GIAC GPEN (Penetration Tester) Requirements & Prerequisites
Everything you need to know before registering for the GIAC GPEN (Penetration Tester), eligibility, cost, format, and what to expect on exam day.
Cost
$949 (exam only), $8,500+ with SANS training
Provider
GIAC/SANS
Validity
4 years
Available
Global
Education
Check official exam requirements
Experience
1-3 years of hands-on experience recommended
Specific Requirements
- There are no formal prerequisites for GPEN. GIAC does not require prior certifications, a degree, or documented work experience.
- SANS SEC560 is the affiliated training but is not mandatory. Standalone certification attempts are sold without any training requirement.
- Working familiarity with Windows, Active Directory and Linux command lines is effectively assumed by the objectives, since CyberLive items are answered from a live system.
- Access to a practice lab with a Windows domain is close to essential given the weight of Kerberos, domain escalation and lateral movement content.
- A certification attempt must be activated before use and is then valid for 120 days, with GIAC capping total access across attempts at 570 days.
Number of Questions
82 questions
Duration
3 hours
Question Format
Multiple choice, CyberLive performance-based items answered inside a virtual machine using real penetration testing tools against real target systems
Passing Requirement
73 percent. GIAC states this applies to candidates receiving the exam version released on or after 12 July 2025.
How It Is Delivered
One proctored exam, delivered remotely through ProctorU or onsite at a Pearson VUE test centre. Open book for hardcopy material only. Answers cannot be changed once submitted, though GIAC lets you skip between 10 and 15 questions and return to them, and the sitting includes 15 minutes of break time. The certification attempt is active for 120 days from activation.
Languages Offered
English
Visit the official GIAC/SANS certification page
Create an account and select your exam
Choose a test center or online proctoring option
Pay the exam fee and schedule your date
- Two forms of valid ID (one government-issued with photo)
- Appointment confirmation email
- For online proctoring: webcam, microphone, clean desk, stable internet
What are the prerequisites for the GIAC GPEN (Penetration Tester)?
There are no formal prerequisites for GPEN. GIAC does not require prior certifications, a degree, or documented work experience.. SANS SEC560 is the affiliated training but is not mandatory. Standalone certification attempts are sold without any training requirement.. Working familiarity with Windows, Active Directory and Linux command lines is effectively assumed by the objectives, since CyberLive items are answered from a live system.. Access to a practice lab with a Windows domain is close to essential given the weight of Kerberos, domain escalation and lateral movement content.. A certification attempt must be activated before use and is then valid for 120 days, with GIAC capping total access across attempts at 570 days..
How much does the GIAC GPEN (Penetration Tester) cost?
The GIAC GPEN (Penetration Tester) exam costs $949 (exam only), $8,500+ with SANS training. This includes the exam fee only, study materials are additional.
How do I register for the GIAC GPEN (Penetration Tester)?
Visit the official GIAC/SANS certification page → Create an account and select your exam → Choose a test center or online proctoring option → Pay the exam fee and schedule your date
What should I bring to the GIAC GPEN (Penetration Tester)?
Two forms of valid ID (one government-issued with photo). Appointment confirmation email. For online proctoring: webcam, microphone, clean desk, stable internet.
Ready to prepare for GIAC GPEN (Penetration Tester)?
Get the complete exam guide with study plan, tips, and practice questions.
View GIAC GPEN (Penetration Tester) Guide