GIAC Certified Professionals Directory: How to Search, Verify and Find GIAC Certification Holders

What is the GIAC certified professionals directory?

The GIAC certified professionals directory - also known as the GIAC certification check, GIAC certification lookup, or GIAC certification holder directory - is the official public database maintained by GIAC (Global Information Assurance Certification) listing every individual who currently holds an active GIAC certification. It exists at giac.org/certified-professional and is free to search without registration.

The directory is the authoritative source for GIAC certification verification. Because GIAC certifications are in-demand and valuable, they are occasionally claimed by people who have not actually earned them - so a real-time, official directory gives hiring managers, HR teams, contracting officers, and auditors a trustworthy way to verify GIAC certification claims.

Every GIAC certification holder is included by default when they pass their exam, though individuals can opt out of public listing if they choose. This means the absence of a name from the directory does not always indicate the absence of a certification - but the presence of a name is definitive proof.

How to access the GIAC professional directory:

Accessing the GIAC directory is straightforward. Navigate to giac.org/certified-professional and you'll find a search interface with two search options:

• Name search - enter a first and last name to find a specific GIAC certification holder
• Analyst number search - enter the specific GIAC analyst number to bring up their profile directly

Each entry in the GIAC certified professionals list displays the certification holder's name and the specific GIAC certifications they currently hold. GIAC no longer publicly posts exam scores in the directory, but every active certification held by that person will be listed.

How to verify a GIAC certification holder: step by step

GIAC certification verification through the directory takes less than two minutes when done correctly. Here is the process recommended for hiring managers, HR teams, and compliance officers performing a GIAC certification check:

GIAC directory vs SANS certification holder directory

A common point of confusion is whether SANS maintains its own directory of certification holders separate from GIAC. The short answer: there is one official certification directory, and it is maintained by GIAC, not SANS.

If you search for a "SANS certified professionals directory" or "SANS certification holder directory" you'll be redirected or pointed back to the GIAC directory because SANS does not issue certifications directly. Certifications are earned through GIAC after training from SANS (though GIAC exams can be taken independently of SANS training). So when someone asks "is GIAC the same as SANS" - they're related but not identical. SANS trains, GIAC certifies.

Verifying GIAC certifications through Credly digital badges

In addition to the official directory, GIAC has partnered with Credly to provide certification holders with digital badges. Each GIAC certification earned generates a verifiable Credly badge that the holder can display on LinkedIn, email signatures, CVs, and personal websites.

Credly badges provide a secondary verification path when the GIAC directory itself can't be used. For example, if the holder has opted out of public listing, or if you want a direct verification link rather than searching the directory:

• Click the badge - any legitimate Credly-hosted GIAC badge links to a verified credential page showing the holder's name, certification details, and issue date
• Check the URL - verified badges live on credly.com/badges/ with a unique badge identifier. If the URL doesn't match this pattern, the badge may be fraudulent
• Verify against the directory - for maximum confidence, cross-reference the Credly badge with the GIAC certified professionals directory to confirm both sources agree

GIAC's full Credly organisation page at credly.com/org/global-information-assurance-certification-giac lists every certification Credly issues on behalf of GIAC, including GCIH, GSEC, GPEN, GCFA and the full catalogue of over 40 credentials.

GIAC certification renewal and 36 CPE requirements

Understanding GIAC renewal requirements is essential for anyone verifying or managing GIAC certifications. All GIAC practitioner certifications follow the same renewal cycle:

• Validity period: Every GIAC certification is valid for four years from the date of issue
• CPE requirement: Holders must earn 36 Continuing Professional Experience (CPE) credits to renew, or they can retake the exam
• Renewal window: CPEs must be earned and submitted while the certification is still active. There is no grace period after expiry
• Cost: A renewal fee applies on top of the CPE requirements

This matters for verification because the 36 CPE requirement is what keeps a certification active in the directory. A GIAC holder who has not logged their CPEs will have their certification expire automatically at the 4-year mark, regardless of whether they actually have the experience to justify renewal. The directory is unforgiving: miss the window and the certification disappears.

