How much does a SANS course cost?
SANS prices by course and event, not with one catalog number, so the honest answer is a range with a date on it. On November 3, 2026, the SEC401 Security Essentials course page listed $8,780 USD for every US event through early 2027, in person or live online, and the same $8,780 for the OnDemand version with four months of access. The Dubai session was $8,900. European events carry local-currency prices: €8,230 for Amsterdam and Frankfurt, £7,160 for London. Every listing notes that taxes are extra.
SEC401 is the right benchmark because it is the course most GIAC candidates start with and the one that maps to GSEC, the credential that shows up in the most job postings. Other six-day courses sit in the same band. Shorter courses, 300-level introductory courses, and Summits are priced per day and cost less. SANS does not charge more for in-person than for live online or OnDemand on the course page we checked, which is a change from the days when OnDemand carried a premium.
Two things lower that list price without changing what you get. SANS runs an Early Bird code for four- to six-day courses in the US, Canada, and Latin America, worth $900 at 200 days before the event, $750 at 110 days, and $500 at 45 days, per its North America specials page. And some events bundle extras: the December 2026 Cyber Defense Initiative in Washington, DC was offering 120 days of OnDemand access and one complimentary GIAC attempt to anyone who registered and paid by November 15. Promotions change monthly, so read the specials page for the event you want, not a blog post about last year's.
How much does a GIAC certification attempt cost?
GIAC publishes one price per certification on its pricing page. As of November 3, 2026, a practitioner certification attempt, which covers GSEC, GCIH, GPEN, GCFA, and the other mainstream credentials, is $999. A retake is $899. An extension on an attempt you have not scheduled yet is $479. A practice exam is $399 if you want more than the two practice tests that come with an attempt. The GX-series applied knowledge certifications, which are heavier on hands-on CyberLive questions, are $1,299 per attempt, or $499 if you hold the related practitioner certification. The two foundational exams are cheaper: GFACT at $399 and GISF at $499. Missing a proctored appointment costs $175 to reseat.
The number people get wrong is the bundled versus standalone price. Older forum posts describe a cheap attempt bundled with a course and an expensive challenge attempt without one. That is not what the published pages say today. GIAC's pricing page lists $999, and SANS's affiliate pricing page lists the same $999 for an attempt bought with a course or added later by a SANS alumnus, a figure it dates to November 4, 2024. The attempt costs $999 however you arrive at it. The $8,780 question is whether you take the course.
Four ways to the same GIAC exam, priced for the first year
The exam at the end of each row is identical. Only the training, the bill, and who pays it change. Figures use SEC401 and GSEC at the prices published on November 3, 2026, USD before tax.
| Route | What you pay | What you get | What you give up |
|---|---|---|---|
| Employer-funded, list price | $0 to you; $9,779 to your employer ($8,780 course plus $999 attempt), or $8,780 when an event promotion comps the attempt | Six days of instruction, the books, labs, two practice tests with the attempt, 120 days of OnDemand with eligible courses | Most of your training budget for the year, and often a stay commitment or clawback if you leave |
| Self-funded, list price | $8,879 to $9,779 after an Early Bird code of $500 to $900 if you book 45 to 200 days out | The same course, books, labs, and attempt as the employer path | About $9,000 of your own money for one credential, before a $899 retake if you miss |
| Work Study facilitator | $2,500 for the course; the GIAC attempt is often included and is comped at in-person events when you book the conference hotel or live locally; travel, lodging, and meals extra | The full course and usually the attempt, with 120 days of OnDemand for some courses | A week of setup, moderation, and teardown work, a competitive application, and only the courses and dates SANS needs facilitators for |
| Challenge the exam, no course | $999 for the attempt, $1,398 with a $399 practice exam, $2,297 if you need the $899 retake | The same proctored exam and the same certification | The courseware and labs, and the books most candidates index for the open-book exam; GIAC recommends training and you are betting on your own experience |
| Skip SANS and GIAC | $439 for Security+, $625 to $810 for CRISC with its application fee, $350 for CGE-P standalone or $70 a year for Club membership with CGE-P, CGE-AUD, and CGE-AZ included | A credential that matches GRC job postings, for the price of one GIAC practice exam or less | The SANS name and hands-on defensive depth, which matters if your target job is a SOC, IR, or forensics seat |
How does SANS Work Study cut the price?
