What Global Information Assurance Certification does

Global Information Assurance Certification (GIAC) develops and administers cybersecurity professional certifications, operating as a subsidiary of The Escal Institute of Advanced Technologies, Inc. (d/b/a SANS Institute) and headquartered at 11200 Rockville Pike, Suite 200, North Bethesda, Maryland. Founded in 1999, GIAC holds ANAB ISO/IEC 17024 Personnel Certification Body accreditation and offers a portfolio of approximately 62 credentials organized across Practitioner Certifications, Applied Knowledge Certifications, Micro Credentials, and Portfolio tracks (culminating in the GIAC Security Professional and GIAC Security Expert apex designations). Its signature technical asset is CyberLive, a hands-on exam delivery platform that uses virtual machine environments and authentic security tools to assess practical capability rather than rote knowledge.

GIAC generates revenue primarily through one-time certification exam attempt fees, practice test purchases, and exam extensions, complemented by recurring certification renewal fees tied to CPE credit accumulation. Certifications are sold largely through a sales-led motion affiliated with SANS Institute training courses — candidates enroll in SANS training and pursue the corresponding GIAC exam — and are delivered globally through 3,500+ PearsonVUE testing centers and ProctorU remote proctoring. The company serves individual cybersecurity practitioners, enterprise workforce development programs, and U.S. government and military customers (notably via mapping to DoD Directive 8140 and the NICE Framework), with a 140,000+ certified-professional alumni base. Its 2025 product cadence included a deliberate expansion into AI security credentials (GASAE, GAIPS, GOAA, GMLE) targeting offensive AI, GenAI/LLM application security, offensive AI analysis, and machine learning engineering.

Name

Global Information Assurance Certification

Legal name

GIAC, LLC

Website

https://giac.org

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

11–50 employees

Short description

GIAC develops and administers ANAB-accredited cybersecurity certifications, offering 62 hands-on credentials delivered via its CyberLive VM-based testing platform. A subsidiary of SANS Institute, it serves individual practitioners, enterprises, and U.S. government/military customers (DoD 8140 mapped) across 40+ specialized infosec domains globally.

Ownership category

akta.pro rank

Product category

Cybersecurity Certifications

SIC

Services-Educational Services (8200), Services-Testing Laboratories (8734)

akta.pro primary industry

Cybersecurity (General) (EDAOAIAB)

akta.pro secondary industries

Information Technology (IT) & Cybersecurity Certifications (EDAAANAA), Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

Keywords

• Cybersecurity certifications
• Information security credentials
• Hands-on security testing
• Penetration testing certification
• Incident response certification

Headquarters

HQ city

Bethesda

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Certification Exam Fees: GIAC generates revenue primarily through certification exam fees. Candidates purchase certification attempts through their account after registering. Each certification has associated attempt fees.
2. Practice Tests: Candidates can purchase practice exam simulations to prepare for certification attempts. Practice tests mimic certification exams and help candidates become familiar with test format and identify knowledge gaps.
3. Exam Extensions: Candidates can purchase additional time to prepare for their certification exams, extending the activation period of their exam attempt.
4. Certification Renewal Fees: GIAC-certified professionals must renew their certifications by meeting renewal requirements and earning CPE credits, maintaining ongoing engagement with the certification body.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels8 records

Core offering

GIAC develops and administers professional cybersecurity certifications across specialized security domains including penetration testing, incident response, digital forensics, and security operations. Certifications are validated through the proprietary CyberLive hands-on testing platform using virtual machine environments, with exam delivery proctored through Pearson VUE and ProctorU partner networks.

Product overview

GIAC (Global Information Assurance Certification) offers a comprehensive portfolio of cybersecurity certifications organized across multiple categories and focus areas. The core offerings include Practitioner Certifications that validate hands-on cybersecurity skills across specialized domains, Applied Knowledge Certifications that provide comprehensive and rigorous knowledge assessment, and Micro Credentials for focused real-world ability demonstration. GIAC also provides CyberLive hands-on testing as a distinctive exam delivery platform using virtual machine environments. The certifications are organized by Focus Areas including Offensive Operations, Cyber Defense, Cloud Security, Industrial Control Systems, Digital Forensics & Incident Response, Leadership, and Artificial Intelligence. AI-focused certifications include GASAE (AI Security Automation Engineer), GAIPS (AI Platform Security), GOAA (Offensive AI Analyst), and GMLE (Machine Learning Engineer). The company also offers Portfolio Certifications leading to GIAC Security Professional (GSP) and GIAC Security Expert (GSE) credentials. GIAC certifications align with SANS Institute training courses and are ANAB accredited under ISO/IEC 17024.

