GitHub Advanced Security
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
GitHub Advanced Security (GHAS) is one of the credentials in the GitHub Certification Program, which GitHub describes as providing industry-recognized credentials that validate your proficiency with GitHub technologies. The GHAS exam is aimed at people who already work hands-on with GitHub and its security features and who secure software development workflows day to day - security engineers, platform and DevOps engineers, and developers who own code security in their repositories. GitHub states the exam is designed for individuals who have a deep understanding of GitHub and its security features, as well as hands-on experience in securing software development workflows. The exam is delivered in English, Portuguese, Spanish, Korean and Japanese, and is taken through Pearson VUE either at a testing center or via online proctoring. GitHub's published exam mechanics apply across its certification exams: 100 minutes, 60 scored multiple-choice questions plus roughly 10 to 15 pretest items, closed-book, and a fee of $99 USD, with regional pricing possible. There are no formal prerequisites, but GitHub recommends a working knowledge of GitHub. Preparation is self-paced: review the skills measured section on the certification page, work through the related GitHub learning paths on Microsoft Learn, and use the study guides GitHub publishes. Register with a Microsoft Learn account, which routes you to Pearson VUE scheduling. This page is independent study material and is not affiliated with or endorsed by GitHub.
What you'll study
About GitHub Advanced Security preparation
How long is the GHAS exam and how many questions does it have?
GitHub states its certification exams are 100 minutes. Each exam comprises 60 scored multiple-choice questions and approximately 10 to 15 pretest items, varying by exam. Pretest items are unscored, so your result depends only on the scored questions. It is a closed-book assessment.
What does the exam cost, and are there discounts?
GitHub certification exams are $99 USD, and GitHub notes that regional pricing may apply and vary by country. The Student Developer Pack voucher route described by GitHub is earned through DataCamp and applies to the GitHub Foundations (GH-900) or GitHub Copilot (GH-300) exams, so it is not a GHAS voucher.
Are there prerequisites before I can register for GHAS?
No. GitHub answers the prerequisites question with a plain no, while recommending a working knowledge of GitHub and the related modules on Microsoft Learn. In practice the exam targets people with hands-on experience securing GitHub workflows, so build that experience before booking.
What happens if I fail - how soon can I retake?
You can retake. There is a 24-hour hold before the first retake, and a 14-day hold applies to each consecutive retake after the first. You may retake the exam for a total of 5 attempts per year. Plan your study time around those holds rather than booking back-to-back sittings.
How is the exam proctored, and what do I need on exam day?
All examinations are administered through Pearson VUE under proctored conditions, either at an authorized test center or via online proctoring. Online proctoring requires secure browser software and a stable internet connection. GitHub advises logging in at least 15 minutes early to complete check-in.
How long is the certification valid, and how do I renew it?
GitHub certifications are generally valid for 2 years, with GH-600 and GH-700 excepted at 1 year. GitHub is transitioning to Microsoft's recertification process; once in place, candidates will renew through an unproctored assessment on Microsoft Learn instead of retaking the full proctored exam. Certifications expiring before that process exists will be extended by 6 months.
Where will my GHAS certificate appear after I pass?
Certifications earned through Pearson VUE on or after July 1, 2025 appear in your Microsoft Learn profile. Starting July 1, 2025, GitHub no longer issues new Credly badges; certifications earned on or after that date include a downloadable Microsoft Learn certificate. Earlier PSI-earned certifications remain visible in your GitHub Learn profile.
Are practice assessments available for GHAS?
Not yet. GitHub says practice assessments are coming soon, and in the meantime points candidates to self-paced learning resources on Microsoft Learn plus the study guides published for each exam. Treat third-party question sets with caution and verify anything they claim against GitHub's own skills measured list.
What is the most common preparation mistake?
Studying generic GitHub content instead of the exam's own skills measured section. GitHub advises starting by reviewing the skills measured, then filling gaps with the related learning paths. Candidates who skip that step often over-prepare on repository basics and under-prepare on the security-specific workflows the exam targets.
Can I reschedule or cancel my appointment?
Yes. GitHub directs you to your exam program's homepage, then Upcoming Appointments, where you select the exam to reschedule or cancel and confirm on the final screen; a confirmation email follows. For help, GitHub recommends opening a support ticket, with typical ticket response within 2 to 5 business days.