- The Short Answer: What GIAC Actually Requires
- Which GRTP This Is (and Which It Is Not)
- Formal Requirements vs. Practical Readiness
- Skills You Should Already Have Before Booking
- Exam Snapshot: What You Are Qualifying For
- How to Get an Attempt: Routes, Fees and Windows
- Exam-Day Conditions You Must Qualify For
- Retake, Extension and Waiting Rules
- Keeping the Credential: Four-Year Validity and Renewal
- A Domain-Sequenced Readiness Plan
- How GRTP Prerequisites Compare With Other Red Team Credentials
- Frequently Asked Questions
- GIAC publishes no mandatory education, experience-hours, training-hours or reference requirement to sit the GRTP exam.
- A standalone exam attempt costs USD 999 before tax; the SANS-associated exam add-on is also USD 999, with tuition separate.
- The exam has 82 questions, a three-hour limit and a 76% minimum passing score for versions released on or after January 20, 2024.
- Paper books and notes are allowed; electronic references and exam or practice-question material are prohibited.
The Short Answer: What GIAC Actually Requires
If you are searching for GRTP requirements in 2026, the formal answer is refreshingly short: there are no mandatory prerequisites. According to GIAC's published company information, you do not need a degree, a minimum number of years in the field, a set number of training hours or professional references to register for and sit the GIAC Red Team Professional (GRTP) exam. GIAC recommends preparation, but it does not gate the attempt behind a résumé check.
That does not mean the exam is easy to qualify for in the practical sense. The gap between "allowed to sit" and "ready to pass" is where most of the real requirements live. This guide separates the two so you can plan honestly. For a deeper look at the second half of that equation, see How Hard Is the GRTP Exam? Complete Difficulty Guide 2026.
Which GRTP This Is (and Which It Is Not)
The acronym GRTP is shared by more than one credential in the wider industry, so it is worth pinning down. On this site, GRTP means GIAC Red Team Professional, issued by GIAC Certifications (administered by GIAC, LLC, and historically known as Global Information Assurance Certification). Every requirement, fee and rule in this article applies to that credential only.
Two related-sounding names are separate products from separate organizations. CRTP is Altered Security's Certified Red Team Professional credential. CRTO is Zero-Point Security's Red Team Operator credential, tied to its Red Team Operations course. Neither shares GIAC's exam format, fees or policies. If you want a primer on the naming, our explainers on what GRTP certification is and what GRTP stands for cover the basics.
Formal Requirements vs. Practical Readiness
Here is how the two layers break down for GRTP.
| Requirement Type | What GIAC Publishes | What It Means for You |
|---|---|---|
| Education | None mandatory | No degree is needed to register |
| Work experience | None mandatory | No minimum years or hours specified |
| Required training | None mandatory | You may buy a standalone attempt without taking a course |
| References or endorsements | None | No sponsor or recommender needed |
| Exam fee | USD 999 before tax | Budget for this plus any prep materials |
| Preparation | Recommended, not enforced | Self-assess against the ten objectives |
Because nothing formal screens you, the exam itself becomes the filter. A 76% minimum passing score on an 82-question exam is a meaningful bar, and the details of that threshold are covered in GRTP Passing Score 2026: Exactly What You Need to Pass.
Skills You Should Already Have Before Booking
GIAC's public scope is a list of ten exam-objective headings. Official percentage weights were not published in the sources reviewed, so no objective can be called "most important" by weight. What you can do is check yourself against each heading honestly. The full breakdown lives in GRTP Exam Domains 2026: Complete Guide to All 10 Content Areas; here is the readiness view.
Adversary Emulation Fundamentals and Red Team Engagement Planning and Reporting
These bookend the exam. You should be able to explain how an engagement is scoped and why emulating a specific adversary differs from a generic penetration test.
- Understand threat-informed testing versus checklist testing
- Know how objectives, rules of engagement and findings feed a final report
- Be comfortable describing impact in terms a client would act on
Creating the Attack infrastructure and Command and Control infrastructure
Infrastructure is a defining theme of red teaming. Candidates need to reason about how operators stand up, segregate and protect their tooling.
- Know the roles of different infrastructure components and why they are separated
- Understand how C2 channels behave and how operators manage them
- Be able to interpret C2 output and tradecraft decisions, not just recite definitions
Gaining Access, Discovery and Enumeration
The operational middle of an engagement. Expect to reason about how footholds are obtained and how an environment is mapped afterward.