Work Study is the one published route to a SANS seat at a fraction of list price. You apply to facilitate a class, and if SANS picks you, you pay a reduced fee instead of tuition. The Work Study page lists that fee at $2,500 USD for a four-, five-, or six-day course and $417 a day for one- to three-day courses, 300-level courses, and Summits. In-person facilitators handle event setup, courseware, securing the room, bonus sessions, and teardown on the last day. Online moderators run the virtual classroom, student communications, and daily wrap-up. SANS asks for organization, dependability, and the ability to follow direction, and it will not accept payment from a voucher account.
The GIAC attempt is usually, not always, part of the deal. SANS says an attempt will often be included but is not available for every course. For in-person events the attempt is comped on your invoice when you hold a confirmed reservation at the conference hotel, or when you are a local resident or staying with friends or family; book elsewhere and you pay for it. Some courses also come with 120 days of OnDemand access. Travel, lodging, meals, and NetWars Continuous are yours to cover, so a flight and a conference-rate hotel for six nights can add $1,500 or more to an in-person placement. Even so, $2,500 to $3,500 for the course and attempt against $9,779 at list is the biggest legitimate discount in the SANS catalog, paid for with a week of your labor.
What does it cost to keep a GIAC certification?
GIAC certifications renew every four years. Registration opens two years before expiration, and the maintenance fee is $499, non-refundable, paid once per four-year cycle at registration. You satisfy the renewal with 36 CPEs earned during the four years the certification is active, or by taking the exam again. Qualifying CPEs include SANS training, earning another GIAC certification, other accredited training, work experience up to a category cap, and career development activities, and one activity can be applied to as many as five GIAC certifications depending on its category.
Holding more than one GIAC certification gets cheaper on the second renewal, not the first. Additional renewals registered within two years of paying a full $499 cost $249 each. Against the annual maintenance fees most vendors charge, $499 every four years is about $125 a year, which lands between CompTIA's $50 and ISC2's $135. The difference is that it comes due as one bill, and that the people who earned the certification on an employer's budget are often paying the renewal on their own.
Do you need experience or the course to sit a GIAC exam?
No on both counts, and this is where SANS differs from ISACA and ISC2. GIAC's practitioner certification page lists no experience prerequisite and says candidates can attempt the certification without training. A newcomer can buy a GSEC attempt today and hold the credential the day they pass, which is not true of CRISC, CISA, or CISSP, where passing without the years gets you a score rather than a title.
The exam itself is serious. GIAC's GSEC page lists 106 questions in four hours with a 72% passing score for exam versions released on or after April 6, 2026, proctored remotely through ProctorU or onsite at Pearson VUE, and newer versions add CyberLive hands-on questions. GIAC exams are open book, which is why the standard SANS study method is building a tabbed index of the course books; a challenger has no books to index. That is the real cost of skipping the course: not a higher fee, but walking into a four-hour exam written to a syllabus you never saw.
How does a SANS and GIAC path compare with the certifications GRC roles ask for?
USD. SANS and GIAC figures from the pages linked above as of November 3, 2026. Other vendor fees from each vendor's published pricing as of September 2026, with line-item detail in Security+ cost, CRISC certification cost, and CISSP cost.
