GSEC
GSEC is GIAC's flagship hands-on credential proving you can actually do information security, not just talk about it — and it's the certification paired with the SANS SEC401 course. It is broad, deeply practical, and open-book, which means the four-hour clock and a strong index decide as much as your knowledge. For many roles it's a hiring filter, a DoD 8570/8140 baseline, and a salary lever, so a single failed attempt costs you a roughly $999 retake plus weeks of lost momentum. This page breaks down exactly what GSEC tests, how it's delivered, and how to get it done right the first time.
Pay Only After You Pass
No upfront fee — you settle only after your verified passing result. We advertise guaranteed results — 100% pass guaranteed or money back.
How the GIAC GSEC exam is built — at a glance
106
A single proctored exam of 106 questions — multiple-choice plus interactive items. There are no separately timed sections; it's one continuous four-hour block.
72%
You need 72% on versions released on or after April 6, 2026. There's no curve and no scaled score — clear the percentage or you don't pass.
24
GIAC publishes 24 exam objectives spanning cryptography, network and endpoint defense, Windows and Linux security, incident handling, and cloud — extremely broad coverage.
GSEC is open-book and open-note: you may bring printed course books, notes, and a personal index, but no digital devices and no internet. With 106 questions in four hours, the candidates who pass are the ones who built a tight index so they can find an answer in seconds instead of flipping through hundreds of pages.
Once you buy the certification attempt you have 120 days to schedule and sit it. GIAC offers practice tests, which are purchased separately from the attempt. If you don't pass, a retake is a separate paid attempt (roughly $999), so the math strongly favors getting it right the first time rather than treating attempt one as a dry run.
GSEC spreads across 24 objectives — these are the core knowledge areas you'll be measured on
Defense-in-depth, the CIA triad, risk concepts, authentication and authorization models, and password and identity management as the baseline of every program.
Symmetric and asymmetric algorithms, hashing, digital signatures, PKI, and applied crypto such as TLS, VPNs, and full-disk encryption — concepts over heavy math.
TCP/IP, firewalls, IDS/IPS, network protocols and their abuse, wireless security, packet analysis, and designing defensible network segmentation.
Hardening, permissions, the command line, logging and auditing, Active Directory, and endpoint defenses across both major operating-system families.
The incident-handling lifecycle, malware and attack techniques, vulnerability scanning, SIEM and log management, and threat-informed active defense.
AWS and Azure security fundamentals, containers, web and application security, mobile device security, and data loss prevention round out the modern objectives.
GIAC does not publish fixed percentage weights for GSEC — instead it lists 24 objectives that are sampled across the 106 questions, so a thin spot in any one area can quietly cost you the 72% cut score. That breadth is exactly what makes GSEC harder to fake than narrower certs.
Two ways to sit GSEC — and what to expect on test day
You take GSEC from a private room at home or office, monitored live through ProctorU. You'll complete a system check, ID verification, and a room scan before the exam unlocks. Because GSEC is open-book, the proctor also inspects your printed reference materials. Run the ProctorU compatibility check days in advance — last-minute webcam or bandwidth failures are a common reason attempts get burned.
You sit the exam in a quiet, monitored room at a Pearson VUE test center. Staff verify your government-issued ID, store your belongings, and check the printed materials you bring for the open-book portion. Test-center capacity and scheduling vary by region, so book early if you're aiming for a specific deadline.
A valid, unexpired government photo ID with a name matching your GIAC account exactly. The proctor captures a photo before the exam unlocks.
A clear desk, no phone or second monitor, and a room scan. Your permitted printed books, notes, and index are inspected — no digital devices or internet access.
Stay in frame and on-camera for the full four hours. Leaving the seat, talking aloud, or losing connection can flag or interrupt the session.
GSEC is the broad, hands-on baseline for security practitioners
No formal requirements — but the breadth is the challenge
Difficulty: No single GSEC topic is exotic, but the sheer span of 24 objectives — crypto, Linux, Windows, networking, incident handling, cloud — is what trips people up. Most candidates put in roughly 50–100 hours of focused prep plus serious time building an index. That index-building and broad-coverage grind is exactly the pressure point our help is designed to remove.
GSEC is a broad, four-hour, open-book exam where a roughly $999 retake and weeks of lost momentum ride on a single sitting. Exam Assist pairs you with a vetted GIAC specialist and works on a pay-after-you-pass model — so the risk sits with us, not you. No upfront fee, guaranteed results: Exam Assist handles the sitting end to end, and you settle only after the verified result.
Tell us your activation window, delivery method (ProctorU or Pearson VUE), deadline, and why you need GSEC. Takes a couple of minutes over WhatsApp, Telegram, or Discord.
We review your timeline and the 72% target and tell you plainly whether it's realistic — before any money is discussed. If it isn't a fit, we say so.
Exam Assist handles the sitting end to end. You're matched with a GIAC specialist who maps the work around the 24 objectives, the open-book index, and the ProctorU environment — discreetly and confidentially.
You only pay once your passing result is confirmed on your official GIAC record. No verified result, nothing owed.
Tell us your exam window and target — get a straight, no-obligation feasibility answer first.
Straight answers about the GIAC GSEC exam
Book your exam help and explore sibling GIAC certifications
Pair with a vetted GIAC specialist on a results-first arrangement. No upfront fee — settle only after a verified passing result.
Book your exam GCIHThe natural next GIAC step after GSEC — focused on detecting, responding to, and containing active security incidents.
View exam GCIAGoes deeper on network traffic analysis, IDS, and packet-level detection for blue-team and SOC roles.
View exam GPENThe offensive-security GIAC credential — exploitation, password attacks, and methodical pentest methodology.
View exam GCFEDigital forensics and incident response for analysts who need to investigate Windows systems and evidence.
View exam CatalogExplore the full catalog of certifications and admissions tests we support, from cybersecurity to cloud and beyond.
See the catalogGet expert GIAC GSEC help with no upfront fee — you settle only after your verified passing result. Honest feasibility answer first, results-first arrangement always.