GSEC (GIAC Security Essentials)
GSEC goes beyond terminology into practical information security: access control, network defense, cryptography, cloud, Linux and Windows security, and incident handling. GIAC intends it for hands-on security roles in IT systems, and its audience includes new InfoSec professionals with an information systems or networking background. The matching SANS course is SEC401.
Exam Details
Open-book, web-based exam, proctored remotely through ProctorU or onsite at a Pearson VUE test center. It includes CyberLive hands-on questions run in virtual machines.
Price of one certification attempt with 120 days of access. A retake after a failed attempt is $899, a 45-day extension is $479, and a practice test is $399. Prices exclude sales tax.
Requirements and Renewal
Prerequisites
None. GIAC sets no prerequisites for any certification attempt but recommends a training course first.
Renewal
Earn 36 CPEs during the four-year cycle (or retake the exam) and pay the $499 maintenance fee. Additional renewals within two years of a full-price renewal cost $249.
Exam Domains
26 domains| Domain |
|---|
| Access Control & Password Management |
| Container and MacOS Security |
| Cryptography |
| Cryptography Application |
| Data Loss Prevention and Mobile Device Security |
| Defense in Depth |
| Defensible Network Architecture |
| Endpoint Security |
| Enforcing Windows Security Policy |
| Incident Handling & Response |
| Linux Fundamentals |
| Linux Security and Hardening |
| Log Management & SIEM |
| Malicious Code & Exploit Mitigation |
| Network Security Devices |
| Networking & Protocols |
| Security Frameworks and CIS Controls |
| Virtualization, Cloud Security, and AI Essentials |
| Vulnerability Scanning and Penetration Testing |
| Web Communication Security |
| Windows Access Controls |
| Windows as a Service |
| Windows Automation, Auditing, and Forensics |
| Windows Security Infrastructure |
| Windows Services and Microsoft Cloud |
| Wireless Network Security |
DoD 8140 Work Roles
22 work rolesThe DoD 8140 Qualification Matrix V2.1 lists GSEC as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Certification Lists
Related Tool Categories
Zero trust access, secure web gateways, firewalls, and perimeter enforcement platforms.
SIEM platforms, EDR agents, SOAR automation, and detection rule engines for security operations.
Infrastructure scanners, CVE audit engines, container image inspectors, and exposure management platforms.
Frequently Asked Questions
How much is GIAC Security Essentials (GSEC)?→
A GSEC certification attempt costs $999, and a retake after a failed attempt costs $899. Prices exclude sales tax.
How long is the GSEC exam and what is the pass mark?→
The exam has 106 questions with a 4-hour limit. GIAC set the passing score at 72% for exam versions released on or after April 6, 2026.
What happens if you fail a GIAC exam?→
Candidates can buy a retake within 30 days after the attempt deadline and must wait 30 days before sitting again. After three failed attempts the attempt ends, and a new one cannot be bought for one year.
Is GSEC approved for DoD 8140?→
Yes. GIAC lists GSEC among its DoD 8140 approved certifications, paired with the SANS SEC401 course.
Sources
Exam details are checked against official GIAC pages. Fees, exam versions, and renewal rules change; confirm with GIAC before registering. GSEC is a trademark of its owner. This site is not affiliated with or endorsed by GIAC.