SecProve
ProfessionalVendor-neutralGIAC· issued from US

GASAE

GIAC AI Security Automation Engineer

GIAC certification for AI Security Automation. Focus on agentic workflows, automated adversary emulation, AI-enabled response playbooks. Launched April 2026 — brand new.

Official page at GIAC↔ Compare with another cert
Exam fee
$979
Ongoing
$0/yr AMF · 9 CPE/yr
Study time
—
Delivery
Hybrid
Validity
4 yrs (renewal cycle)

› Quality score

26.5 / 40

Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.

Blueprint rigor
How well-defined and rigorous the exam blueprint is.
Newest-tier GIAC AI-security blueprint covering automated AI/ML security workflows. Topical coverage is strong; depth still maturing.
7.5/10
Practical evidence
Hands-on labs / written reports vs pure MCQ.
CyberLive items focus on AI-pipeline automation tasks. Hands-on for the topic but format follows GIAC standard.
6.5/10
Currency & upkeep
How aggressively content is kept current with the field.
Brand-new (2024) — refresh cadence will be aggressive given how fast AI tooling moves.
8.5/10
Market recognition
How often this signal actually moves a hiring decision.
Too new for hiring-manager recognition yet. Watch the next 18 months.
4.0/10

› Built for these roles

Security Automation EngineersSOC EngineersDevSecOps with AI focus

› Exam format

CyberLive hands-on, proctored

Passing score
70% (scaled per attempt)
Retake policy
Fee: $999 per attempt
Wait: 30d between attempts

30-day wait between attempts. SANS course bundles typically include 2 attempts.

› Recertification

36 CPEs every 4 years

› NICE Framework work roles

The NIST NICE work-role IDs this cert maps to. NICCS lookup.

DD-WRL-001OG-WRL-014PD-WRL-001DD-WRL-004
Recognition
Global
Exam languages
en

› Core domains covered

The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.

C1Adversarial Machine Learning

Evasion attacks, poisoning attacks, model extraction, membership inference, model inversion, gradient-based attacks.

C2LLM-Specific Attacks

Prompt injection (direct & indirect), jailbreaking, prompt leaking, training data extraction, hallucination exploitation, agent manipulation.

› Prerequisites

Experience

None formal, SANS SEC598 recommended

› Study materials

Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.

Official guides
Practice tests
  • GIAC Practice Tests (2 included with exam)
Free / community

› Version & lifecycle

Current version
Launched 2024
Released
2024-09

First GIAC AI-security cert. Refresh cadence will be aggressive given how fast AI tooling moves.

› Salary signal

AI security automation engineer, US, 4-6 years. Brand-new role category.

$130K–$200K
median $160K

Robert Half Salary Guide extrapolation · 2024 · US base only · p25–p75 range

› How it compares

vs
AIGP

GASAE is the engineering-track AI-security cert; AIGP is governance/program track.

↔ Compare side-by-side

› Careers that commonly pursue this cert

ML Platform Security Engineer

Secures the platform that trains, stores, and serves ML models — multi-tenant GPU isolation, pipeline integrity, feature-store hygiene, secrets management in ML workflows.

› Common exam traps to study

Cybersecurity cert exams reuse the same 25 distractor patterns over and over — category confusion, RTO vs RPO, IDS vs IPS, MD5 vs SHA-256, and more. Once you can name the trap, you stop falling for it. Each archetype page covers what it is, the specific pairs candidates confuse, and how to avoid it.

Browse all 25 cert-exam trapsStart with: BEST vs correct

See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.

Highlight on the domain mapBrowse all certifications