GIAC · Professional Certification · Professional
GIAC Penetration Tester (GPEN)
Crydd Score 68
Demand Growing
Career Value High
Recognition High
GPEN at a glance
- Provider
- GIAC
- Credential type
- Professional Certification
- Exam required
- Yes
- Category
- Security
- Level
- Professional
- Cost
- $999 (certification attempt)
- Difficulty
- Advanced
- Time to earn
- 3–4 months
- Validity
- 4 years (renew with 36 CPE credits and a $499 fee)
- Format
- 82 questions, 3 hours, proctored, with CyberLive hands-on questions; 73% to pass
- Prerequisites
- None stated by GIAC
What is GPEN?
GIAC's penetration testing certification: planning and running a test from reconnaissance through exploitation, password and Active Directory attacks to post-exploitation, with hands-on CyberLive questions in the exam.
Skills it covers
- Reconnaissance
- Exploitation
- Password attacks
- Active Directory attacks
- Post-exploitation
Is GPEN worth it? The Crydd Verdict
CS 68Choose it if
You test networks for a living, often with SANS training paid by an employer, and want the GIAC credential that matches.
Consider alternatives if
Paying yourself: OSCP and HTB CPTS cost less and are entirely hands-on. Starting out: PenTest+.
Why we say so
GIAC credentials are well known to large employers and government, and GPEN is their core penetration testing one.
Market demand
Penetration testers are hired steadily; postings list OSCP and GPEN most often, with GIAC common in government and enterprise roles.
Where GPEN takes you
- Penetration Tester
- Security Engineer
Career roadmaps show where this certification fits in each path. See the roadmaps.
Related certifications
Curated connections from the catalog — each labelled with how it relates to GPEN, so you know why it’s here.
Careers GPEN leads to
The professional paths this certification genuinely serves — browse every relevant credential for each.
A sensible order
Where GPEN sits on the path — build up, then step on.
Build the foundation first
Earlier steps on the same path
