Start with free labs, expand your practice with an Individual plan, or train your team with shared learning and progress tracking. The GSCP and GSCE certifications are bought separately.
For one practitioner working through the material at their own pace.
Personal use. Not licensed for company-managed training.
For a focused, time-boxed run at the material — a project, exam prep, or a stretch between engagements.
For one practitioner working through the material at their own pace.
Personal use. Not licensed for company-managed training.
Every seat gets all 200+ labs and the curriculum, plus the tools to assign paths, track OWASP coverage and export completion evidence. Billed per seat, from 4 seats.
For a squad training together, with the admin tooling to run it.
For a squad training together, with the admin tooling to run it.
For organisations rolling training out across security and engineering, with procurement to satisfy.
Assign training, track OWASP-LLM coverage across your team, pull compliance and certification reports, and manage seats, groups, and your login policy from one console.
Sample data — not a real team.
Transparent pricing, no surprises at checkout. Lab access is a straightforward membership for hands-on practice anytime; the certifications — GSCP and GSCE — are separate, one-off purchases that include lab access so you can prepare: one month with GSCP, three months with GSCE.
Individual and Team are subscriptions to the 200+ labs and the curriculum.
GSCP ($199) and GSCE ($399) are one-off purchases that never renew. GSCP includes one month of labs to prepare, and GSCE three months.
The credentials aren't part of an Individual or Team plan — you buy them on their own, and you always know exactly what's included before you pay.
These sit alongside any plan and are quoted separately — they are not part of a subscription tier.
A private lab built around one of your own applications — your stack, your data shapes, one attack technique.
Instructor-led days taught by the founder, Aditya Agrawal, run privately for your team on dates agreed with you.
Scroll sideways to compare all 4 plans — the feature column stays put.
| Features | Free Free | Individual $19/mo | Team $39/seat/mo | Enterprise 5+ users |
|---|---|---|---|---|
| Training | ||||
Labs | 25 community labs | Every lab | Every lab | Every lab |
Full curriculum | Foundations, LLM01 (prompt injection) and LLM02 (sensitive data) only | |||
Progress tracking | — | |||
| Certification | ||||
GSCE certification attempt | — | Buy standalone — labs included | 25% off on a yearly plan | GSCP + GSCE for every seat |
| Team management— what the Team plan adds | ||||
Centralized billing & seat management | — | — | ||
Assign labs & learning paths | — | — | ||
Groups & role-based access | — | — | ||
Coverage insights | — | — | ||
Usage & engagement analytics | — | — | ||
Compliance & certification reports | — | — | ||
Audit log | — | — | ||
SSO / login policy | — | — | Email/password, Google & GitHub, passwords-off switch, custom session timeout & allowed domains | Team's sign-in policy, plus SAML SSO and SCIM on request |
| Add-ons | ||||
Instructor-led training access | — | — | Bought separately | Bought separately |
Custom labs access | — | — | Bought separately | Bought separately |
| Support | ||||
In-app feedback & support | ||||
Support channel Team Slack on annual plans | Docs | Email + Slack | Dedicated support | |
25 community labs against live AI models, no card required — enough to run the Attack → Defend → Verify loop and decide whether the approach fits you. Paid plans open every lab and the full curriculum.
Every lab — all 200+ of them, including the agent and MCP labs, not just the 25 community ones — plus all learning paths, the written curriculum and concept videos, isolated cloud containers for the provisioned-app labs, and progress tracking. New labs land every week.
Web, mobile, cloud and API each became 'mandatory' years before most job posts demanded them. AI security is in the same position now. The people who trained first became the ones scoping everyone else's engagements — and the ones who set the rates.
Your plan stays active until the end of the period you've already paid for; after that your account returns to the free tier. Your completed labs and coverage stay exactly where they are, ready if you come back.
