› Certifications · compare
Compare certifications
Pick up to 3 certifications and compare them side-by-side on cost, exam format, recertification, salary signal, quality, and domain coverage.
GIAC / SANS · expert
GREMGIAC Reverse Engineering Malware
Static + dynamic malware analysis, unpacking, custom RE tooling.
Official pageGIAC / SANS · professional
GCFAGIAC Certified Forensic Analyst
Advanced host forensics, memory analysis, timeline reconstruction.
Official pageComparing
GIAC / SANSGREM
GIAC / SANSGCFA
› Cost
Exam fee
GREM$979
GCFA$979
Exam fee
$979
$979
Annual maintenance fee
GREM—
GCFA—
Annual maintenance fee
—
—
3-year cost of ownership
GREM$979
GCFA$979
3-year cost of ownership
$979
$979
› Exam mechanics
Pass mark
GREM73% (scaled per attempt)
GCFA71% (scaled per attempt)
Pass mark
73% (scaled per attempt)
71% (scaled per attempt)
Retake policy
GREM$999 fee · 30d wait
GCFA$999 fee · 30d wait
Retake policy
$999 fee · 30d wait
$999 fee · 30d wait
Study time
GREM200–400 hrs
GCFA150–250 hrs
Study time
200–400 hrs
150–250 hrs
Validity
GREM4 yrs
GCFA4 yrs
Validity
4 yrs
4 yrs
CPE / yr
GREM9 CPEs
GCFA9 CPEs
CPE / yr
9 CPEs
9 CPEs
Delivery
GREMonline proctored
GCFAonline proctored
Delivery
online proctored
online proctored
› Salary signal (US base)
Range
GREM$120K – $180K
GCFA$110K – $160K
Range
$120K – $180K
$110K – $160K
Median
GREM$145,000
GCFA$130,000
Median
$145,000
$130,000
Premium %
GREM—
GCFA—
Premium %
—
—
Role context
GREMMalware analyst / threat-research engineer, US, 4-7 years.
GCFADFIR analyst / forensic examiner, US, 5+ years.
Role context
Malware analyst / threat-research engineer, US, 4-7 years.
DFIR analyst / forensic examiner, US, 5+ years.
› Quality (4-axis rubric · 0–10)
Schema quality
GREM9.0
GCFA9.0
Schema quality
9.0
9.0
Practice evidence
GREM7.0
GCFA6.5
Practice evidence
7.0
6.5
Maintenance
GREM7.5
GCFA8.5
Maintenance
7.5
8.5
Market recognition
GREM7.5
GCFA8.5
Market recognition
7.5
8.5
Average
GREM7.8
GCFA8.1
Average
7.8
8.1
› Recognition & lifecycle
Recognition
GREMGlobal · US · EU · UK
GCFAGlobal · US · EU · UK
Recognition
Global · US · EU · UK
Global · US · EU · UK
ISO 17024 accredited
GREM✓
GCFA✓
ISO 17024 accredited
✓
✓
DoD 8140 baseline
GREM—
GCFA✓
DoD 8140 baseline
—
✓
Holders worldwide
GREM5,000
GCFA15,000
Holders worldwide
5,000
15,000
Current version
GREM2024 FOR610 refresh (2024-06)
GCFA2024 FOR508 refresh (2024-08)
Current version
2024 FOR610 refresh (2024-06)
2024 FOR508 refresh (2024-08)
› Domain coverage
A11Detection Engineering & Threat Hunting
GREM● core
GCFA·
A11Detection Engineering & Threat Hunting
● core
·
A21Malware Analysis & Reverse Engineering
GREM● core
GCFA● core
A21Malware Analysis & Reverse Engineering
● core
● core
A7Incident Response & Forensics
GREM● core
GCFA● core
A7Incident Response & Forensics
● core
● core
A8Threat Intelligence
GREM○ touched
GCFA·
A8Threat Intelligence
○ touched
·
Browse the full catalog or open any one of these on its detail page for full study materials, peer comparisons, and lifecycle notes.