GDSA Certification Cost 2026: Complete Pricing Breakdown

The Official Price List at a Glance

GIAC Defensible Security Architecture (GDSA) is administered by GIAC Certifications, and the fees below come from GIAC's published pricing. Anyone asking what a GDSA costs should start here, because the exam fee is only one piece of the total. The full picture also includes training tuition, optional practice materials, any retake, and the long-term cost of renewal.

Prices exclude applicable sales tax. GIAC maintains its fee schedule on its pricing page, so confirm current figures there before you pay. If you are still weighing whether to pursue this credential at all, our GDSA ROI analysis puts these costs in a career context.

What the USD 999 Exam Attempt Includes

The GDSA exam is a single proctored, web-based exam with 75 questions and a 2-hour time limit. The minimum passing score is 63%. That is a score threshold, not a pass-rate statistic, and no issuer-published pass rate has been verified, so be skeptical of any site quoting one. Our GDSA pass rate article explains what can and cannot be stated honestly, and the GDSA passing score guide covers the scoring specification in more detail.

Testing Modality

You can test onsite through Pearson VUE or remotely through ProctorU, subject to GIAC's modality rules. The exam fee is the same structure either way, but onsite testing may add travel time or cost depending on proximity to a test center, while remote testing requires a suitable room and equipment. Check the proctoring requirements before scheduling so a technical or environmental problem does not derail an attempt you paid USD 999 for.

The 120-Day Clock

A standalone attempt gives you 120 days of access from activation. That window is a budget lever. Activating early and then studying slowly burns the clock without adding value, while a well-timed activation concentrates your spending around your actual readiness. Plan your study schedule first and activate once you are within range of the exam. The GDSA exam dates and scheduling guide walks through how the activation window interacts with booking a testing slot.

Training Tuition: The Cost That Varies Most

The recommended preparation for this credential is SANS SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise. The exam fee for the SANS-associated attempt is also USD 999, but tuition is a separate charge from SANS. Because tuition changes with delivery format, promotions, and employer arrangements, no single figure is reliable here; check the SANS course page and SANS affiliate pricing page for current numbers.

Training is the biggest swing factor in your total cost. Two candidates can both sit the same exam for USD 999 and arrive at wildly different totals depending on whether they bought a full SANS course, used employer sponsorship, or self-studied with books and the broader community. Our GDSA training overview compares these routes in more depth.

What You Get From the Course

SEC530 is an affiliated preparation curriculum, not the exam itself. Its sections, labs, and capstones do not establish the official exam-domain list or weights, and the live course page and the older public brochure differ in section names and content. Treat the course as strong preparation for the subject matter rather than as a one-to-one map of the exam. For the official 13-domain breakdown, read the GDSA exam domains guide.

Self-Study Versus Course Route

• Course route: Higher upfront cost, structured labs, and course books that become your open-book reference material.
• Self-study route: Lower cash outlay, but you must build your own reference index and find hands-on practice for topics like IPv6, proxies, and zero trust networking.
• Employer-sponsored route: Often the most economical for you personally; ask whether your manager or training budget covers both tuition and the USD 999 attempt.

Is the Separately Listed Practice Exam Worth USD 399?

GIAC lists a practice exam separately at USD 399. Whether it earns its price depends on your risk tolerance. Measured against a USD 899 retake, a practice attempt that reveals a weak domain before you commit to the real thing can pay for itself. Measured against a candidate who is already scoring comfortably on well-built practice questions elsewhere, it may be redundant.

Lower-cost practice options exist outside GIAC. Our GDSA practice test platform offers question-based drilling aligned to the published domains, which can complement or substitute for the official practice exam depending on your budget. Keep in mind the exam rules: electronic references and practice or exam question-and-answer materials are prohibited in the testing room, so practice resources are for preparation only and must never be brought into the exam.

Retake Math: Why a Failed Attempt Costs USD 899

A retake is USD 899, only USD 100 less than the first attempt. That near-parity matters. A failed attempt does not give you a meaningful discount; it effectively forces you to buy the exam a second time. Add the lost weeks and any additional study or lab costs, and a first-attempt pass is clearly the cheapest path.

