SecProve
ProfessionalVendor-neutralGIAC· issued from US

GCPN

GIAC Cloud Penetration Tester

GIAC Cloud Penetration Tester

Official page at GIAC↔ Compare with another cert
Exam fee
$979
Ongoing
$0/yr AMF · 9 CPE/yr
Study time
150–280 hrs
Delivery
Hybrid
Validity
4 yrs (renewal cycle)

› Quality score

27.5 / 40

Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.

Blueprint rigor
How well-defined and rigorous the exam blueprint is.
SEC588-aligned; explicit on multi-cloud pentest workflows (AWS / Azure / GCP).
8.0/10
Practical evidence
Hands-on labs / written reports vs pure MCQ.
Cyber Live segment includes cloud-specific exploitation labs.
6.5/10
Currency & upkeep
How aggressively content is kept current with the field.
SEC588 was refreshed in 2024; cloud content is current.
7.5/10
Market recognition
How often this signal actually moves a hiring decision.
Specialist signal among cloud red teams; recognition is climbing as cloud pentest demand grows.
5.5/10

› Exam format

75 questions + CyberLive, 3 hours, Open-Book, Proctored via Pearson VUE. Passing score: ~70%.

Passing score
69% (scaled per attempt)
Retake policy
Fee: $999 per attempt
Wait: 30d between attempts

30-day wait between attempts. SANS course bundles typically include 2 attempts.

› Recertification

Valid for 4 years. Renewal through 36 CPE credits or Renewal exam (479 USD). Each GIAC cert separately.

› NICE Framework work roles

The NIST NICE work-role IDs this cert maps to. NICCS lookup.

DD-WRL-007OG-WRL-012PD-WRL-007
Recognition
Global
Exam languages
en

› Core domains covered

The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.

A9Penetration Testing & Red Teaming

Methodology (OSSTMM, PTES), web/network/mobile pentesting, social engineering, purple teaming.

A5Cloud Security

AWS/Azure/GCP security controls, IAM policies, CSPM, container security, shared responsibility model.

› Prerequisites

Experience

No formal prerequisites. Associated SANS course strongly recommended.

› Progression

requiredrecommended

Where this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.

Required prereqs (0)

No vendor-gated prereqs.

Recommended priors (1)
GPENGIAC / SANS
GCPN
GIAC
Required by (0)

No certs require this one.

Recommended next (0)

No follow-on certs reference this one yet.

› Study materials

Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.

Official guides
Training providers
  • SANS SEC588 Cloud Penetration Testing
Practice tests
  • GIAC Practice Tests (2 included with exam)

› Version & lifecycle

Current version
2024 SEC588 refresh
Released
2024-06

› Salary signal

Cloud penetration tester, US, 4-6 years. Niche specialty with strong demand.

$130K–$195K
median $155K

Robert Half Salary Guide · 2024 · US base only · p25–p75 range

› How it compares

vs
OSCP

GCPN is cloud-pentest focused; OSCP is on-prem network pentest. Often pursued as a complement.

↔ Compare side-by-side

See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.

Highlight on the domain mapBrowse all certifications