Exam Format

• Exam Code: GH-500
• Certification Level: Professional / Advanced
• Exam Duration: 120 minutes
• Passing Score: Not publicly disclosed by GitHub (scaled scoring model)
• Unscored Content: The exam may include unscored items for research purposes that do not affect your final score.

Exam Details

• Question Types: Multiple choice, multiple select, scenario-based questions
• Number of Questions: Approximately 60 questions
• Hands-On / Lab: No live lab; includes scenario-based security configuration and remediation questions

Exam Policies

• Exam Delivery: Online proctored exam through GitHub’s authorized certification provider
• Rescheduling/Cancellation: Must follow the testing provider’s policy (typically 24–48 hours before the scheduled time)
• Waiting Period: Retake policy applies if unsuccessful (waiting period enforced by testing provider)
• Retake Fee: Full exam fee required for each retake attempt

Certification Validity and Renewal

• Validity: 3 years
• Renewal Options: Recertification by passing the current version of the exam before expiration

Exam Fee

• Base Fee: $99 USD (may vary by region)
• Taxes: Applicable local VAT/GST may apply depending on country

Prerequisites

• Experience with GitHub repositories and organizational administration
• Understanding of secure software development lifecycle (SSDLC) principles
• Familiarity with CI/CD pipelines and GitHub Actions
• Knowledge of application security fundamentals

Exam Topics

• GitHub Advanced Security Overview – Licensing, enabling GHAS features, security configuration
• Code Scanning – Static application security testing (SAST), CodeQL workflows, SARIF results, alert management
• Secret Scanning – Detection patterns, custom patterns, push protection, alert remediation
• Dependency Management & Supply Chain Security – Dependabot alerts, dependency review, security advisories
• Security Policies & Governance – Security policies, branch protection, required reviews, audit logs
• Automation & DevSecOps Integration – Integrating security into CI/CD workflows using GitHub Actions

Intended Audience

• Security Engineers
• DevSecOps Engineers
• GitHub Administrators
• Application Security Specialists
• Platform / DevOps Engineers

Career Impact

Jobs You Can Get:

• DevSecOps Engineer, Application Security Engineer, GitHub Security Administrator, Cloud Security Engineer

• Varies by region — U.S.: $100,000–$150,000 USD; India: ₹10,00,000–₹25,00,000 INR; United Kingdom: £55,000–£85,000 GBP

• Demonstrates validated expertise in implementing enterprise-grade security controls within GitHub and integrating security into modern DevOps workflows

Exam Mode

• The exam is delivered online through GitHub’s official certification testing platform with remote proctoring.

Exam Booking Link

• Book the GitHub Advanced Security (GH-500) exam via the official GitHub Certification portal.

Once you pass the exam:

• Access and download your digital badge
• Share your certification on professional platforms such as LinkedIn
• Certification status is available within your GitHub Certification dashboard

Offers