GPEN (GIAC Penetration Tester)
GPEN follows a process-oriented penetration testing methodology: planning and scoping, reconnaissance and scanning, exploitation, Active Directory and Kerberos attacks, Azure and Entra ID attacks, and reporting. GIAC aims it at penetration testers, red and blue team members, and defenders who want to understand offensive tactics. GIAC pairs it with SANS SEC560.
Exam Details
Open-book, web-based exam, proctored remotely through ProctorU or onsite at a Pearson VUE test center. It includes CyberLive hands-on questions run in virtual machines.
Price of one certification attempt with 120 days of access. A retake after a failed attempt is $899, a 45-day extension is $479, and a practice test is $399. Prices exclude sales tax.
Requirements and Renewal
Prerequisites
None. GIAC sets no prerequisites for any certification attempt but recommends a training course first.
Renewal
Earn 36 CPEs during the four-year cycle (or retake the exam) and pay the $499 maintenance fee. Additional renewals within two years of a full-price renewal cost $249.
Exam Domains
16 domains| Domain |
|---|
| Advanced Password Attacks |
| Attacking Password Hashes |
| Azure Applications and Attack Strategies |
| Azure Overview, Attacks, and AD Integration |
| Command and Control (C2) |
| Domain Escalation and Persistence Attacks |
| Escalation and Exploitation |
| Exploitation Fundamentals |
| Kerberos Attacks |
| Metasploit |
| Password Attacks |
| Password Formats and Hashes |
| Penetration Test Planning |
| Reconnaissance |
| Scanning and Host Discovery |
| Vulnerability Scanning |
DoD 8140 Work Roles
1 work rolesThe DoD 8140 Qualification Matrix V2.1 lists GPEN as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Certification Lists
Related Tool Categories
Password hash crackers, online credential brute-forcers, and authentication testing utilities.
Intercepting HTTP proxies, security assessment toolkits, and network exploitation frameworks.
Adversary emulation platforms, C2 frameworks, and atomic test libraries for authorized red team operations.
Frequently Asked Questions
How long is the GPEN exam?→
GPEN has 82 questions and a 3-hour limit. The passing score is 73% for exam versions released on or after July 12, 2025.
Does GPEN include hands-on questions?→
Yes. GPEN is a CyberLive certification, so the exam includes performance-based questions in virtual machine lab environments.
How much does GPEN cost?→
One GPEN attempt costs $999. GIAC sells retakes for $899 and 45-day extensions for $479.
What happens if you fail a GIAC exam?→
Candidates can buy a retake within 30 days after the attempt deadline and must wait 30 days before sitting again. After three failed attempts the attempt ends, and a new one cannot be bought for one year.
Sources
Exam details are checked against official GIAC pages. Fees, exam versions, and renewal rules change; confirm with GIAC before registering. GPEN is a trademark of its owner. This site is not affiliated with or endorsed by GIAC.