Differentiator

Problem solved

Functional benefit

Products and services

• Practitioner Certifications
• Applied Knowledge Certifications
• Micro Credentials
• GIAC Portfolio Certifications
• CyberLive Hands-On Testing
• Certification Renewal Program

Quantifiable outcome

• 92% of candidates report being more confident in their abilities after certification
• +2 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability10 records

Feature3 records

Partnerships

Six partnerships are on record, tiered core and minor.

• SANS InstitutecoreStrategic or Co-development PartnerGIAC is a subsidiary of The Escal Institute of Advanced Technologies, Inc. d/b/a SANS Institute. GIAC certifications are aligned with and affiliated to SANS training courses. The organizations share infrastructure, marketing channels, and operate from the same corporate headquarters in North Bethesda, MD.
• SANS Technology InstituteminorStrategic or Co-development PartnerSANS Technology Institute (STI) is an affiliated academic institution operated by SANS. GIAC shares candidate data with STI affiliates for customer service purposes and may share certification status with affiliated entities.
• PearsonVUEcoreChannel Partner/ Reseller/ DistributorPearsonVUE provides on-site proctored testing center delivery for GIAC certification exams at more than 3,500 centers worldwide. GIAC requires candidates within 60 miles of a PearsonVUE center to utilize this option.
• ProctorUcoreTechnology or IntegrationProctorU provides remote proctoring services for GIAC certification exams, enabling candidates worldwide to take proctored exams from their own locations with secure browser lockdown and identity verification.
• U.S. Department of Defense (DoD)coreStrategic or Co-development PartnerGIAC certifications are approved and recognized under DoD Directive 8140 for cyberspace workforce qualification. GIAC works with DoD CIO office to map certifications to workforce roles and compliance requirements.
• NICE Framework (NIST)coreStrategic or Co-development PartnerGIAC certifications align with the NICE (National Initiative for Cybersecurity Education) Workforce Framework for Cybersecurity, helping professionals identify right training and certifications for desired cybersecurity roles.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• OffSec: OffSec (parent of Offensive Security) issues the OSCP and other hands-on offensive security certifications, competing with GIAC's red team and penetration testing portfolio. Both emphasize practical, performance-based assessment over multiple-choice testing.
• CompTIA: CompTIA issues Security+, CySA+, and other widely adopted cybersecurity certifications at lower price points, competing with GIAC's foundational and practitioner credentials in the commercial and government workforce segments.
• (ISC)²: (ISC)² is the issuer of the CISSP and other leading cybersecurity professional certifications, directly competing with GIAC for the same pool of practitioners and enterprise/government workforce development budgets. Both organizations operate ANSI-accredited personnel certification programs and target DoD 8140 compliance.
• EC-Council: EC-Council offers the CEH (Certified Ethical Hacker) and other offensive security certifications, competing head-to-head with GIAC's GPEN and GX-PT in penetration testing and red team credentials. Both serve government, defense, and commercial cybersecurity training markets.
• ISACA: ISACA issues CISA, CISM, CRISC, and CGEIT certifications targeting cybersecurity governance, audit, and risk professionals. ISACA competes with GIAC's leadership and cyber defense certifications for enterprise and government information security roles.

Broad incumbents

• AWS (Amazon Web Services): AWS issues cloud and security specialty certifications (AWS Security Specialty) bundled with cloud platform adoption, competing indirectly with GIAC for enterprise cybersecurity training budgets at a much broader scale.
• Microsoft: Microsoft issues the SC-100, SC-200, SC-300 security and identity certifications through its enterprise learning platform, providing low-friction, cloud-integrated alternatives that compete with GIAC for enterprise cybersecurity workforce development spending.

Others

• SANS Institute: SANS Institute is GIAC's parent company and primary training-to-certification pipeline. While not a competitor, SANS operates adjacent training, conferences, and degree programs (through SANS Technology Institute) that share the same practitioner audience and brand.

Emerging players

• CertNexus: CertNexus offers cybersecurity and emerging technology certifications (Cybersec First Responder, AI certifications) that partially overlap with GIAC's practitioner and AI-focused credentials, targeting similar enterprise workforce development buyers.
• Cloud Security Alliance: CSA issues the CCSK and other cloud security credentials, partially overlapping with GIAC's cloud security certifications such as GCAD. CSA focuses on cloud-specific knowledge and frameworks that intersect with GIAC's broader cybersecurity portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/certifygiac
• Facebookfacebook.com/GIAC.org
• LinkedInlinkedin.com/company/giac

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Global Information Assurance Certification