Web & API Security Testing Expert
Examine modern authentication, GraphQL and gRPC interfaces, API supply-chain risk, SSRF, and deserialization attacks.
Apply without an account. Review precedes enrollment.Understand the work.
Demonstrate your knowledge.
Evaluate security boundaries in web applications and APIs. The scope combines authentication and session analysis with API protocols, dependency risk, server-side request behavior, and unsafe data processing.
Offensive Security
Use the published topics to assess how this credential relates to your responsibilities.
Examination required
Enrollment or admission alone does not award the certification. Passing the assessment does.
Domains & objectives.
Explore the knowledge and capabilities covered by each domain.
Authentication & sessions
- Identify trust assumptions in authentication and session management.
- Assess whether identity and authorization controls hold across requests.
Map the lifecycle of a session from authentication through authorization and termination. Consider how identity is represented across requests.
Be ready to explain
Explain the checks that establish identity and the separate checks that determine access to a resource.
Who it’s for.
Application security engineers, web and API penetration testers, and developers assessing authentication, authorization, and integration boundaries.
Before you begin
Bring relevant professional experience and a clear description of your own contribution to security projects. Applications should be accurate and respect client confidentiality.
The examination.
Complete the examination within the allotted time and follow the instructions in your candidate account. An active enrollment is required to begin an attempt. Review the published scope and make sure your preparation covers each topic.
Turn the scope into a study plan.
Use the syllabus as a checklist. Review concepts you can already explain, identify topics that need practice, and relate each area to a concrete example from your work. Preparation supports your learning; certification depends on assessment.
Review
Map your knowledge to the published topics.
Practice
Work through authorized exercises and record what you learn.
Revisit
Explain the reasoning and review gaps before examination.
Your questions, answered.
How do I get started?+
Submit a free application with your professional experience and supporting evidence. Admissions reviews it and contacts you at the email address provided. Accepted applicants receive a private invitation to connect their candidate account and enroll.
What are the examination requirements?+
The published duration is 90 minutes, with a passing score of 70%. Review the exam details and syllabus, then follow the instructions in your candidate account.
Does enrollment award the certification?+
No. An active enrollment provides access to the configured preparation and examination. You must meet the assessment requirements and pass to earn the credential.
How can an employer verify my credential?+
Issued credentials have a unique ID and public verification record. The record identifies the holder, certification, issue and expiry dates, and current status. This certification has a validity period of 3 years.