Awarded for completing CORS Misconfiguration and Defense and passing its exam, demonstrating the ability to read a CORS configuration for correctness, recognize origin reflection and credentialed-origin misconfigurations, and design, test and operate a properly scoped cross-origin policy.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.