Here is how the arithmetic plays out for exam fees alone:

These totals exclude sales tax and tuition. The point is directional: preparing thoroughly enough to avoid a retake is worth more than almost any other cost-saving tactic. For realistic expectations on difficulty before you pay, see how hard the GDSA exam is.

Hidden Costs of an Open-Book Exam

The GDSA is open book, with permitted hardcopy books, notes, and an index. That sounds like a money-saver, but it creates its own spending. Printing and binding course materials, building a personal index, and organizing tabs all take time and sometimes cash. Electronic references are prohibited, so everything you plan to consult must exist on paper.

Where Reference Costs Show Up

• Printed course books or reference texts: If you take the SANS course, books are part of the experience; if you self-study, you may need to buy or print your own references.
• Index creation: The time spent building a domain-by-domain index is effectively a cost, but it is also one of the most effective study activities for an open-book exam.
• Printing and supplies: Tabs, binders, and printing add up modestly, especially if you revise your notes repeatedly.

Keeping the Credential: Four-Year Renewal Costs

The certification is valid for four years. To renew, you complete either 36 CPE credits or a renewal examination, and you pay the renewal fee in either case. Standard renewal is USD 499. This recurring cost is easy to forget at purchase time but belongs in any honest total cost of ownership.

CPE Route Versus Renewal Exam

Earning 36 CPE credits over the four-year cycle is typically absorbed into normal professional development, such as conferences, webinars, and relevant work. Choosing the renewal exam instead means paying the renewal fee and sitting another assessment. Either path carries the USD 499 standard renewal fee, so the real difference is time and effort, not the headline price. GIAC's renewal pages and the 2026 renewal how-to guide describe the process and current requirements, and you should read them well before your expiry date.

If you amortize the USD 499 renewal across four years, the ongoing cost is modest compared with the initial investment, but it is nonetheless a real number to weigh when estimating lifetime value. Our GDSA salary guide and GDSA jobs overview help you judge whether that lifetime cost aligns with the roles you are targeting.

Three Realistic Budget Scenarios

Rather than inventing a single "typical" total, here are three structured scenarios built only from the published fees. Tuition is shown as a variable because it depends on the delivery option you choose and any employer support.

Judging the Return on Your Spend

The cost of this credential only makes sense in light of what it demonstrates. The exam covers 13 areas that map closely to modern architecture work: Cloud-based Security Architecture; Data Discovery, Governance, and Mobility Management; Data-Centric Security; Fundamental Layer 3 Defense; Fundamental Security Architecture Concepts; IPv6; Layer 1/Layer 2 Defense; Network Defenses; Network Encryption and Remote Access; Network Proxies and Firewalls; Zero Trust Endpoints; Zero Trust Fundamentals; and Zero Trust Networking. The public outline gives no percentage weights, so it would be a mistake to assume any domain counts more than another when allocating your preparation budget.

Roles that value this breadth tend to be security architect, security engineer, and network security positions, though specific hiring demand varies by employer and region. For the job-market angle, read our GDSA jobs guide, and for a deeper explanation of the credential itself see what GDSA certification is.

Tying Spend to Your Study Plan

Since cost is driven heavily by whether you pass the first time, a short, targeted plan beats open-ended studying. If you are building a schedule, front-load the domains you have the least hands-on exposure to. For many candidates that means IPv6 and Layer 1/Layer 2 defense early, since they involve protocol details that are tedious to learn from scratch, followed by the zero trust domains once the network fundamentals are solid. Our GDSA study guide lays out a full approach, and the GDSA cheat sheet helps you consolidate must-know facts into your open-book index.

If you want low-cost question practice before committing to the official attempt, the GDSA Exam Prep practice tests let you gauge readiness across the published domains without a large outlay.

Frequently Asked Questions

Overall, plan around USD 999 for the exam, add tuition if you take the course, reserve a contingency for the possibility of a retake, and remember the USD 499 renewal on the four-year cycle. For related reading, see the full GDSA certification overview and our GDSA certification cost resource for ongoing updates.