Cost breakdown
GPENHow much does GIAC Penetration Tester Certification (GPEN) cost?
The GPEN certification attempt is $999, and that is the whole exam bill if you pass first time. Proctoring is included whichever delivery you pick, and GIAC charges no separate application or scheduling fee. Budget $999 for a self-studied attempt prepared from free tooling and a printed index you build as you go, and up to $1,499 if you add a GIAC practice test and a shelf of references. SANS training is priced separately and is many times the exam fee.
Cost breakdown
| Item | Cost | Detail |
|---|---|---|
| Exam voucher | $999 | The published US list price for one attempt at GPEN. |
| Retake | $899 | A second attempt is $899, $100 less than the first. |
| SANS training course | Varies | Optional and by far the largest cost. The certification attempt can be bought on its own. |
| GIAC practice test | $399 | The pricing table lists a GPEN practice test at this price. The certification page is blunt about what it is: a simulation of the test engine and question style, drawn from a limited bank, so the same question can appear on more than one practice test, and it never includes actual exam questions. Buy one late in preparation and read it as a rehearsal of pacing and of the CyberLive items rather than as new material. |
| 45 day extension | $479 | An attempt has to be completed within 120 days of activation. An extension can be bought from 30 days before the deadline until 30 days after it, and buying one automatically cancels a scheduled appointment that is more than 24 hours away. Up to 10 extensions can be bought per attempt, and total access to one attempt is capped at 570 days whichever way you reach it. |
| Missed or late-changed appointment | $175 | Cancelling or changing a proctored appointment less than 24 hours in advance, or not turning up for it, is charged a seating fee before you can reschedule. GIAC's pricing page carries the same fee and adds a 7 day extension to the attempt when it is paid. |
| Printed index and references | $0 to $100 | GIAC exams are open book for printed material only: all printed books, notes and study guides are allowed and no digital items are. The index you build while studying is the one preparation cost a self-studied attempt really requires, and GIAC's own preparation page treats building it as part of learning the material rather than as paperwork. |
| Renewal every four years | $499 | The certification renewal fee on the same pricing table, paid once per four year cycle alongside 36 CPE credits. GIAC prices an additional renewal within two years of a full price renewal at a lower rate, which matters if you hold more than one GIAC certification. |
Exam pricing from GIAC, certification pricing ↗.
Ways to bring the cost down
Buy the attempt on its own if you already test networks for a living. GIAC publishes no prerequisite for GPEN, and its sixteen objectives are specific enough to study from directly: planning and scoping, reconnaissance, scanning and vulnerability discovery, exploitation fundamentals and Metasploit, escalation and pivoting, password attacks, formats and hashes, Kerberos and domain persistence, command and control, and Entra ID and Azure attacks.
Build the index from the first week rather than the last. An open book exam rewards the candidate who can find a fact in under a minute, and paper you write yourself costs nothing. Printed only, so no laptop, no tablet and no phone goes in with you.
The lab is free if you build it. A Linux attack box, Metasploit, nmap, Responder, Hashcat and Impacket cost nothing, a Windows domain built on evaluation media covers the Active Directory objectives, and a test Entra ID tenant covers the Azure ones. Hours in that lab are worth more than any paid question bank, and the CyberLive items are scored on what you do in one.
Schedule inside the 120 day window and keep the appointment. An extension and a seating fee together buy you no additional preparation at all, and both are avoided by putting the exam date in a calendar on the day the attempt activates.
If an employer is funding training, ask for the certification attempt to be bundled with it rather than bought separately, and check the discount listed below before anyone pays list price.
Work Study program
SANS runs a facilitator program that heavily reduces the cost of training plus a certification attempt in exchange for helping run an event.
For a good share of candidates somebody else pays this fee. The GI Bill, DoD and employer routes, with the rules each one publishes.
What a retake costs
A retake is $899, bought from the GIAC portal within 30 days of your exam deadline. Miss that window and the next sitting is a fresh $999 attempt with a new 120 days on it.
Every failure carries a 30 day wait before you can sit again, and buying the retake extends your deadline by 60 days, which includes that wait. A waiver can shorten the 30 days, but a 14 day minimum applies to every candidate and cannot be waived.
After three failed attempts the attempt is closed and GIAC requires a year before a new one can be bought, unless it accepts a waiver that outlines what has changed in your preparation and documents at least 30 hours of further training, which buys one final sitting.
Practice tests left on the original attempt are extended to match the new deadline, and a retake adds no new ones. The minimum passing score is 73 percent for exam versions released on or after 12 July 2025, set by a psychometric standard setting study, and GIAC tells you to confirm the format and score that apply to your own attempt in your account rather than assuming.
Retake pricing from GIAC, certification pricing ↗.
What renewal costs across the full cycle
A GIAC certification is active for four years, and renewing makes it active for four more. GIAC lists two routes and you choose one at the start: collect 36 CPE credits, or renew by retaking the exam.
The CPE route is the one GIAC recommends. Credits are logged, assigned and justified in the GIAC portal and then the renewal fee is paid. The knowledge base lists the categories that count, including SANS and GIAC activities, NetWars, cyber ranges and exercises, community participation, published work, graduate coursework, other information security training, non-GIAC ISO 17024 accredited certifications, and field work experience.
Renewing by exam means sitting the whole thing again, so it is the fallback for a holder who did not log credits rather than a cheaper alternative to them.
An additional renewal within two years of a full price renewal is charged at a reduced rate on the same pricing table, so somebody holding several GIAC certifications is better off lining the renewal dates up than spreading them out.
If a certification has already expired, check GIAC's renewal FAQ before assuming it is gone. It carries an entry for exactly that case, and the answer is the vendor's rather than ours to state.
Cycle length: 4 years. GIAC states that its certifications require renewal every four years and that registration is enabled at the 2-year mark prior to the certification expiration date. GIAC publishes two renewal methods: collect 36 CPE credits over four years, or renew by retaking the exam. GIAC states the certification maintenance fee is a non-refundable $499 payment, due once every four years at the time of registration.
Typical preparation budget
Preparation for GPEN can genuinely cost nothing. The realistic range people spend is $0 to $500, and the top of that range buys convenience rather than a better chance of passing.
Our questions, explanations, and cheat sheets are free, and the explanation is never paywalled. That is the part of a paid practice set you are actually buying, so it is the part we do not charge for.
The cheapest way to avoid the $899 line on this page is to be ready before you book. Free GPEN practice questions with a full explanation on every answer.
Keep reading
- GPEN practice questions
Free sample questions with the full explanation on every answer.
- Free GPEN practice test
10 original questions, playable now. No account, no card.
- GPEN exam format
How many questions, how long, what the items look like, and how long it stays valid.
- GPEN passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is GPEN?
An honest difficulty read from the format, the clock and the weights.
- GPEN guide
Who it is for, study plans by experience level, and whether it is worth it.
Practice GPEN for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free GPEN questions