GFACT Certification Cost 2026: Complete Pricing Breakdown

The Real Cost of GFACT: Every Fee Explained

Anyone researching what GFACT certification actually involves quickly runs into a pricing structure that looks simple on the surface but has several moving parts. GIAC, the ANAB-accredited, ISO/IEC 17024 personnel certification body affiliated with the SANS Institute, prices GFACT as a standalone credential - there is no bundled bootcamp requirement, and you are never forced to buy training to sit the exam. That single fact separates GFACT's cost structure from many competing entry-level certifications that quietly require paid coursework.

The baseline number you need to know is $399 for a certification attempt. From there, every subsequent transaction - a retake, an extension, a renewal - costs a flat $199. A practice exam runs $189. That's the entire fee menu. No hidden application fees, no annual maintenance dues outside the renewal cycle, and no membership tiers.

Full Fee Breakdown Table

Before you register, it helps to see every possible charge side by side. This is the complete list - nothing is omitted, and nothing else exists in the current fee schedule.

For a deeper look at how these numbers stack against other entry-level and mid-tier GIAC options, see our companion piece on GFACT certification cost pricing breakdowns for updated year-over-year comparisons.

What the $399 Attempt Fee Actually Covers

Your $399 buys one proctored attempt at a 75-question exam with a two-hour time limit and a minimum passing score of 71 percent, a standard set through a formal psychometric study for every version released on or after July 24, 2021. It also buys 120 days from the moment you activate the attempt to schedule and complete the exam - plenty of runway if you plan around it, tight if you procrastinate.

There are no prerequisites gating this purchase. GFACT is intentionally built as an entry point for career changers, students, new IT and cybersecurity hires, business professionals moving into security-adjacent roles, self-driven learners, and participants in re-skilling programs. You don't need prior certifications, a degree, or verified work experience to register - a detail covered in full on our GFACT requirements and eligibility guide.

Because the exam is web-based and proctored - either remotely through ProctorU or onsite through Pearson VUE - your fee also covers the proctoring infrastructure itself. You're not paying extra for the proctoring service unless something goes wrong, which brings us to the next section.

Retakes, Extensions, and the 120-Day Clock

The $199 retake fee is where cost planning matters most. If you fail on your first attempt, you pay half of the original attempt price to try again - not the full $399. That's a meaningful discount compared to certifications that charge full price for every sitting.

The same $199 figure applies to attempt extensions, which you'd need if your 120-day window is about to close and you're not ready. This is a common trap: candidates buy the attempt, get busy, and watch the clock run out. Requesting an extension before expiration is far cheaper than letting the attempt lapse and buying a brand-new one at full price.

There's one more cost trap worth flagging: missed proctored appointments. If you schedule a session and don't show up (or arrive too late to be admitted), GIAC charges a $175 reseating fee plus tacks on a 7-day extension to reschedule. That's nearly the cost of a full retake, just for a scheduling mistake - so treat your appointment time like a flight departure, not a loose suggestion.

SEC275 Training: Optional but Costly Add-On

GFACT's associated training course is SANS SEC275: Foundations, authored by SANS CTO James Lyne. This course is not required to sit the exam, but it's the training path GIAC and SANS design around, and it's built with hands-on labs covering Linux, encryption, and programming - even though the certification exam itself is not CyberLive (meaning you won't perform live technical tasks during the actual test).

SEC275 pricing is set separately by SANS and fluctuates with bundle promotions, live-event pricing, and OnDemand access windows, so it's not part of GIAC's fixed fee schedule above. If you're weighing whether to pay for formal training versus self-study, our GFACT study guide for passing on your first attempt walks through both paths and where self-directed learners can substitute free or low-cost resources for the paid course.

Renewal Costs: The Four-Year Bill You Can't Ignore

GFACT certification is valid for four years from the date it's earned. Renewal isn't optional if you want to keep the credential active - you have two paths: accumulate 36 CPE credits within your active four-year window and pay the $199 renewal fee, or skip CPEs entirely and simply retake the current version of the exam.

Work experience counts toward CPEs at a rate of 1 CPE per month, capped at 12 CPEs per year, so full-time work in a relevant role covers roughly a third of your renewal requirement passively over four years. The remaining CPEs typically come from training, conferences, webcasts, or other GIAC-approved activities.

One detail that surprises people: when you renew, your new four-year period extends from your current expiration date, not from the renewal transaction date. Renewing early doesn't shorten your effective certification window - it just locks in your continuity. Also worth noting: GIAC lists no grace period after expiration, so letting the clock run out without renewing means starting over rather than paying a late fee.

How GFACT Cost Compares to Other GIAC Certs

Within the GIAC catalog, GFACT sits at the entry-level price floor alongside GISF. Many intermediate and advanced GIAC certifications - particularly those tied to specialized SANS courses in penetration testing, incident response, or digital forensics - carry higher attempt fees and often bundle in more expensive multi-day training. GFACT's positioning as a low-cost, no-prerequisite credential is deliberate: it's meant to be an accessible first step, not a capstone.

If you're mapping out a longer certification roadmap, understanding where GFACT fits cost-wise matters for sequencing. Our guide on whether GFACT certification is worth the investment breaks down the return relative to its price point, and the GFACT salary guide looks at how the credential factors into early-career compensation conversations.

Budgeting Smart: A Domain-Aware Spending Plan

Because GFACT has no prerequisites and a straightforward fee structure, the smartest way to control cost is to avoid paying for retakes and extensions in the first place. That means treating your study time as seriously as your budget. A short, domain-aware timeline can prevent the $199 retake fee entirely.

Scheduling the applied and adversarial domains - Exploitation & Mitigation, Forensics & Post-Exploitation, and Logic & Programming - last gives you time to build the hardware, OS, and networking vocabulary those topics depend on. For a domain-by-domain breakdown of exactly what's tested in each area, our complete guide to all nine GFACT content areas is the natural next stop, and if you want a gut-check on difficulty before you commit study hours, our GFACT difficulty guide covers what makes certain domains harder than others.

The optional $189 practice exam is worth budgeting for if you're unsure of your readiness, but remember it draws from a limited question bank and will never include actual exam questions - treat it as a diagnostic tool, not a memorization shortcut. You can also cross-check your target score against the official standard in our breakdown of exactly what you need to pass.

Is the Price Justified?

At $399 for an attempt with no prerequisites, no mandatory training purchase, and a four-year validity window, GFACT's pricing is deliberately accessible compared to many technical IT certifications. The credential also maps to DoD 8140 directives and NIST NICE work roles, which gives it relevance for candidates targeting government-adjacent or structured enterprise career paths - something worth weighing against the fee when you're deciding if this is the right entry credential. For employers and hiring managers who value structured foundational knowledge, GFACT holders show up in listings tracked on our GFACT jobs overview, and organizations building training pipelines often route new hires through GFACT training programs for exactly this reason.

If you want a broader primer before committing budget, start with what GFACT actually is and our plain-language explainer on GFACT's meaning and purpose as a credential. You can also practice with realistic questions and timing on our GFACT practice test platform before you spend a dollar on the real exam - a smart way to gauge whether you're ready to commit the $399 or should invest more study time first. Many candidates run through practice questions here specifically to avoid the $199 retake fee down the line.

Frequently Asked Questions

GIAC positions GFACT and GISF as its two lowest-cost certifications specifically because they're entry-level credentials designed for career changers, students, and re-skilling candidates rather than experienced practitioners.