SANS Cyber Academies: Building the Future Cybersecurity Workforce

This program is designed for individuals with limited experience in cybersecurity who are looking to jump start their career and gain foundational cybersecurity knowledge and skills. If you already hold advanced cyber security certifications you may be ineligible for the program.

If you hold advanced certifications you may want to explore our SANS.edu certification programs, degree pathways, or advanced single-course offerings instead. Our in-house funding programs are detailed on our tuition page for you to consider as well.

Starting September, 2025, applicants are allowed a maximum of two lifetime attempts of the Aptitude Assessment when reapplying to the SANS Cyber Academy Programs. If you are eligible for a retake, a Retake Request Form will be available in your Academy application portal. If the form does not appear, you are not eligible to retake the assessment.

Please note: At least six months must have passed since your last attempt before you can retake the assessment, if eligible.

Who is Eligible:

• U.S. citizens or legal permanent residents
• Applicants who show cybersecurity aptitude through an online assessment
• Active-duty service members must be within 6 months of separation (due to the program’s intensity)

Not Eligible: 

• Full-time students (due to the program’s intensity)
• Anyone with a graduate degree in cybersecurity or a related field (undergraduate degrees are okay)
• Anyone who already holds a GIAC certification (GFACT may be allowed)
• Anyone with advanced cybersecurity certifications
• Anyone with past or current work experience in cybersecurity or information security
• Anyone who has completed or been dismissed from a SANS Cyber Academy program

• The process includes an initial online application, an aptitude assessment, and an interview for shortlisted candidates.
• Only those who complete each stage will be considered for acceptance.

Yes. SANS Cyber Academy is a 100% free, merit-based training program. Selection is competitive and based on aptitude, not financial need. There is no cost to accepted participants. 

• The program runs for approximately one year.
• Each course must be completed within a three-month window, including preparation for certification exams.
• Participants should expect to dedicate significant study time to succeed.
• Each course requires approximately 150 hours of preparation.

• SEC275: Foundations & GFACT Certification
• SEC401: Security Essentials & GSEC Certification
• SEC504: Incident Handling & GCIH Certification

GIAC certifications serve as the capstone for each training course and must be earned. Successfully passing the corresponding GIAC exam is required to advance to the next SANS training course in the academy.

• Admission to the SANS Cyber Academy is highly competitive.
• Selection is based on aptitude, commitment, and the ability to succeed in an intensive training environment.
• Not everyone who applies will be accepted, and only the most qualified applicants will be selected.

The SANS Institute does not charge any fees to apply for the SANS Cyber Academy programs, but applicants for some academy programs may need to pay fees for official transcripts (unless directly told they can submit unofficial transcripts only) which are handled by external colleges/universities companies with their own charges.