On Individual and Team, no — the certifications are bought on their own, with a plan or none at all. GSCP is $199 and includes one month of full lab access; GSCE is $399 and includes three months of full lab access to prepare. Both include one free retake; further attempts are $99 each. Enterprise is the exception: GSCP and GSCE are included for every seat.
Yes. On a yearly Individual or Team plan, GSCP and GSCE are 25% off — $149.25 and $299.25. Students get 40% off with a coupon from support — $119.40 and $239.40. Discounts don't combine; you get the larger one. Without a yearly plan or a student coupon, the certifications are standard price.
Email [email protected] from your school email address. It must be on a .edu, .edu.* or .ac.* domain (for example mit.edu, unimelb.edu.au or ox.ac.uk) to qualify. We'll send you a student discount coupon within 1 business day. Enter it at checkout. It's a flat 40% off what you buy as an individual: the yearly Individual plan, the 4-Month Pass, and the GSCP and GSCE certifications. It isn't available on monthly billing or on Team.
GSCP (GenAI Security Certified Professional, $199) is the intermediate, hands-on exam: the same live-target format as GSCE: 4 hours, weighted 80% OWASP LLM Top 10 and 20% web, with easier objectives. It includes one month of labs to prepare. GSCE ($399) is the full expert-level exam — the wider LLM, agentic and MCP scope plus web and cloud, and three months of labs to prepare. In both you write a few lines on how you found each issue, and an examiner reviews every sitting before the credential is issued. Start with GSCP if your AI-specific technique is still building; go straight to GSCE if you can already land exploits unaided.
GSCE proves you can find and exploit real AI vulnerabilities, and write up how to fix them, not just define them — graded against live targets. It's weighted 75% GenAI security (LLM, Agentic AI, and MCP), 20% web, and 5% cloud, so it certifies a next-generation pentester who can attack modern AI systems and the stack around them. It's verifiable and shareable with employers or clients.
Against randomized, per-candidate live targets — you exploit real vulnerabilities and write a few lines on how you found each one, with no multiple choice. The sitting is proctored through your webcam, and a named examiner reviews it before the credential is issued. Your result is banded rather than a bare pass mark, so it says how well you did, not just whether you got through.
Centralized billing and seat management, the ability to assign labs and learning paths, groups with role-based access, coverage insights, usage and engagement analytics, compliance and certification reports, an audit log, and a login policy covering sign-in methods, allowed domains, and session timeout (SAML SSO and SCIM are Enterprise features, set up on request). It's the console that lets you see exactly who's covered and who isn't.
Anytime. Switch to yearly to lock in the saving — 33%, depending on the plan — and switch back to monthly at the end of a term. Upgrades take effect immediately and we prorate the difference.
A one-off purchase of 4 months of everything in Individual, for $99 paid once. It does not auto-renew: no card is kept on file, there is nothing to cancel, and when the 4 months are up your account simply reverts to the free tier. It exists because a lot of people want a concentrated run at the material — a project, an exam, a stretch between engagements — rather than an open-ended subscription. It works out at $25/month, which is less than paying monthly for the same period and more per month than the yearly plan. You can buy another when it expires.
Team is priced per seat: $39/seat/month billed yearly, or $59/seat/month billed monthly, with a 4-seat minimum. Every seat is billed at the same rate — there is no separate base fee and no add-on line. Seats are added from the billing page and prorated when added mid-term. A seat is for one named person who trains, and can be reassigned when someone leaves. Team Admins, Billing Admins and Read Only Users take no seat and are not billed: they run the workspace and get the free labs only. A manager who also trains takes a seat like any Team Member. From 5 users you can move to Enterprise (from $99/seat/month, billed yearly) for both certifications on every seat, with purchase-order invoicing and SAML SSO and SCIM set up on request. Anything custom is charged additionally.
Try the free tier first — 25 community labs, no card — to see if it's for you. If you upgrade and change your mind, full refund within 7 days, provided you haven't completed more than 10% of the paid labs (free community labs don't count) or passed the certification exam.