- Recognize initial-access approaches and their trade-offs
- Know what enumeration reveals and which findings matter next
- Connect discovery output to the next logical step
Enumerating and Attacking Privileges, Attacking Active Directory and Leveraging the Domain
This cluster is where Windows enterprise fluency pays off. If you have never worked inside an Active Directory environment, this is your biggest gap to close.
- Understand how privilege is represented, escalated and abused
- Be fluent in Active Directory concepts and common attack paths
- Know how domain-level access translates into engagement objectives
Persistence and Exfiltration
The closing stage of many operations. You should understand how access is maintained and how data movement is approached within an engagement's rules.
- Know persistence options and their detection trade-offs
- Understand exfiltration as an engagement activity with defined boundaries
A reasonable informal test: if you can talk through a full engagement from planning to reporting, naming the activities in each of the ten areas without notes, you meet the real-world requirement even though no one will ever check.
Exam Snapshot: What You Are Qualifying For
Knowing the format helps you decide whether you are ready. The figures below come from GIAC's published information and apply to the current exam, but the certification-information page tied to your purchased attempt is the authority for your specific attempt.
| Item | Detail |
|---|---|
| Questions | 82 |
| Time limit | 3 hours (single exam) |
| Minimum passing score | 76% for versions released on or after January 20, 2024 |
| Delivery | Proctored, web-based; Pearson VUE onsite or ProctorU remote, subject to attempt-specific modality restrictions |
| Format | Practitioner exam with GIAC-confirmed CyberLive performance-based virtual-machine testing |
| Validity | 4 years |
You will also see outdated figures on third-party sites. Some listings cite 75 questions, a 120-minute limit, a USD 979 fee or passing thresholds around 70%. These conflict with GIAC's current published 82 questions, three hours, USD 999 and 76%, so treat them as stale. For the pricing side in full, see GRTP Certification Cost 2026: Complete Pricing Breakdown.
How to Get an Attempt: Routes, Fees and Windows
Since there are no eligibility checks, "qualifying" mostly means acquiring an exam attempt and activating it. There are two broad routes.
Route 1: Standalone attempt
You purchase the exam directly from GIAC at USD 999 before tax. GIAC publishes no separate member and non-member price tiers. The attempt delivery policy gives you a 120-day window from activation to complete the exam. That is an access window for scheduling and sitting the exam, not the exam's duration.
Route 2: Bundled with SANS training
The related SANS course is SEC565: Red Team Operations and Adversary Emulation. When the exam is purchased as an add-on through SANS, the add-on is also USD 999, and course tuition is billed separately. For bundled training, the attempt window runs 120 days from the end of the training event and/or matches the OnDemand course deadline.
SANS lists SEC565 with six instructor-led days, 28 labs and 36 self-paced hours. Those are training features, not exam task counts or exam length. The course's capstone Capture the Flag is preparation, not a certification requirement. Training is optional for the exam, though many candidates use it as structured preparation. Our overview of GRTP training explores the options, and the GRTP Study Guide 2026: How to Pass on Your First Attempt covers how to use them.
| Cost Item | Amount |
|---|---|
| Exam attempt | USD 999 before tax |
| Failed-exam retake | USD 899 |
| 45-day extension | USD 479 |
| Practice test | USD 399 |
| Renewal by CPEs or exam | USD 499 |
For scheduling specifics and testing windows, refer to GRTP Exam Dates 2026: Testing Windows, Deadlines & Scheduling.
Exam-Day Conditions You Must Qualify For
Meeting the requirements also means complying with the proctoring rules on the day. These shape how you prepare, especially if you plan to build a paper index.
- Allowed: paper books, paper notes and a paper index.
- Prohibited: electronic or internet resources, and any exam or practice-question references.
- Answers are final: responses cannot be revised after submission. GIAC provides a limited skip allowance so you can defer a question, plus 15 minutes of break time.
- Delivery mode: Pearson VUE onsite or ProctorU remote, with possible attempt-specific restrictions on which modality applies. Check the attempt page for your purchase.
Whether a calculator is available, or whether the exam is adaptive, was not verified for this exact exam, so confirm both with GIAC's proctor guidance before test day rather than assuming.
Key Takeaway
Your paper index is effectively part of your qualification strategy. Because no electronic references are permitted, build it from your own notes and course material, organized so theory, commands and lab walkthroughs are each quick to find under a three-hour clock. Never include exam or practice-question content in it.
Retake, Extension and Waiting Rules
A failed attempt does not end your eligibility, but it does introduce waiting periods and costs.
- A failed-exam retake costs USD 899 and normally requires a 30-day wait.
