GPEN
GIAC Penetration Tester · GIAC
The GPEN validates a structured penetration testing methodology on enterprise networks: planning and scoping, reconnaissance, exploitation, privilege escalation, password and Kerberos attacks, Active Directory and Azure. It is respected in large organisations and, unlike most pentest certifications, is ANAB-accredited and recognised by the US DoD. Its strength is method and rigour; its limit is that it is mostly questions-based, whereas French pentest teams prefer fully practical exams such as the OSCP.
- Exam
- 82 questions in 3 h, pass mark 73%. Open book (paper only), with hands-on CyberLive questions in a virtual machine. Taken remotely (ProctorU) or in a Pearson VUE centre.
- Exam price
- $999Same price with or without SANS training. The associated SANS course (SEC560, Enterprise Penetration Testing) costs about US$8,780.
- Required experience
- No formal prerequisite. Candidates usually know networks, Windows, Linux and Active Directory well, and often take SEC560.
- Validity and maintenance
- Valid 4 years. Renew with 36 CPE credits over the period and a US$499 fee (US$249 for each further renewal registered within two years of the first), or by passing the current exam again.
- Format
- Multiple choice and hands-on
- Recognition
- ISO/IEC 17024 accredited · DoD 8140 approved
Who is it for?
Penetration testers, red team members and internal security engineers in large organisations, especially when the employer funds SANS training.
Domains covered
- Test planning, scoping and reconnaissance
- Scanning, host discovery and vulnerability scanning
- Exploitation, Metasploit and command and control
- Privilege escalation and persistence
- Password formats, hashes and password attacks
- Kerberos attacks and domain escalation
- Azure, Entra ID and hybrid Active Directory attacks
Nestor’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
