Microsoft GitHub Advanced Security (GH-500)
The GH-500 exam is designed for professionals who implement and configure GitHub. It validates your ability to describe GitHub Security suites, features, and ecosystem, configure and use Secret Protection, configure and use supply chain security, configure and use Code Security, security operations: best practices, prioritization, and remediation, and GitHub Security suites administration.
For credential details, see GitHub Advanced Security on Microsoft Learn.
Exam details
- Certification
- GitHub Advanced Security
- Application
- GitHub
- Exam code
- GH-500
- Level
- Intermediate
- Passing score
- 700 out of 1000
- Renewal
- Valid for 2 years; GitHub is transitioning to Microsoft's recertification process.
Skills measured
Describe GitHub Security suites, features, and ecosystem (15–20%)
- Compare Code Security, Secret Protection, and Supply Chain Security.
- Use the security overview and apply secure software development practices.
Configure and use Secret Protection (15–20%)
- Configure secret scanning and push protection.
- Triage, investigate, and remediate secret alerts.
Configure and use supply chain security (15–20%)
- Use Dependabot and dependency review to identify vulnerable dependencies.
- Prioritize and address supply chain security alerts.
Configure and use Code Security (10–15%)
- Configure code scanning with CodeQL.
- Triage and remediate code scanning alerts.
Security operations: best practices, prioritization, and remediation (15–20%)
- Prioritize security work and coordinate remediation.
- Use policies, workflows, and automation to improve security operations.
GitHub Security suites administration (10–15%)
- Manage security suite settings and access.
- Apply GitHub security features consistently across organizations.
Study Resources
Frequently asked questions
Who should take GH-500?
GH-500 is for software development and security professionals with hands-on experience using GitHub Advanced Security. Candidates should know GitHub and secure development workflows and be able to configure security features, triage and remediate alerts, and apply prevention-first practices.
What is the average salary for a GitHub Advanced Security professional?
There is no reliable salary figure specific to GH-500. In the U.S., the Bureau of Labor Statistics reported a median annual wage of $129,180 for information security analysts in May 2025. In the UK, Cybersecurity Engineer vacancies had a median advertised salary of £70,000 in the six months to October 11, 2026. These are broad role comparisons, not GH-500-specific salary estimates; pay varies by location, experience, and responsibilities.
How should I prepare for GH-500?
Access the free GH-500T00-A course on Microsoft Learn. Then use Microsoft's free GH-500 Practice Assessment or the MeasureUp GH-500 practice test. Compare third-party practice material with Microsoft's current study guide.
Avoid exam dumps: using them can invalidate your score, revoke certifications you already hold, and bar you from future exams.
You can also search the Microsoft Training Services Partners directory for instructor-led options. Current U.S. listings for GH-500 training are $650 for the one-day public group course at Koenig Solutions and $695 at New Horizons. Prices vary by provider and format.
Does the exam include official labs I can use to practice?
GH-500 may include interactive components as part of the exam, but these are not practice labs. The self-paced GH-500T00-A course on Microsoft Learn is for self-directed study.
For hands-on instructor-led training, Koenig Solutions' GH-500 course advertises hands-on labs. Confirm the lab environment and access terms with the provider.