Overview
GSEC shows that a practitioner understands information security well enough to handle hands-on security tasks in IT systems, not just the terms and concepts. GIAC lists new information security professionals with backgrounds in systems and networking among its intended audience, along with administrators, operations staff, IT engineers, auditors, and penetration testers. It's a broad exam. Its 26 objectives run from access control and network architecture through cryptography, Linux and Windows hardening, cloud and AI basics, and the CIS Controls, NIST Cybersecurity Framework, and MITRE ATT&CK.
The exam is web-based and proctored, either remotely through ProctorU or at a Pearson VUE test centre, and it uses GIAC's CyberLive format with virtual machines and real security tools. SANS offers aligned training, but GIAC doesn't require it, and practical experience or college-level study can also prepare a candidate. Compared with CompTIA Security+, which covers similar breadth, GSEC has a longer exam with separate objectives for Windows and Linux security. GIAC certifications renew every 4 years rather than every 3. For incident handling, GIAC offers GCIH.
What the exam covers
GIAC publishes 26 exam certification objectives and outcome statements for GSEC, without weights.
| Part |
|---|
| Access Control & Password Management |
| Container and MacOS Security |
| Cryptography |
| Cryptography Application |
| Data Loss Prevention and Mobile Device Security |
| Defense in Depth |
| Defensible Network Architecture |
| Endpoint Security |
| Enforcing Windows Security Policy |
| Incident Handling & Response |
| Linux Fundamentals |
| Linux Security and Hardening |
| Log Management & SIEM |
| Malicious Code & Exploit Mitigation |
| Network Security Devices |
| Networking & Protocols |
| Security Frameworks and CIS Controls |
| Virtualization, Cloud Security, and AI Essentials |
| Vulnerability Scanning and Penetration Testing |
| Web Communication Security |
| Windows Access Controls |
| Windows as a Service |
| Windows Automation, Auditing, and Forensics |
| Windows Security Infrastructure |
| Windows Services and Microsoft Cloud |
| Wireless Network Security |
Requirements
GIAC does not publish a required experience level for GSEC. It notes that practical work experience, SANS training, or college-level courses and self-study can help candidates reach the needed mastery.
- Format
- Web-based proctored exam that includes CyberLive hands-on questions using virtual machines and real security tools
- Questions
- 106
- Time
- 4 hours
- Passing score
- 72% (for exam versions released on or after April 6, 2026)
- Delivery
- Remote proctoring through ProctorU or onsite at Pearson VUE test centres
No training prerequisite. Candidates have 120 days from activation of the certification attempt to sit the exam, and practice tests are sold separately.
Cost
Exam fee: USD 999 (certification attempt). From GIAC's pricing page, checked 2026-10-12. Prices are in USD and exclude sales tax. A retake is USD 899, an attempt extension USD 479, and a practice exam USD 399. GIAC says it may change pricing at any time.
Keeping it current
- Cycle
- 4 years
- Continuing education
- 36 CPE credits per 4-year cycle, or renew by retaking the exam
- Fees
- USD 499 renewal fee per cycle (additional renewals within 2 years of a full-price renewal are USD 249)
How to verify that someone holds it
An employer searches the GIAC Certification Holder Directory by name or analyst ID, or checks the holder's Credly badge. Use the issuer’s verification page.
On InfoSecHub, a GSEC listed on a profile shows Verified by Credly only when a current Credly badge issued to that person confirms it.
Typical roles
- Security administrator
- Security analyst
- IT engineer
- Operations staff
- Auditor
Related frameworks
Official resources
From GIAC. Links open the issuer’s site.
- GSEC official page, GIAC
- GIAC certification pricing and fees, GIAC
- How to renew a GIAC certification, GIAChandbook
- GIAC Certification Holder Directory, GIACverification
References
- GIAC Security Essentials (GSEC), GIAC
- GIAC certification pricing and fees, GIAC
- How to renew, GIAC
- GIAC digital badges, GIAC
Reviewed 2026-10-12. Exam details, prices, and renewal rules change. Confirm them on the GIAC website before you register. InfoSecHub is not affiliated with GIAC.