CASP — Practical DevSecOps Certified API Security Professional
Practical DevSecOps's API security certification. 5 task-based challenges, 6-hour lab + 24-hour report, 80% pass. Covers OWASP API Top 10, broken object-level and function-level authorization, OAuth 2.0/JWT exploitation, GraphQL security testing, SOAP/REST attack techniques, CI/CD-integrated API security automation, API gateway hardening with Kong, HashiCorp Vault for API secrets, and OWASP ASVS auditing. $899 with 30+ exercises and 36 CPE credits. Lifetime validity. Widely chosen by AppSec engineers specializing in API testing.
| Issuer | Practical DevSecOps |
|---|
| Level | intermediate |
|---|
| Domains | Application Security |
|---|
| Practical weight | 100% |
|---|
| Cost (USD) | 899 |
|---|
| Renewal | lifetime |
|---|
| Skills | api_security, owasp_api_top_10, broken_object_level_authorization, oauth2_exploitation, jwt_attacks, graphql_security, soap_rest_attacks, api_gateway_hardening, kong_gateway, hashicorp_vault_api, owasp_asvs_auditing, ci_cd_api_security |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap