Offensive Operations Certifications
GIAC's offensive operations certifications cover critical domains and highly specialized usages, ensuring professionals are well-versed in essential offensive abilities. GIAC certifications prove that you have knowledge and skills necessary to work across specialized red, purple, and exploit development teams.
Red Team Operations Certifications
Prove your ability to detect, respond to, and recover from an attack.
- Slide 1 of 4Digital Forensics and Incident Response, Cyber Defense, Offensive Operations
GIAC Certified Incident Handler (GCIH)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC504: Hacker Tools, Techniques, and Incident HandlingView certificationSignal readiness to manage real threats from detection to remediation, demonstrating effective incident handling skills and applying insight into attackers’ techniques.
- Slide 2 of 4Offensive Operations
GIAC Experienced Incident Handler (GX-IH)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC504: Hacker Tools, Techniques, and Incident HandlingView certificationProve you are an elite responder, equipped to elevate team performance with hands-on expertise in attacker behavior and response orchestration.
- Slide 3 of 4Offensive Operations
- New
GIAC Red Team Professional (GRTP)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC565: Red Team Operations and Adversary EmulationView certificationDemonstrate capability in Red Team engagement skills and operations from start to finish.
- Slide 4 of 4Offensive Operations
- AI-Focused
- New
GIAC AI Security Automation Engineer (GASAE)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC598: AI and Security Automation for Red, Blue, and Purple TeamsView certificationThe GIAC AI Security Automation Engineer (GASAE) certification validates ability to apply practical, real-world automation and artificial intelligence across offensive, defensive and cloud security operations.
Penetration Testing Certifications
Prove your mastery of successful penetration testing and ethical hacking skills.
- Slide 1 of 9Offensive Operations
GIAC Penetration Tester Certification (GPEN)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC560: Enterprise Penetration TestingView certificationProve offensive skills and expertise, from reconnaissance and exploitation to rigorous and effective reporting.
- Slide 2 of 9Offensive Operations
GIAC Web Application Penetration Tester (GWAPT)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC542: Web App Penetration Testing and Ethical HackingView certificationDistinguish your skills as a web application penetration tester equipped to secure your organization.
- Slide 3 of 9Offensive Operations
GIAC Mobile Device Security Analyst (GMOB)
Affiliated Training: SEC575: iOS and Android Application Security Analysis and Penetration TestingView certificationConvey your fluency in mobile device security and your capability to investigate and protect critical devices.
- Slide 4 of 9Offensive Operations
GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical HackingView certificationDemonstrate readiness to protect systems and networks using crucial knowledge of exploits and advanced penetration testing skills.
- Slide 5 of 9Offensive Operations
GIAC Assessing and Auditing Wireless Networks (GAWN)
Affiliated Training: SEC617: Wireless Penetration Testing and Ethical HackingView certificationConvey comprehensive command of wireless network security and expertise in effective analysis techniques.
- Slide 6 of 9Cloud Security, Offensive Operations
- AI-Focused
GIAC Cloud Penetration Tester (GCPN)
Affiliated Training: SEC588: Cloud Penetration TestingView certificationBridge cloud technology aptitude with key penetration testing skills to defend modern enterprises.
- Slide 7 of 9Offensive Operations
- Abeyance
GIAC Enterprise Vulnerability Assessor Certification (GEVA)
Affiliated Training: SEC566: Implementing and Auditing CIS ControlsView certificationThe GIAC Enterprise Vulnerability Assessor (GEVA) certification is focused on validating technical vulnerability assessment skills and time-tested practical approaches to ensure security across the enterprise.
- Slide 8 of 9Offensive Operations
- New
GIAC Experienced Penetration Tester (GX-PT)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC560: Enterprise Penetration TestingView certificationSet yourself apart as a seasoned penetration tester equipped to take command of complex challenges under real-world pressures, ensuring red and purple teams excel.
- Slide 9 of 9Offensive Operations
- AI-Focused
- New
GIAC Offensive AI Analyst (GOAA)
CyberLiveTM: Hands-on TestingAffiliated Training: SEC535: Offensive AI - Attack Tools and TechniquesView certificationThe GIAC Offensive AI Analyst (GOAA) certification validates ability to apply practical, real-world offensive artificial intelligence techniques to modern cybersecurity challenges.
Purple Team Certifications
Improve the "red-blue" feedback loop by certifying in cross-focus areas.
- Slide 1 of 2Cyber Defense, Offensive Operations
GIAC Foundational Cybersecurity Technologies (GFACT)
Affiliated Training: SEC275: Foundations: Computers, Technology, & SecurityView certificationEstablish proficiency in core cybersecurity knowledge and practical skills, signaling readiness to contribute on day one in a new career.
- Slide 2 of 2Offensive Operations, Cyber Defense
GIAC Defending Advanced Threats (GDAT)
Affiliated Training: SEC599: Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain DefensesView certificationConvey proficiency across the full picture of offensive and defensive security with the ability to prevent, detect, and respond to traditional and APT-style attacks.
“My GIAC penetration testing certification is important to me because just knowing or being able to read a vulnerability management tool report isn't good enough. Being able to and knowing how to exploit a vulnerability not only looks good for you, but the impact it has on the business is extremely valuable. Knowing you're helping your company stay more secure is its own reward.
”