The current BTL2 price is £1,999 GBP for training and the exam, according to Centri’s product page. That sticker price is only the first budget line. Your real cost depends on prerequisite gaps, whether you finish within the 5-month training window, and any tax, currency-conversion, extension, or supplemental-practice charges that apply to you.
Key takeaways
- The listed training-and-exam price is £1,999 GBP; verify your final checkout total before paying.
- Activation starts 5 months of course-and-lab access and 12 months of exam access.
- The package lists 231 lessons and quizzes, 28 browser labs, and 120 lab hours.
- Two exam attempts are included, with a mandatory 10-day cooldown before the second.
- Verified eligible buyers can request a 10% discount before purchase.
What is the current BTL2 price?
Centri lists Blue Team Level 2 training and exam access at £1,999 GBP. Treat that as the provider’s base advertised price, not a guaranteed all-in amount in your local currency. Check the live product page and checkout immediately before authorization.
The official BTL2 product page labels the amount “Training and exam price.” It also says VAT invoices are available only through Corporate Sales. The page does not give every buyer a universal tax-inclusive total, so do not infer one from the headline.
A self-funded budget should therefore separate the provider price from payment-card foreign-transaction fees, exchange-rate movement, and any tax shown at checkout. Those amounts depend on the buyer and transaction. Record the GBP price and the final displayed total on the day you purchase.
If an employer is paying, ask procurement whether it needs a quotation, VAT invoice, vendor setup, or corporate license. Resolve those mechanics before a training deadline. An approved professional-development request is not the same as a completed purchase.
What does the BTL2 purchase include?
The package combines online course material, browser-based labs, allocated lab time, and exam access. Centri lists 231 lessons and quizzes, 28 browser labs, and 120 lab hours. The practical assessment includes a written report.
The product FAQ says candidates can receive up to 72 hours to complete the practical assessment and submit the report. It also says the course covers what appears on the exam or supplies clear instructions. Use the included curriculum as the primary syllabus and buy extra material only for an identified weakness.
Two exam attempts are included under the provider’s current certification and exam access policy. If the first attempt is unsuccessful, the second is subject to a mandatory 10-day cooldown. Both attempts still have to fit inside the active exam-access window. After two unsuccessful attempts, Centri may sell a third and final attempt for £100, subject to case-by-case review. If exam access expires before you pass, you must repurchase the certification; exam access cannot normally be extended, and a training extension does not extend it.
The product page separately lists the credential, digital badge, printed certificate, and challenge coin awarded after a pass. Those rewards may motivate you, but they do not reduce the study or exam workload.
| Budget item | Current provider position | Planning treatment |
|---|---|---|
| Training and exam | £1,999 GBP | Core cost; recheck at purchase |
| Course and labs | 5 months after activation | Schedule before clicking Start |
| Exam access | 12 months after activation | Expiry before a pass requires repurchase |
| Third exam attempt | £100 if approved after two failures | Final attempt; case-by-case review |
| Training extension | Normally one: 31 days for £100 or 62 days for £150 | A second is enabled only on request; exam access is unchanged |
| Supplemental platforms | Not required by the provider | Buy only for a diagnosed gap |
Which prerequisite gaps can increase the BTL2 cost?
There are no mandatory exam entry prerequisites on the provider page. Centri nevertheless describes BTL2 as advanced training for technical defenders, recommends BTL1 first, and targets people with 2–4 years of security-operations experience. The absence of a formal prerequisite does not make the material introductory.
Before buying, test yourself against the published domains: malware analysis, threat hunting, advanced SIEM work, vulnerability management, adversary emulation, and report writing. A weak area can cost money if it pushes you into a training extension or leads you to add subscriptions without a plan.
Price gaps individually. If you lack Windows internals, packet analysis, command-line fluency, or basic incident investigation, choose a narrow resource and an exit criterion. Completing a small malware triage and explaining the evidence is measurable; watching an unspecified number of videos is not.
Buying BTL1 is not compulsory under the published rule. The provider calls it advisable, not required. Compare your existing evidence with the BTL2 curriculum and try the provider’s free BTL2 demo before turning a recommendation into another large purchase.
How should you schedule study inside the access window?
Buy when you are ready; activate when your calendar is ready. Centri’s policy says purchased training remains in Pre-Access until you manually start it. Once activated, the training timer cannot be paused, so travel, operations tempo, and family commitments belong in the decision.
BTL2 training access lasts 5 months, which the provider also states as 155 days. Exam access lasts 12 months from activation even after training access ends. The separation helps only if you preserve notes and complete the lab work while the training environment is available.
The provider itself gives inconsistent completion estimates. Its product summary says approximately 50 hours, while the FAQ says BTL2 typically takes 60–70 hours and varies with prior knowledge and pace. Use the larger range as a planning floor, then add remediation and note-review time based on your baseline.
