APIsec Certified Practitioner

Become an API Security Leader: Earn Your APIsec Certified Practitioner (ACP) Credential‍

The APIsec Certified Practitioner (ACP) credential is a comprehensive training program designed to equip cybersecurity professionals with the skills and knowledge to secure modern applications at their core: the API. As APIs have become the foundation of web and mobile applications, securing them is no longer optional—it’s essential. Gartner has warned that APIs will become “the most frequent attack vector,” a prediction already reflected in the growing number of real-world breaches.

‍

The ACP certification prepares practitioners to lead in this fast-growing field. To earn the certification, students must complete six expert-led courses:

1. API Security Fundamentals – Understand why APIs are targeted, analyze real-world breaches, and explore core security principles.

2. OWASP API Security Top 10 and Beyond! – Deep dive into OWASP’s API-specific risks and guidance.

3. API Authentication – Explore authentication methods and secure implementation techniques.

4. API Documentation Best Practices – Learn how good documentation supports secure development and discover industry best practices.

5. Securing API Servers – A collection of short courses covering topics like CORS, rate limiting, error handling, and more.

‍

After completing all five courses, students can take the ACP final exam, a 100-question assessment covering material from the full curriculum. Those who pass will earn the APIsec Certified Practitioner credential—proof of their expertise in securing APIs and modern application environments.

About the exam