AI Security Certifications in 2026: SecAI+, AAISM, GIAC and More

For most security professionals, the AI security certification to start with is CompTIA SecAI+ (CY0-001): a $298 exam with up to 60 questions in 60 minutes, launched February 17, 2026 for people with a few years of hands-on security work. Security managers who already hold a CISM or CISSP should look at ISACA’s AAISM, and hands-on testers now have AI certifications from GIAC and EC-Council.

One warning before you shop: several popular “AI security” credentials are certificates (proof you finished a course and passed its assessment), not certifications (a proctored exam plus ongoing renewal). Below you’ll find the best AI cybersecurity certification for each role, a comparison table that labels which is which, and the details for each one, all checked on the certifying body’s own site.

The short answer: the best AI security certification for your role

• Security analysts and engineers: CompTIA SecAI+. It’s vendor-neutral, costs $298, and covers both securing AI systems and using AI for security.
• Security managers and CISOs: ISACA AAISM (Advanced in AI Security Management). You need an active CISM or CISSP.
• AI application and platform security engineers: GIAC AI Platform Security (GAIPS), which maps to SANS SEC545.
• Red teamers and penetration testers: GIAC Offensive AI Analyst (GOAA) or EC-Council’s Certified Offensive AI Security Professional (COASP). GIAC’s AI Penetration Tester (GAIPT) opens for general purchase on February 9, 2027.
• SOC, detection and automation engineers: GIAC AI Security Automation Engineer (GASAE).
• Security data scientists: GIAC Machine Learning Engineer (GMLE).
• AWS cloud security engineers: AWS Certified Security Specialty (SCS-C03), which AWS says now has a dedicated focus on generative AI and machine learning security.
• Want structured learning rather than a high-stakes exam: Cloud Security Alliance’s TAISE or ISC2’s AI Security Certificate. Both are certificates.
• ISC2 loyalists: ISC2 is building its own AI security certification. It expects a pilot exam by the end of 2026 and an operational certification in 2027.

AI cybersecurity certifications compared

Costs are each body’s published list prices in US dollars. “Type” tells you whether you’re getting a maintained certification or a one-time certificate.

Budgeting for a cert? Our real cost of AI certifications guide adds training and renewal to the exam fee, and the cost calculator does it for your exact list →

CompTIA SecAI+ (CY0-001)

SecAI+ is CompTIA’s vendor-neutral AI security certification. It isn’t an entry-level cert: CompTIA recommends 3–4 years in IT and at least two years of hands-on cybersecurity, with Security+, CySA+, PenTest+ or equivalent experience.

• Cost: $298 for the exam voucher, or $332 with Retake Assurance.
• Format: up to 60 multiple-choice and performance-based questions in 60 minutes. Passing is 600 on a 100–900 scale. Offered in English and Japanese.
• Published outline: Basic AI concepts related to cybersecurity (17%), Securing AI systems (40%), AI-assisted security (24%), AI governance, risk, and compliance (19%).
• Keeping it: valid for three years. Renew with 15 CEUs and a $75 continuing education fee, or by passing a qualifying higher-level CompTIA exam. Earning SecAI+ also counts toward renewing other CompTIA certifications, including 15 CEUs toward Security+.
• Shelf life: CompTIA estimates this exam version will retire about three years after launch.

ISACA AAISM: AI security for managers

ISACA launched the Advanced in AI Security Management (AAISM) on August 19, 2025. It’s open only to people who hold an active CISM or CISSP, and it’s aimed at the people who run security programs rather than the people who test models.

• Cost: $459 for ISACA members or $599 for non-members, plus a one-time $50 application fee after you pass.
• Format: 90 multiple-choice questions in 2.5 hours, at a PSI test center or remotely proctored. Scored from 200 to 800 with 450 to pass. Offered in English, Spanish and Japanese.
• Published outline: AI Governance and Program Management (31%), AI Risk Management (31%), AI Technologies and Controls (38%).
• Retakes: four attempts in a rolling 12 months, with waits of 30, 90 and 90 days, at the full fee each time.
• Keeping it: 10 CPE hours a year (30 over three years), a $20 (members) or $35 (non-members) annual fee, and proof that your CISM or CISSP is still active.

ISACA’s other two AI credentials, the AAIA for auditors and the AAIR for risk professionals, lean toward governance rather than security. If your job mixes both, our AI governance operating model for mid-size IT shows where security and governance meet.

GIAC’s AI security certifications

GIAC is the certification body that pairs with SANS training. Each GIAC certification maps to a SANS course, but you can also buy just the certification attempt. Most attempts cost $999, and retakes cost $899. Exams are proctored online through ProctorU or at a Pearson VUE test center, and you get 120 days from activation to sit the exam. Every GIAC certification renews every four years with 36 CPEs and a $499 fee.

