GRTP Certification Cost 2026: Complete Pricing Breakdown

The Full GRTP Price List

Cost searches for this credential attract a lot of stale numbers, so start with the figures GIAC publishes. The certification is the GIAC Red Team Professional (GRTP), issued by GIAC Certifications (administered by GIAC, LLC) and aligned with the SANS SEC565 course on red team operations and adversary emulation. The pricing below comes from GIAC's pricing and fees page and the affiliate pricing page, which was effective November 4, 2024.

Two points to note. First, GIAC publishes one exam price rather than a ladder of tiers. Second, taxes are not included in the USD 999 figure, so your final invoice depends on your location.

What the Exam Fee Actually Buys

The USD 999 fee buys one proctored attempt at the GRTP exam: 82 questions in 3 hours, with a minimum passing score of 76% for exam versions released on or after January 20, 2024. The format is a web-based practitioner exam that uses GIAC's CyberLive performance-based virtual-machine testing. GIAC has not published an exact item-type mix or scored/unscored counts, so no one can honestly tell you how many items are hands-on versus conventional.

The attempt can be taken onsite through Pearson VUE or remotely through ProctorU, subject to attempt-specific modality restrictions listed on GIAC's proctoring page. Your purchase also starts an access clock: a standalone attempt runs 120 days from activation, while bundled-training attempts run 120 days from the end of the event or the matching OnDemand course deadline. That window is preparation and scheduling time, not exam duration.

For the details that affect how you spend your study budget, such as the exam rules on paper books and indexes, see our GRTP passing score breakdown and the GRTP requirements guide. There is no mandatory education, experience, or training prerequisite, which means the exam fee is the only gate cost for entry.

Two Purchase Routes: GIAC Direct vs. the SANS Add-On

Most of the real cost variation comes from how you prepare, not from the exam itself.

Route A: Buy the attempt directly from GIAC

You pay USD 999 and study with whatever materials you choose. This suits candidates who already operate in red team environments, perhaps coming from other hands-on credentials, and who want to validate skills without paying for a full course.

Route B: Attach the exam to SANS SEC565

The SANS affiliate price for the exam add-on is also USD 999, with tuition on top. The current SEC565 course page lists six instructor-led days, 28 labs and 36 self-paced hours. Those are training features rather than exam task counts. SANS groups the ten GIAC objectives into six practical course domains and finishes with a capstone Capture the Flag, which is preparation, not a certification requirement.

SANS publishes tuition on the course page and it changes, so we do not quote a figure here. Check the live price before you budget.

Our complete guide to the 10 GRTP content areas maps each objective to what you should be able to do, which helps you decide how much of the course you actually need.

Retake and Extension Math

Failure is where unplanned costs appear. The rules from GIAC's retakes and extensions policy (May 20, 2025):

• A failed-exam retake costs USD 899 and normally requires a 30-day wait.
• The extension option adds 45 days for USD 479, within a 570-day total-access limit; the policy notes a 60-day figure that includes the wait period.
• Three failures trigger a one-year wait before another attempt.

Practical arithmetic: a first attempt plus one retake costs USD 999 + USD 899 = USD 1,898 before tax. Add a single extension and you reach USD 2,377. Those are straight sums from published fees, not forecasts of what you will pay.

If you are weighing how likely a retake is, read how hard the GRTP exam really is and the GRTP pass rate analysis. Note that GIAC has not published a population pass rate, and a seller's customer-success claim is not the same thing as one.

Preparation Spending That Counts

GIAC's own practice test: USD 399

GIAC sells an official practice test at USD 399. It is the closest thing to a format preview from the issuer, which matters when the real exam uses CyberLive and the exact item mix is unpublished. Whether it is worth the price depends on how much format uncertainty you can tolerate.

Third-party practice material

Marketplace practice-test listings exist at lower prices, but quality varies and paid content cannot be verified from outside. One caution is specific to this exam: interpreting C2 output in a multiple-choice scenario is not the same as operating a live virtual machine. A practice bank can help with recall of concepts, but it cannot substitute for hands-on repetition. Be especially skeptical of "dump" style sites that make unverifiable customer-success claims; they also risk violating GIAC's rules on exam content. For legitimate question practice, our GRTP practice tests are built for concept review and format familiarity.

Books, indexes and printing

The exam allows paper books, notes and an index, but prohibits electronic and internet references and exam or practice-question references. That makes a well-built paper index a real cost line: printing, binding and tabs. It is modest compared to the exam fee, but it is not zero. Our GRTP cheat sheet and the GRTP study guide show how to structure a theory, command and lab index.

Home lab costs

If you skip the course, budget for a lab of your own: virtualization hardware or cloud instances for an Active Directory environment, plus C2 and redirector infrastructure. Cloud hosting bills vary by provider and usage, so we cannot give a number, but candidates who build attack infrastructure from scratch should not assume it is free. This directly mirrors the exam objectives Creating the Attack infrastructure and Command and Control infrastructure.

The Four-Year Cost: Renewal

GRTP is valid for 4 years. To renew you need either 36 qualifying CPEs earned during the active cycle or a pass on the renewal exam, plus a USD 499 renewal fee. CPE documentation and payment are due before expiry. Subsequent renewals within 2 years of a full-price renewal cost USD 249.

So the base ownership cost over one full cycle, using only published numbers, is the exam fee plus renewal: USD 999 + USD 499 = USD 1,498 before tax, excluding preparation and any retakes. CPEs themselves can often be earned through work activity, conference attendance or training, but any money you spend on that is your own variable cost.

Three Budget Scenarios

These scenarios use only the published fees. Add your own tuition, tax and lab costs.

Judging Return Without Invented Numbers

It is tempting to justify a four-figure exam fee with a salary promise. We cannot, and neither should anyone else. No representative dataset of GRTP-holder salaries exists in the sources we verified, and no causal salary uplift from holding the credential has been established. General red team job salaries are not evidence for this specific certification, and a salary table on a SANS career page that is labeled for a different role should not be used as GRTP evidence either.

A more honest way to evaluate return:

• Role fit: Does your target role involve adversary emulation, Active Directory attack paths, C2 operation and engagement reporting? Those are exactly the ten objectives GRTP tests.
• Employer funding: Many security teams fund GIAC exams, and the USD 999 fee is easier to justify when an employer pays.
• Skill validation: The CyberLive format tests applied skill in virtual machines, which is the part of GRTP most likely to differentiate it from knowledge-only credentials.

For deeper analysis, see whether the GRTP certification is worth it, the GRTP salary guide, and the GRTP jobs overview to see which roles actually reference the credential.

Where GRTP Sits Next to Other Red Team Credentials

Candidates often compare costs across vendors. Keep the identities separate: CRTP is Altered Security's own Certified Red Team Professional credential, CRTO is Zero-Point Security's Red Team Operator credential from its Red Team Operations course, and OSEP is OffSec's credential with its own long-form assessment and separate documentation window. Their formats, fees and objectives are different from GRTP's and should never be merged with the GIAC figures above. Check each vendor's current page before comparing prices, as those fees are not covered here and change independently. The cost difference you will notice most is structural: GIAC charges per attempt with a published retake and extension schedule, plus a renewal cycle. Several other credentials bundle exam access differently or do not require renewal in the same way, so compare total cost of ownership across the credential's full life, not just the sticker price.

Frequently Asked Questions