Why a GIAC certification holder might not show in the directory

Occasionally a search returns no results for someone who genuinely holds a GIAC certification. Before assuming the worst, consider these legitimate reasons a GIAC certification holder might not appear:

1. The certification has expired

This is by far the most common reason. GIAC certifications are valid for four years, and expired certifications are removed from the directory the day they expire. No grace period, no warning, simply gone. If the person claims a certification from five years ago and hasn't renewed with 36 CPEs, it will not appear in the GIAC certified professionals list.

2. Name mismatch

The directory only matches exact names as registered with GIAC. Common mismatch scenarios include nicknames (Bob vs Robert), marriage name changes, cultural name order differences, and transliteration variations for non-English names. Always try multiple name variations before concluding the cert doesn't exist.

3. Recent certification processing

Although GIAC typically updates the directory in real time, there is occasionally a short delay (typically under 48 hours) between passing the exam and appearing in the public GIAC professional directory. If someone has just passed, give it a day or two.

4. Revoked certification

Rarely, GIAC may revoke a certification for violations of their code of ethics. Revoked certifications are removed from the directory. This is uncommon but worth noting as a possibility.

Common GIAC verification use cases

The GIAC certified professionals directory serves several distinct verification scenarios, each with slightly different best practices:

Employment verification for GIAC certification holders

When performing employment verification on GIAC certification holders, whether for a new hire, contractor, or background check, the directory is your first stop. For formal HR verification processes requiring documented evidence, combine the directory result with a Credly badge screenshot to satisfy most compliance requirements.

Hiring a security analyst or consultant

Before extending an offer, verify every claimed certification through the directory. For senior roles where multiple GIAC credentials are claimed, this becomes especially important. Someone claiming GSE (held by fewer than 300 people worldwide) should absolutely appear in the directory if their claim is genuine.

Contracting with an MSSP or security consultancy

When evaluating a security services provider, ask for the names of the consultants who will actually work on your account, then verify their credentials through the GIAC directory. Many contracts stipulate specific certification requirements, and this is how you confirm they're met.

Auditing your own team's certifications

For internal compliance purposes, periodically cross-reference your team's claimed certifications against the directory. This catches two issues: certifications that have lapsed without anyone noticing, and certifications that were never actually held. This is one of the core problems that TrackACert automates by tracking certification records and flagging inconsistencies proactively.

Automating cert tracking and expiry verification

Checking the GIAC directory for a single individual takes 30 seconds. Checking it for a team of twenty, across dozens of certifications, on a recurring basis - that's a different problem entirely. Manual verification doesn't scale, and the consequences of missing a lapsed certification only become apparent when it's too late.

This is where purpose-built certification expiry tracking becomes essential. TrackACert is a cert tracker designed to solve the team-scale version of this problem:

• Single consolidated view of every team member's certifications across GIAC, ISC², CompTIA, OffSec, ISACA, AWS, Microsoft and 200+ other credentials
• Automatic certification expiry tracking with email alerts at 60 and 30 days before any certification lapses, so you know before the GIAC directory drops someone for missing their 36 CPE renewal
• CPE tracking across your team with visibility on who's on track for renewal and who needs to log more credits
• Skill gap analysis mapped to security domains, showing where your team has coverage and where it doesn't
• Audit-ready exports producing clean documentation for compliance reviews in a single click

The GIAC certified professionals directory remains the authoritative source for real-time third-party verification. TrackACert complements it by giving security managers the proactive tracking layer the directory itself doesn't provide - telling you that a certification is about to expire rather than quietly removing it the day it does.

For a deeper guide to renewal windows, CPE requirements and tracking GIAC certs across a whole team, see our complete GIAC certification tracking guide.

Frequently asked questions