sat through
INE Security — online, managed from INE's Certifications Dashboard, 'simulating the skills utilized during a real-world engagement'. INE states results are auto-graded and delivered within a few hours, with performance metrics shown for each section. No test centre.
Certification valid
3
Price here
Rs 64,900/=
Exam details are taken from the vendor’s own documentation. Anything we could not confirm there is left out rather than estimated.
What you get, and what happens next
What you get
One official single-use exam voucher for eWPT, eWPT - Web Application Penetration Tester, covering the exam fee in full. It is a code, not a study course and not a practice test. There is nothing physical to ship and no delivery charge.
When it arrives
Emailed to the address on your order once we have confirmed the payment, by a person rather than automatically. In practice that is usually the same day and almost always within one working day. If sourcing a particular voucher is going to take longer, we tell you rather than leaving the order sitting.
How long it stays valid
12 months from purchase. Book and sit the exam before it expires, a code that has simply run out of time cannot be replaced, so do not buy months ahead of when you plan to use it.
How you redeem it
Redeemed inside eLearnSecurity's own certification dashboard. There is no test centre and no separate booking to make. The code unlocks the attempt on your account.
If the code does not work
If the vendor rejects it when you try to redeem it, tell us straight away and we replace it or refund you in full. Contact us before the voucher’s own expiry date.
If you do not pass
A voucher covers one attempt. A retake needs a new voucher, and the vendor, not us, sets how long you must wait before sitting the exam again. Check the vendor’s retake policy before you book.
Changing your mind
Full refund for any reason as long as we have not yet sent the code, including if you realise you have ordered the wrong exam, which is easy to do when codes look alike. Once the code has been sent it cannot be refunded, because the code is the product and it is single-use. Refunds & delivery in full.
What the exam covers
Web Application Security Testing (25%)
Manual Exploitation of Common Web Application Vulnerabilities (20%)
Web Application Vulnerability Assessment (15%)
Web Application Penetration Testing Processes and Methodologies (10%)
Information Gathering & Reconnaissance (10%)
Web Application Analysis & Inspection (10%)
Web Service Security Testing (10%)
Passive reconnaissance and OSINT against domains, subdomains and IP addresses; examining web server metafiles for information exposure
Where it leads
Web application penetration tester, application security engineer and security consultant — INE names junior penetration testers, web application penetration testers, web application security professionals, web application developers and IT professionals as its audience. For Sri Lankan candidates it is among the most directly employable of INE's professional-level certifications, because web and API assessment is the security service local firms most often sell to overseas clients.
Sitting this exam in Sri Lanka
Web application testing is the security work most in demand from Sri Lanka's IT and BPO export sector, because so much of what is built here for overseas clients is a web or API product that needs an assessment before release. That makes the eWPT an easier credential to justify to a local employer than a broader pentest certification. It is sat online through INE's platform with no test centre booking, and its OWASP WSTG alignment — an explicit exam objective — means the methodology transfers directly to client-facing assessment work. Note that INE requires a subscription alongside the voucher.
Where these details come from
Every fact on this page was read off the vendor’s own documentation. Vendors change exam content, pricing and retirement dates without notice, so check these before you book.
No — they are two separate certifications, listed at separate URLs in INE's own sitemap. The eWPT is the milestone web application penetration testing credential covered here. The eWPTX (Web Application Penetration Tester eXtreme) is the advanced one; INE's December 2024 announcement of its updated version highlights 'a significant focus on API security testing (25% of the curriculum) and advanced topics like WAF bypass techniques'. Check which one a voucher actually unlocks.
Which version of the eWPT is currently sold?
INE sells it under the plain eWPT name, with no version suffix anywhere — not on the certification page, not in the checkout SKU, not in the sitemap. The preparation path is likewise named without a version: the Web Application Penetration Testing Professional Learning Path. If a listing quotes you a 'v1' or 'v2' eWPT, that distinction is not something INE currently publishes.
How much manual exploitation does the exam require?
A lot — manual exploitation of common web application vulnerabilities is 20% of the exam on its own, and web application security testing another 25%. Together that is nearly half the paper on doing rather than describing, covering reflected and stored XSS, SQL injection, LFI and RFI, file upload to RCE, command injection and session management flaws. Tool output alone will not carry you through it.
Is the exam aligned to any public methodology?
Yes. One of INE's published exam objectives is to 'identify vulnerabilities in web applications in accordance with the OWASP Web Security Testing Guide', and 10% of the exam sits in the processes and methodologies domain. The WSTG is free to read and is the most useful single reference for structuring your preparation.
What does INE publish about the pass mark and time limit?
Neither. INE's eWPT page states the exam is completed 'within the allotted time' without naming the figure, and publishes no pass mark. We would rather say that than repeat a number from a forum. What is confirmed: it is auto-graded, results come within a few hours, and you get a breakdown by section.
Do I need an INE subscription as well as the voucher?
Yes. INE states: 'To take the eWPT exam, you'll need both an INE subscription and an exam voucher.' A bundle pairing the voucher with three months of access is one of the routes INE offers. Account for it in your total cost.
How long do I have to use the voucher?
INE states that regular vouchers expire 180 days after purchase, that you must take the exam within that time, and that a failed attempt is followed by the included free retake within 14 days — both attempts submitted before the expiry date. The certification, once awarded, is valid for three years.
What does the eWPT voucher cost in Sri Lanka?
Our eWPT voucher is Rs 64,900/= in rupees. INE publishes no US-dollar price on the certification page; buying direct is a foreign-currency charge and needs a card enabled for it, which is the usual obstacle for local candidates.
Where to go next
The step before and the step after this one, plus a comparable exam from another vendor.