A workable schedule has an early diagnostic, steady lesson-and-lab blocks, a mid-window checkpoint, and a protected finish buffer. Track consumed lab hours as well as calendar days. Repeating every lab indiscriminately can exhaust the 120-hour allocation without improving the skills you actually miss.
How much time should you reserve for the practical report?
Treat the report as part of the technical assessment, not clerical cleanup after the investigation. The product page says the practical assessment and written report share an allowance of up to 72 hours. It also says the report is hand-marked within 30 working days and requires a score of at least 70% to pass. Include that marking interval when working backward from an employer deadline.
Practice a repeatable workflow before starting: maintain an evidence log, note timestamps and hypotheses, separate confirmed findings from leads, and draft findings while artifacts are fresh. A technically correct investigation can become hard to evaluate if the report omits evidence paths, reasoning, or remediation.
Build a report template around the provider’s instructions without pre-writing case conclusions. Reserve time for quality control: verify each claim against evidence, normalize terminology, check screenshots and references, and read the report as an assessor who did not watch you work.
Leave enough exam-access time for the included second attempt and its 10-day cooldown. Starting near the end of the 12-month window may preserve the full duration of an attempt under the provider’s last-minute rule, but it can remove your practical chance to use the included retry. If the cooldown would prevent the second attempt before expiry, Centri says to raise a support ticket before access expires; it reviews requests individually and may provide an extension where appropriate.
Which free resources should you use before subscriptions?
Begin with the free provider demo, the published domain list, and documentation from the tools and frameworks named in the curriculum. They let you test fit and vocabulary without creating another recurring bill. Keep a gap log and add a paid resource only when free material cannot close a defined gap.
For adversary behavior, use the MITRE ATT&CK knowledge base to practice mapping evidence to techniques and defensive opportunities. For SIEM or endpoint tools, use the product’s official documentation and sample data. For reporting, write short incident findings from public lab artifacts and ask a peer to review clarity.
A supplemental lab platform can be worthwhile when you need repetitions beyond the included environment or want exposure to different telemetry. It is not automatically a BTL2 cost. Choose monthly access only when you have a study block ready and a list of exercises to finish.
The cybersecurity certification cost calculator can capture course fees and add-ons, while the certification planner can turn the activation window into milestones. Keep those planning tools separate from the provider’s official exam rules.
Which BTL2 discounts should you check?
Centri’s current policy offers a 10% discount after verification for current students, active military personnel, veterans, reservists, and emergency responders. It also provides a 10% BTL2 discount route for people who have completed BTL1. Corporate discounts depend on license volume.
Read the provider’s discount and verification policy before purchase. It says discounts appear at checkout only after verification and are not retroactive. BTL1 holders use a support request rather than expecting the price to change automatically.
Base a funding request on the verified checkout amount rather than subtracting 10% from the headline price. The payable total can still reflect transaction-specific tax or currency effects. Request verification first, then attach the actual quote or checkout evidence your employer requires.
How do you ask an employer to fund BTL2?
Give your manager an itemized business case: provider price, requested work time, activation plan, target skills, role connection, and contingency policy. State what is included and what is optional, with possible extensions shown as their own contingency line.
Tie domains to current work. For example, connect malware analysis to triage quality, advanced SIEM study to detection tuning, or report writing to incident handoffs. Identify an output you can share without exposing exam content, such as an internal knowledge session or improved investigation template.
Use the BTL2 career guide for cleared defenders to frame role relevance, then attach the live provider pages for price and access. Ask procurement to confirm vendor and invoice requirements before you choose an activation date.
Frequently Asked Questions
Is the BTL2 exam included in the price?
Yes. The product page labels £1,999 GBP as the training-and-exam price, and the access policy currently includes two exam attempts. Verify the live terms at checkout because pricing and packaging can change.
When does BTL2 access begin?
The provider says course and exam timers begin when you click Start and accept the terms, not at purchase. After activation, the 5-month training window cannot be paused. Confirm that your calendar can support regular study before activating.
Do I need BTL1 before BTL2?
No formal entry requirement is listed. Centri recommends BTL1 and positions BTL2 for defenders with 2–4 years of practical experience, but calls the prerequisites recommended rather than required. Use the demo and domain list to test your readiness.
Can I extend BTL2 course access?
Centri normally allows one training extension per certification: either 31 days for £100 or 62 days for £150. A second extension is enabled only on request. Training extensions do not extend exam access, so treat one as a contingency rather than extra exam time.
What should I do before paying for BTL2?
Open the provider’s price, access, and discount pages on the same day; obtain any eligibility verification; test the demo; and map your study blocks inside the activation window. Save the final quote, then send that itemized evidence with your funding request.