| GIAC GSEC | Security+ | CRISC | CISSP | CGE-P | |
|---|---|---|---|---|---|
| Exam or attempt fee | $999 ($899 retake) | $439 | $575 member, $760 non-member | $749 | $350 standalone, or included in $70 a year membership |
| Typical training | SEC401 at $8,780 (optional, but how most candidates prepare) | Self-study $100 to $500 | Self-study $100 to $500; bootcamps $1,500 to $3,500 | Self-study $100 to $500; bootcamps $3,000 to $5,000 | Included: course, labs, and capstone |
| Experience required | None | None (2 years recommended) | 3 years across 2 of 4 domains | 5 years paid, or 4 with a degree | None |
| Exam format | 106 questions, 4 hours, 72% to pass, proctored | Up to 90 questions, 90 minutes, 750 of 900 | 150 questions, 4 hours, 450 of 800 | CAT, 100 to 150 questions, 3 hours | Open-book exam plus a capstone submitted on GitHub |
| Renewal | $499 every 4 years, 36 CPEs or retake | $50 per year CE fee, 50 CEUs every 3 years | $45 per year member, $85 non-member, 120 CPE every 3 years | $135 per year AMF, 120 CPE every 3 years | No renewal fee |
| Realistic first year | $999 challenging, $2,500 to $3,500 Work Study, $9,779 at list | $439 to $1,500 | $900 to $4,000 | $900 to $5,000 | $70 to $350 |
| Best fit | Hands-on defensive roles, SOC, IR, federal and defense teams with SANS budgets | The entry credential job posts assume | IT risk and GRC analyst roles | Senior security and management roles | GRC engineers who build automated controls and evidence |
Who should pay for SANS? Pick by your situation
SANS is the top of the market for hands-on security training, and the labs and practitioner instructors are why. The question is never whether the course is good. It is whether the job you want pays back $9,779, and whether you or someone else is writing the check.
- Your employer has a SANS budget. Take the seat. Companies cover SANS seats for current staff far more often than they cover exam vouchers for people trying to break in, and a funded GSEC or GCIH costs you nothing but the week. Ask about Early Bird timing and event promotions so the budget stretches to the attempt, and read the stay or clawback terms before you sign.
- SOC, incident response, forensics, or offensive security. SANS is built for you, and GCIH, GCFA, and GPEN are the credentials those teams screen on. If no one is funding it, Work Study at $2,500 is the route to the same course and attempt, and a challenge attempt at $999 makes sense only if you already do the work every day.
- Federal or defense, DoD 8140 roles. GSEC and several other GIAC certifications sit on the approved lists, and many of these employers fund SANS through voucher programs. Confirm the exact certification your billet requires before you pay, because the cheaper Security+ satisfies many of the same entries.
- GRC engineer or GRC analyst, self-funded. Spend a tenth of the money. The credentials GRC postings name are CRISC, CISA, and Security+, and the work is assessing controls, automating evidence, and reporting risk, which SEC401's defensive essentials touch but do not test. CRISC runs $625 to $810 all in, Security+ $439, and CGE-P is $350 standalone or included in a $70 a year membership. Employers hire on proof of work more than on price paid, so put the other $9,000 of effort into a portfolio.
- Career changer with no security job yet. Not SANS first. If you are paying yourself while breaking in, keep the total under a few hundred dollars. ISC2 CC, Security+, or a Club membership gets you a first credential for under $500, and the full cost of getting into cybersecurity walks through every route. Come back to SANS when an employer is paying.
Where does the GRC Engineering Club fit?
SANS teaches you to defend systems and GIAC certifies that you can. Neither covers the GRC engineering job: writing policy checks that run in a pipeline, collecting audit evidence with code, and keeping a risk register fed from live cloud data. That is what the CGE-P (Certified GRC Engineer, Practitioner) tests, through hands-on labs, an open-book exam, and a capstone you submit on GitHub, with no experience requirement and no renewal fee.
The honest tradeoff is recognition. SANS has trained security teams for decades and a GIAC certification clears HR filters a newer credential does not. If you need the SANS name for a defensive role, nothing on this page replaces it. If you need to show a hiring manager that you can build the controls an auditor will test, CGE-P does that for the price of a GIAC practice exam, and the cheaper options across GRC are in the cheapest GRC certifications and free GRC training.
What $70 a year gets you, versus a $9,779 SANS path
Club membership is $70 per year, or $9.99 a month. Every certification in the Training Academy is included. Bought one at a time, the three current certifications are $350 each, so $1,050 of credentials come with a membership that costs less than most single exam vouchers.
Students and transitioning veterans pay $35 for their first year with a verified school email or .mil email.