- The 60-day extension option includes that waiting period.
- Three failures trigger a one-year wait before you can try again.
- Extensions add 45 days each, up to a 570-day total-access limit, at USD 479 per extension.
These rules make a clean first attempt financially valuable. The impact of pass and fail rates is discussed in GRTP Pass Rate 2026: What the Data Shows, which also explains why a published minimum passing score is not the same thing as a population pass rate.
Keeping the Credential: Four-Year Validity and Renewal
Qualification does not end on exam day. GRTP is valid for four years. To renew, you can either earn 36 qualifying CPEs during the active cycle or pass the renewal exam, with a USD 499 renewal fee. CPE documentation and payment are due before the credential expires. A discounted rate of USD 249 applies to additional renewals within two years of a full-price renewal.
If you are weighing long-term value, see Is the GRTP Certification Worth It? Complete ROI Analysis 2026. Note that no representative GRTP-holder salary dataset or verified causal salary uplift was found, so be cautious with any earnings claims; the GRTP Salary Guide 2026 treats that evidence carefully, and GRTP jobs looks at where the skills are applied.
A Domain-Sequenced Readiness Plan
Since there is no formal gate, a short plan tied to the ten objectives is the most useful way to "qualify" yourself. This is one illustrative sequence, not a validated passing method, and it assumes you already have baseline Windows and networking comfort. Adjust it to your gaps.
Foundations and planning
- Adversary Emulation Fundamentals
- Red Team Engagement Planning and Reporting
- Start the paper index skeleton with these two as bookends
Infrastructure
- Creating the Attack infrastructure
- Command and Control infrastructure
- Practice reading C2 output and explaining each decision
Access and recon
- Gaining Access
- Discovery and Enumeration
- Index the commands you reach for most
Privileges and Active Directory
- Enumerating and Attacking Privileges
- Attacking Active Directory
- Leveraging the Domain
- Allow extra time here if AD is new to you
Closing stages and review
- Persistence and Exfiltration
- Timed hands-on review across all ten areas, then finalize the index
The reasoning behind this order is that infrastructure and C2 concepts underpin everything after them, while the Active Directory cluster tends to demand the most hands-on repetition. For full-length preparation structure, the GRTP study guide goes further, and the GRTP cheat sheet offers a one-page fact review. To check retention against realistic questions, try the GRTP practice tests.
How GRTP Prerequisites Compare With Other Red Team Credentials
Candidates often ask whether GRTP is a stepping stone or a peer to other offensive credentials. These are different credentials from different bodies, so their rules never transfer.
| Credential | Issuer | Notes Relevant to Eligibility |
|---|---|---|
| GRTP | GIAC | No mandatory prerequisites; 82 questions, 3 hours, 76% minimum |
| CRTP | Altered Security | Separate credential tied to its own lab; its rules are not GRTP's |
| CRTO | Zero-Point Security | Credential is Red Team Operator, linked to its Red Team Operations course |
| OSEP | OffSec | Distinct assessment with a 47-hour-45-minute exam window followed by a 24-hour documentation-upload window; none of this applies to GRTP |
Some candidates report taking GRTP after completing another red team credential such as CRTO, but anecdotes like these do not establish a required or validated sequence. Nothing in GIAC's published policy requires holding any other certification first. For a broader view of the credential itself, see What Is GRTP? and the main GRTP certification overview.
Frequently Asked Questions
No. GIAC publishes no mandatory education, experience-hours, training-hours or reference requirements for the GIAC Red Team Professional exam. Preparation is recommended but not enforced, so the practical barrier is passing the exam itself.
No. SEC565 is the affiliated preparation course, but GIAC does not require it. You can buy a standalone attempt for USD 999 before tax, or add the exam to SANS training for the same USD 999 with tuition billed separately.
A standalone attempt has a 120-day window from activation. Bundled training gives 120 days from the end of the event and/or matching the OnDemand course deadline. These are access windows, not exam durations; the exam itself is three hours.
You can retake the exam for USD 899, normally after a 30-day wait. Three failures trigger a one-year wait. Extensions of 45 days cost USD 479 each, within a 570-day total-access limit.
Paper books, notes and an index are permitted. Electronic or internet resources and any exam or practice-question references are prohibited. Answers cannot be revised after submission, so plan your pacing and use of the limited skip allowance carefully.
It is valid for four years. You can renew with 36 qualifying CPEs during the cycle or by passing the renewal exam, with a USD 499 renewal fee. Documentation and payment must be completed before expiry.