GSEC (GIAC Security Essentials Certification)
Exam fee
$999
≈ 789 GBP · 1,349 CAD · 919 EUR · rolling-avg FX; verify with your bank before any payment
Exam code
GSEC
Renewal
4yr
The GSEC (GIAC Security Essentials Certification) is a cybersecurity certification from GIAC with an exam fee of $999 and a 4-year renewal cycle. Approved under DoD 8570. Built from the Bureau of Labor Statistics and GIAC's official exam requirements.
About the GSEC (GIAC Security Essentials Certification)
GSEC is the breadth cert in the GIAC catalog: a hands-on technical exam covering defense-in-depth fundamentals across networking, cryptography, web security, incident response, and Windows and Linux hardening. GIAC sets the exam fee at $999 for a direct exam-only attempt as of 2024; most candidates sit it after the SANS SEC401 course, which adds course tuition on top. The exam runs four to five hours with 106 to 180 questions and is open-book proctored. A 73 percent score passes. Renewal is four years through 36 CPEs. GSEC carries the same DoD 8140 IAT II and CSSP mappings as Security+, and unlike Security+, the questions assume you have actually run the commands.
Who should earn it
Hands-on security practitioners who want a more technical alternative to Security+ or CySA+, and SANS course alumni converting course completion into a credential.
Exam details
- Provider
- GIAC
- Exam code
- GSEC
- Questions
- 106-180
- Duration
- 4-5 hours
- Passing score
- 73%
- Exam fee
- $999 (verify with GIAC)
- Renewal
- Every 4 years via CPE
- Experience level
- Mid
- DoD 8570/8140
- Approved
Prerequisites
None enforced. GIAC recommends prior IT experience or completion of SANS SEC401 (Security Essentials) before sitting the exam. The exam is open-book proctored, so prepared candidates bring an indexed reference binder.
Key domains
- Defense in depth and access control
- Network security, packet analysis, and wireless
- Cryptography fundamentals and applied use
- Incident handling and contingency planning
- Windows and Linux security and hardening
- Web application security and secure communications
Federal and DoD relevance
The GSEC (GIAC Security Essentials Certification) is approved under DoD Directive 8570.01-M (now 8140), so cybersecurity roles supporting US Department of Defense information systems can use it to satisfy the baseline certification requirement for their IAT, IAM, or CSSP workforce category. That matters for federal contractors, cleared facilities, and agencies where 8140 compliance is a hiring gate.
Salary impact
GIAC certs price into mid-career bands at federal contractors and Fortune 500 security teams. SANS reports GSEC holders cluster in the same compensation band as CySA+ and Security+ holders with comparable experience. The DoD 8140 mapping makes GSEC valid for IAT II and select CSSP work roles.
Most relevant roles
This role lives inside a packaged path
Want the curriculum, comp delta, and recommended courses for this role?
DecipherU bundles cybersecurity roles into a small set of packaged paths. Each path has the curriculum sequence, the compensation delta it unlocks, and the recommended courses, all pre-set. Two ways in:
Certification details are sourced from official certifying body websites. Verify current pricing, exam format, and requirements directly with the certifying organization before making decisions. DecipherU is not affiliated with any certifying body.
Exam code GSEC. GIAC publishes 6 domains: Defense in depth and access control, Network security, packet analysis, and wireless, Cryptography fundamentals and applied use, Incident handling and contingency planning, Windows and Linux security and hardening, Web application security and secure communications. Practice questions on DecipherU are grouped by those domains.
Up to 106-180 questions in 4-5 hours, with a passing score of 73%, according to GIAC. Formats and counts change between exam versions, so confirm on the GIAC site before you book.
GIAC lists the exam fee at $999 USD. Vouchers, bundles and regional pricing differ; the fee on the GIAC site at checkout is the one that applies.
4 years, per GIAC. Renewal is through continuing education credits or by passing a current exam; GIAC sets the credit count and the deadline.
None enforced. GIAC recommends prior IT experience or completion of SANS SEC401 (Security Essentials) before sitting the exam. The exam is open-book proctored, so prepared candidates bring an indexed reference binder.
Sources
- GIAC official website · Certification pricing, exam format, and renewal requirements
- Bureau of Labor Statistics, Occupational Employment and Wage Statistics, May 2024
Related Cybersecurity Resources
Wondering if GSEC (GIAC Security Essentials Certification) is right for you?
Take a free behavioral assessment to discover which certifications align with your natural strengths and cybersecurity career goals.
Was this page helpful?
DecipherU's career insights are developed by Julian Calvo, Ed.D., M.S., with AI-assisted research and drafting, then reviewed and edited by DecipherU Editorial. Career and compensation data come from the U.S. Bureau of Labor Statistics, O*NET, and industry compensation databases. Assessment frameworks are grounded in peer-reviewed psychometric research, learning sciences (University of Miami), organizational learning (Barry University), and applied AI (Northeastern University). AI is used as a research and drafting tool; all methodology, framework design, scoring, and editorial standards are owned by the DecipherU team.