- CGE-P, CGE-AUD, CGE-AZ: training, labs, exam, and certificate, no exam fee
- Hands-on AWS and Azure compliance labs you build in your own account
- Weekly private podcast and live Q&A with working GRC engineers
- Mock interviews, playbooks, and live builder sessions
- Local chapters and a Slack of 1,600+ GRC professionals
- 4 CPE hours a month (48 a year) logged to your transcript, earned through articles, live Q&As, recordings, labs, and courses, to self-report to ISC2, ISACA, IAPP, or GIAC
Frequently asked questions
How much does a SANS course cost?
As of November 2026, SANS lists its flagship six-day course, SEC401 Security Essentials, at $8,780 USD whether you attend in person, live online, or OnDemand, with a $8,900 price for the Dubai event. The same course is priced at €8,230 in Amsterdam and Frankfurt and £7,160 in London. Shorter courses and 300-level courses cost less. Taxes are extra, and SANS reprices by event, so check the course page for the session you want before budgeting.
How much does a GIAC certification cost?
A GIAC practitioner certification attempt such as GSEC, GCIH, or GPEN is $999 on GIAC's pricing page as of November 2026. A retake is $899, a practice exam is $399, and an attempt extension is $479. The GX-series applied knowledge certifications are $1,299, and the foundational GFACT and GISF are $399 and $499. GIAC lists one attempt price per certification; the SANS affiliate page lists the same $999 when you buy the attempt with a course or add it later as a SANS alumnus.
Can I take a GIAC exam without taking the SANS course?
Yes. GIAC says candidates can attempt a certification without training and lists no experience prerequisite. Buying the attempt on its own is called challenging the exam, and it costs the same $999 as the bundled attempt. What you give up is the courseware, the labs, and the index most candidates build from the SANS books, which is why GIAC recommends training and most people who challenge have years of hands-on experience in the exact domain.
What is the SANS Work Study program and how much does it save?
Work Study lets you facilitate a SANS class in exchange for a discounted seat. SANS lists the Work Study fee at $2,500 for a four-, five-, or six-day course and $417 a day for shorter courses, 300-level courses, and Summits, as of November 2026. A GIAC attempt is often included, and for in-person events it is comped when you book the conference hotel or live locally. Travel, lodging, and meals are not included. Against the $9,779 list price for a course and attempt, that saves roughly $6,000 to $7,000 for a week of setup, moderation, and wrap-up work.
How much does it cost to renew a GIAC certification?
GIAC certifications renew every four years. The renewal fee is $499, and if you renew a second certification within two years of paying a full-price renewal, that one costs $249. You renew either by submitting 36 CPEs earned during the four-year period or by retaking the exam. Over a decade of holding one GIAC certification you will pay for two renewals, about $1,000, on top of the original attempt.
Do employers pay for SANS training?
Many do, and the price is built for that. SANS sells to training budgets and government voucher programs, and its Early Bird codes, group purchasing, and event promotions are aimed at employers booking seats in advance. If you already work in security, ask before you spend your own money. If you are breaking in, plan on paying for your first credential yourself, and SANS is rarely the first credential anyone pays for out of pocket.
Is SANS worth it for a GRC engineer?
It depends on the job. SANS courses are hands-on security training: detection, incident response, forensics, penetration testing, and the defensive essentials in SEC401. If you are a GRC engineer who assesses, automates, and reports on controls, the credentials hiring managers ask for are CRISC, CISA, Security+, and increasingly a build credential like CGE-P, each of which costs a tenth of a SANS path or less. If your GRC role sits inside a SOC or a federal defense team that funds SANS and counts GSEC toward DoD 8140, take the seat.
What is the cheapest way to get a GIAC certification?
Challenge the exam for $999 with no course, or facilitate through Work Study for $2,500 with the attempt often included. Below that, SANS and GIAC run promotions that bundle a complimentary attempt with a full-price course, which lowers the bundle to $8,780, and Early Bird codes take $500 to $900 off a four- to six-day course booked 45 to 200 days out. There is no student or self-funded discount on the attempt itself as of November 2026.