Exam guide · GH-500
The GH-500 exam takes 100 minutes. It costs $99 (in the United States; set by country). Microsoft hasn’t announced a retirement date.
Last updated
The exam at a glance
From Microsoft’s own pages, checked every week (last on November 7, 2026). The cost is checked every week too. How we check our facts
Versions and dates
Microsoft hasn’t announced a retirement date for GH-500. We check Microsoft’s site every week, and this page changes the day it does.
Exam domains
Each domain’s share of the exam, as Microsoft publishes it. Spend your study time in the same proportion.
1Describe GitHub Security Suites, Features, and Ecosystem
15–20%
2Configure and Use Secret Protection (formerly secret scanning)
15–20%
3Configure and Use Supply Chain Security (formerly Dependabot and dependency review)
15–20%
4Configure and Use Code Security (formerly code scanning with CodeQL)
10–15%
5Security Operations: Best Practices, Prioritization, and Remediation
15–20%
6GitHub Security Suites Administration
10–15%
Prepare
Free tools to find your weak domains and plan your weeks, then full practice exams in OpenpassAI.
Free practice test
Original questions across the exam’s domains, each with an explanation, and your score by domain.
Take the testFree study plan
Pick your exam date and weekly hours, and get a plan weighted like the domains above.
Make my planMicrosoft certifications
Every Microsoft certification on one map, with each exam’s facts checked weekly.
See the Microsoft pageTake it further in OpenpassAI
Timed exams weighted like the real one, an AI tutor that explains every answer, and a readiness score for each domain.
FAQs
Find quick answers or contact our support team.
The GH-500 exam takes 100 minutes.
$99 (in the United States; set by country). Check Microsoft’s site for the price in your country.
Microsoft hasn’t announced one yet. We check Microsoft’s site every week, and this page changes the day it does.
None: Microsoft sets no prerequisites for GH-500. Knowing the exam’s domains well is what counts.
Weight your time like the exam: Describe GitHub Security Suites, Features, and Ecosystem, Configure and Use Secret Protection (formerly secret scanning), Configure and Use Supply Chain Security (formerly Dependabot and dependency review) and Security Operations: Best Practices, Prioritization, and Remediation carry the most (15–20% each). Take the free practice test to find your weakest domains, make a study plan around them, and before you book, sit full-length timed practice exams until you pass them comfortably.
SC-500
SC-300
SC-401
SC-200
OpenpassAI
Hi 👋 I’m OpenpassAI. Ready to prepare for your exam the smarter way?
Ready to explore OpenpassAI? I can show you how the platform helps you prepare, practice, and pass.