• GIAC AI Platform Security (GAIPS): tied to SANS SEC545, GenAI and LLM Application Security. 54 questions, 2 hours, 65% to pass. GIAC’s published objectives cover agentic systems, LLM foundations, application architecture, infrastructure security, risk management, development pipelines, knowledge augmentation and model customization. Aimed at AI/ML engineers, AppSec and cloud security engineers, auditors and risk managers.
• GIAC Offensive AI Analyst (GOAA): tied to SANS SEC535, Offensive AI: Attack Tools and Techniques. 56 questions, 2 hours, 67% to pass. For SOC analysts, red teamers, penetration testers and security engineers who need to understand AI-powered attacks.
• GIAC AI Security Automation Engineer (GASAE): tied to SANS SEC598. 82 questions, 3 hours, 70% to pass. For SOC analysts, detection engineers, threat hunters and automation engineers.
• GIAC Machine Learning Engineer (GMLE): tied to SANS SEC595, Applied Data Science and AI/Machine Learning for Cybersecurity Professionals. 82 questions, 3 hours, 65% to pass.
• GIAC AI Penetration Tester (GAIPT): in presale, and only with an affiliated SANS course for now. GIAC says general purchase opens February 9, 2027. It covers testing LLMs, retrieval-augmented generation pipelines, machine learning models, computer vision and agentic AI.

EC-Council COASP: Certified Offensive AI Security Professional

EC-Council launched four AI credentials on February 10, 2026, and COASP is the security one. It’s a real certification with a proctored exam: 70 questions (65 multiple choice and 5 practical, performance-based challenges) over 6 hours, covering prompt injection, agent hijacking, model extraction, data poisoning and supply chain attacks.

• Cost: sold with training, starting at $1,699 on demand, $2,499 live online and $3,299 in person. EC-Council says the exam voucher is valid for one year.
• Who it’s for: penetration testers, red teamers and offensive security engineers. EC-Council says it isn’t a beginner course and expects foundational cybersecurity knowledge.
• Keeping it: 120 EC-Council continuing education (ECE) credits over a three-year cycle.

Certificates: CSA TAISE and ISC2’s AI Security Certificate

These two are useful learning paths, but neither is a maintained certification. List them on a resume as certificates.

Cloud Security Alliance TAISE: Trusted AI Safety Expert

Launched October 22, 2025, and sold only as a $795 bundle of training and an exam with two attempts, valid for two years. The exam is 60 multiple-choice questions in 120 minutes, online, open book and unproctored, with 80% to pass. Ten modules run from generative AI architecture through governance, risk and compliance, AI security, cloud security and data privacy. There are no prerequisites, and CSA says the certificate doesn’t expire.

ISC2 AI Security Certificate

ISC2 launched this certificate on July 31, 2025 (the course page also calls it the Building AI Strategy Certificate). It’s six on-demand courses, including AI for Cybersecurity, Foundations of AI and Aligning with Global AI Regulations: about 16 hours that earn 16 CPE credits and a Credly badge. You pass an assessment in each course and have 60 days to finish. ISC2 doesn’t publish the price without a login, but members get 20% off.

ISC2’s AI security certification is coming

On July 15, 2026, ISC2 announced it is developing a full AI security certification. ISC2 says it hasn’t picked a name or set eligibility rules yet. It expects a pilot exam by the end of 2026 and an operational certification in 2027. Unlike the certificate above, it will require continuing education and renewal. In the meantime, ISC2 has published guidance on how AI security topics already appear across its existing exams, including Certified in Cybersecurity (CC).

Vendor exams with an AI security domain

If your organization runs on one platform, a vendor exam can cover AI security in the context you actually work in.

All three AWS certifications are valid for three years. The Claude exam is open only to people at Claude Partner Network companies; see who can take it and the CCDV-F study guide. For AWS, start with the AWS AI Practitioner exam cost breakdown.

How to choose an AI security certification

1. Decide whether you manage or do. If you run a security program, the AAISM fits. If you test, build or defend systems hands-on, look at SecAI+, GIAC or COASP.
2. Check the prerequisite. The AAISM requires an active CISM or CISSP. SecAI+ recommends experience but doesn’t require a prior cert. GIAC and the CSA certificate have no formal prerequisite on the pages we checked.
3. Compare the real budget. SecAI+ is $298. A GIAC attempt alone is $999, and SANS training costs extra. COASP is sold with training from $1,699. The AAISM is $459 to $599 plus a $50 application fee and a yearly maintenance fee.
4. Match your stack. On AWS, SCS-C03 or AIP-C01 test AI security in the services you use. Building on Claude at a partner firm? CCDV-F includes a security and safety domain.
5. Plan for renewal. Renewal cycles run from three to four years, and certificates never expire. See do AI certifications expire? and the free renewal tracker.
6. Back it with real controls. A cert proves knowledge; your environment proves practice. Start with AI security readiness, identity as your AI control plane, sensitivity labels and DLP before AI and two questions for every AI vendor review.

Picking for a whole team? See which AI certification your IT team should get first, or compare every major AI exam in our ranked list of AI certifications →

Checked against each body’s site on October 6, 2026: comptia.org, isaca.org, giac.org, eccouncil.org, cloudsecurityalliance.org, isc2.org, aws.amazon.com and Anthropic’s Partner Academy. Prices are list prices in US dollars before taxes, discounts or membership dues.

Keep exploring: AI governance certifications · AI Certification Requirements Index · CompTIA SecAI+ study guide · AAISM study guide. For the enterprise side of AI security, Enterprise Techie covers governing AI agent identities and AI SOC platforms.

Related guides

• AI Governance Certifications in 2026: Every Real Option Compared
• The Best AI Certifications in 2026, Ranked: Which Should You Get?
• What an AI Certification Actually Costs (2026)
• Which AI Certification Should Your IT Team Get First?